Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ====== Slackware-14.1 ChangeLog (2018-10-10) ====== ====== Wed Oct 10 23:09:36 UTC 2018 ====== ===== Packages ===== ==== Upgraded ==== * [[slackware.14.1>patches/packages/git-2.14.5-i486-1_slack14.1.txz]] \\ This update fixes a security issue: \\ Submodules' "URL"s come from the untrusted .gitmodules file, but we \\ blindly gave it to "git clone" to clone submodules when "git clone \\ --recurse-submodules" was used to clone a project that has such a \\ submodule. The code has been hardened to reject such malformed URLs \\ (e.g. one that begins with a dash). Credit for finding and fixing this \\ vulnerability goes to joernchen and Jeff King, respectively. \\ For more information, see: \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17456 \\ (* Security fix *) {{tag>slackware changelog slackware-14.1 2018-10}} news/2018/10/10/slackware-14.1-changelog.txt Last modified: 13 months agoby Giuseppe Di Terlizzi Log In