Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ====== Slackware64-14.0 ChangeLog (2018-10-10) ====== ====== Wed Oct 10 23:09:36 UTC 2018 ====== ===== Packages ===== ==== Upgraded ==== * [[slackware64.14.0>patches/packages/git-2.14.5-x86_64-1_slack14.0.txz]] \\ This update fixes a security issue: \\ Submodules' "URL"s come from the untrusted .gitmodules file, but we \\ blindly gave it to "git clone" to clone submodules when "git clone \\ --recurse-submodules" was used to clone a project that has such a \\ submodule. The code has been hardened to reject such malformed URLs \\ (e.g. one that begins with a dash). Credit for finding and fixing this \\ vulnerability goes to joernchen and Jeff King, respectively. \\ For more information, see: \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17456 \\ (* Security fix *) {{tag>slackware changelog slackware64-14.0 2018-10}} news/2018/10/10/slackware64-14.0-changelog.txt Last modified: 12 months agoby Giuseppe Di Terlizzi Log In