Slackwarearm-14.2 ChangeLog (2015-08-01)

Sat Aug 1 13:38:59 UTC 2015

/INSTALL_BANANAPI.TXT: Updated.
Added support for the Banana Pi Pro.
  • ap/slackpkg-2.82.0-noarch-14.txz
    Patched to abort immediately if the date is not recent (at least July 2015).
    This is usually a problem with Raspberry Pi systems that do not have an RTC,
    and where no NTP client has been configured: resulting in the system's date
    being at UNIX Epoch time (1970).
    With the date so far in the past, GPG fails with a generic verification
    failure message, resulting in confusion as to whether the packages or keys
    have been tampered with.
  • n/bind-9.10.2_P3-arm-1.txz
    This update fixes a security issue where an error in the handling of TKEY
    queries can be exploited by an attacker for use as a denial-of-service
    vector, as a constructed packet can use the defect to trigger a REQUIRE
    assertion failure, causing BIND to exit.
    Impact:
    Both recursive and authoritative servers are vulnerable to this defect.
    Additionally, exposure is not prevented by either ACLs or configuration
    options limiting or denying service because the exploitable code occurs
    early in the packet handling, before checks enforcing those boundaries.
    Operators should take steps to upgrade to a patched version as soon as
    possible.
    For more information, see:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5477
    https://kb.isc.org/article/AA-01272
    (* Security fix *)
  • news/2015/08/01/slackwarearm-14.2-changelog.txt
  • Last modified: 6 months ago
  • by Giuseppe Di Terlizzi