Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ====== Slackware-current ChangeLog (2018-08-02) ====== ====== Thu Aug 2 20:12:10 UTC 2018 ====== ===== Packages ===== ==== Upgraded ==== * [[slackware.current>ap/hplip-3.18.7-i586-1.txz]] * [[slackware.current>l/harfbuzz-1.8.5-i586-1.txz]] * [[slackware.current>n/lftp-4.8.4-i586-1.txz]] \\ It has been discovered that lftp up to and including version 4.8.3 does \\ not properly sanitize remote file names, leading to a loss of integrity \\ on the local system when reverse mirroring is used. A remote attacker \\ may trick a user to use reverse mirroring on an attacker controlled FTP \\ server, resulting in the removal of all files in the current working \\ directory of the victim's system. \\ For more information, see: \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10916 \\ (* Security fix *) * [[slackware.current>x/fonttosfnt-1.0.5-i586-1.txz]] {{tag>slackware changelog slackware-current 2018/08}} news/2018/08/02/slackware-current-changelog.txt Last modified: 6 years agoby Giuseppe Di Terlizzi Log In