Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ====== Slackware-current ChangeLog (2020-05-19) ====== ====== Tue May 19 19:47:49 UTC 2020 ====== ===== Packages ===== ==== Rebuilt ==== * [[slackware.current>a/shadow-4.8.1-i586-8.txz]] \\ It seems that /etc/suauth is not supported when PAM is in use, even if \\ configure.ac is hacked to enable it. I've removed the man pages for it, \\ and would suggest using sudo as a replacement. * [[slackware.current>l/oniguruma-6.9.5_rev1-i586-2.txz]] \\ Rebuilt with --enable-posix-api. Thanks to MisterL. ==== Upgraded ==== * [[slackware.current>l/libexif-0.6.22-i586-1.txz]] \\ This update fixes bugs and security issues: \\ CVE-2018-20030: Fix for recursion DoS \\ CVE-2020-13114: Time consumption DoS when parsing canon array markers \\ CVE-2020-13113: Potential use of uninitialized memory \\ CVE-2020-13112: Various buffer overread fixes due to integer overflows \\ in maker notes \\ CVE-2020-0093: read overflow \\ CVE-2019-9278: replaced integer overflow checks the compiler could \\ optimize away by safer constructs \\ CVE-2020-12767: fixed division by zero \\ CVE-2016-6328: fixed integer overflow when parsing maker notes \\ CVE-2017-7544: fixed buffer overread \\ For more information, see: \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20030 \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13114 \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13113 \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13112 \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0093 \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9278 \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12767 \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6328 \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7544 \\ (* Security fix *) * [[slackware.current>l/python-packaging-20.4-i586-1.txz]] * [[slackware.current>n/bind-9.16.3-i586-1.txz]] \\ This update fixes a security issue: \\ A malicious actor who intentionally exploits the lack of effective \\ limitation on the number of fetches performed when processing referrals \\ can, through the use of specially crafted referrals, cause a recursing \\ server to issue a very large number of fetches in an attempt to process \\ the referral. This has at least two potential effects: The performance of \\ the recursing server can potentially be degraded by the additional work \\ required to perform these fetches, and the attacker can exploit this \\ behavior to use the recursing server as a reflector in a reflection attack \\ with a high amplification factor. \\ For more information, see: \\ https://kb.isc.org/docs/cve-2020-8616 \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8616 \\ (* Security fix *) * [[slackware.current>x/fontconfig-2.13.92-i586-1.txz]] * [[slackware.current>x/xf86-input-libinput-0.30.0-i586-1.txz]] {{tag>slackware changelog slackware-current 2020/05}} news/2020/05/19/slackware-current-changelog.txt Last modified: 4 years agoby Giuseppe Di Terlizzi Log In