This is an old revision of the document!
Slackwarearm-14.2 ChangeLog (2016-05-18)
Wed May 18 11:11:11 UTC 2016
Packages
Rebuilt
- a/aaa_elflibs-14.2-arm-11.txz
- xap/gnuplot-5.0.3-arm-2.txz
Added libcaca support. Thanks to Andrew Clemons. - xap/imagemagick-6.9.4_1-arm-2.txz
Fixed .new config file installation. Thanks to ivandi.
Upgraded
- a/kernel-firmware-20160517git-noarch-1.txz
- a/lvm2-2.02.154-arm-1.txz
- d/mercurial-3.8.2-arm-1.txz
- d/python-setuptools-21.0.0-arm-1.txz
- l/gdbm-1.12-arm-1.txz
- l/libmtp-1.1.11-arm-1.txz
- n/lftp-4.7.1-arm-1.txz
- n/libndp-1.6-arm-1.txz
This update fixes a security issue. It was found that libndp did
not properly validate and check the origin of Neighbor Discovery
Protocol (NDP) messages. An attacker on a non-local network could
use this flaw to advertise a node as a router, allowing them to
perform man-in-the-middle attacks on a connecting client, or
disrupt the network connectivity of that client.
Thanks to Julien Bernard (Viagénie) for reporting this issue.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3698
(* Security fix *)