Slackwarearm-current ChangeLog (2017-03-02)

Thu Mar 2 20:21:22 UTC 2017

  • a/ed-1.14.2-arm-1.txz
  • a/glibc-zoneinfo-2017a-arm-1.txz
  • a/libcgroup-0.41-arm-1.txz
    Fixed rc.cgred to source the correct config file.
    Changed /usr/bin/cgexec from setuid root to setgid cgred.
    Don't remove the entire cgroup file system with “rc.cgconfig stop”.
    Thanks to chris.willing.
  • a/util-linux-2.29.2-arm-1.txz
    This update fixes a potential security issue that allows any local user
    to send SIGKILL to other processes with root privileges. Note that
    Slackware is not vulnerable since we do not use /bin/su from util-linux,
    and the bug only affects systems that use PAM.
    For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2616
    (* Security fix *)
  • ap/nano-2.7.5-arm-1.txz
  • ap/screen-4.5.1-arm-1.txz
  • l/cairo-1.14.8-arm-1.txz
  • l/fftw-3.3.6_pl1-arm-1.txz
  • l/libsigsegv-2.11-arm-1.txz
  • n/ModemManager-1.6.4-arm-1.txz
  • n/NetworkManager-1.6.2-arm-1.txz
  • n/curl-7.53.1-arm-1.txz
    Fixes SSL_VERIFYSTATUS ignored security issue.
    (Issue only existed in Slackware -current, not in any -stable releases)
    For more information, see:
    https://curl.haxx.se/docs/adv_20170222.html
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2629
    (* Security fix *)
  • n/libmbim-1.14.0-arm-1.txz
  • n/libqmi-1.16.2-arm-1.txz
    Shared library .so-version bump.
  • a/etc-14.2-arm-2.txz
    Added cgred group to /etc/group.new. (cgred:x:41:)
  • a/shadow-4.2.1-arm-2.txz
    Patched a potential security issue that allows any local user to send
    SIGKILL to other processes with root privileges. Note that Slackware
    is not vulnerable since the bug only affects systems that use PAM.
    For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2616
    (* Security fix *)
  • l/libimobiledevice-1.2.0-arm-2.txz
    Patched to fix mounting iOS 10 devices. Thanks to qunying.
  • xap/windowmaker-0.95.7-arm-2.txz
    Disabled overly verbose logging of warnings to syslog. Thanks to B Watson.
  • news/2017/03/02/slackwarearm-current-changelog.txt
  • Last modified: 4 years ago
  • by Giuseppe Di Terlizzi