Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ====== Slackware-current ChangeLog (2020-04-14) ====== ====== Tue Apr 14 22:26:11 UTC 2020 ====== ===== Packages ===== ==== Upgraded ==== * [[slackware.current>a/gawk-5.1.0-i586-1.txz]] * [[slackware.current>a/gettext-0.20.2-i586-1.txz]] * [[slackware.current>d/gettext-tools-0.20.2-i586-1.txz]] * [[slackware.current>d/git-2.26.1-i586-1.txz]] \\ This update fixes a security issue: \\ With a crafted URL that contains a newline in it, the credential helper \\ machinery can be fooled to give credential information for a wrong host. \\ The attack has been made impossible by forbidding a newline character in \\ any value passed via the credential protocol. Credit for finding the \\ vulnerability goes to Felix Wilhelm of Google Project Zero. \\ For more information, see: \\ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5260 \\ (* Security fix *) * [[slackware.current>l/glib-networking-2.64.2-i586-1.txz]] * [[slackware.current>l/libsecret-0.20.3-i586-1.txz]] * [[slackware.current>n/php-7.4.5-i586-1.txz]] * [[slackware.current>x/xorgproto-2020.1-i586-1.txz]] * [[slackware.current>xap/audacious-4.0.2-i586-1.txz]] * [[slackware.current>xap/audacious-plugins-4.0.2-i586-1.txz]] * [[slackware.current>extra/pure-alsa-system/audacious-plugins-4.0.2-i586-1_alsa.txz]] {{tag>slackware changelog slackware-current 2020/04}} news/2020/04/14/slackware-current-changelog.txt Last modified: 4 years agoby Giuseppe Di Terlizzi Log In