Slackwarearm-14.2 ChangeLog (2022-11-10)

Thu Nov 10 08:08:08 UTC 2022

Thanks to everyone who has responded to the plea to help with the running
costs of the project!

If you like using the ARM port and are able to help contribute to the
running costs, that'd be certainly appreciated!

There are two donation options available:
https://www.paypal.com/paypalme/armedslack
https://www.patreon.com/armedslack

Thanks
Stuart <mozes@slackware>
  • patches/packages/sysstat-12.7.1-arm-1_slack14.2.txz
    On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1,
    allocate_structures contains a size_t overflow in sa_common.c. The
    allocate_structures function insufficiently checks bounds before arithmetic
    multiplication, allowing for an overflow in the size allocated for the
    buffer representing system activities.
    This issue may lead to Remote Code Execution (RCE).
    For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2022-39377
    (* Security fix *)
  • news/2022/11/10/slackwarearm-14.2-changelog.txt
  • Last modified: 16 months ago
  • by Giuseppe Di Terlizzi