Slackwarearm-current ChangeLog (2020-09-30)
Wed Sep 30 08:08:08 UTC 2020
The mini root filesystem has been updated:
ftp://ftp.arm.slackware.com/slackwarearm/slackwarearm-devtools/minirootfs/
Packages
Upgraded
- a/grep-3.5-arm-1.txz
- a/kernel-firmware-20200928_b78a66c-noarch-1.txz
- a/openssl-solibs-1.1.1h-arm-1.txz
- ap/cups-filters-1.28.3-arm-1.txz
- ap/ghostscript-9.53.2-arm-1.txz
- ap/sudo-1.9.3p1-arm-1.txz
- ap/vim-8.2.1728-arm-1.txz
- d/cmake-3.18.3-arm-1.txz
- d/parallel-20200922-noarch-1.txz
- d/python3-3.8.6-arm-1.txz
- d/strace-5.9-arm-1.txz
- d/vala-0.50.1-arm-1.txz
- l/imagemagick-7.0.10_30-arm-1.txz
- l/jasper-2.0.21-arm-1.txz
- l/libsndfile-1.0.30-arm-1.txz
- l/libuv-1.40.0-arm-1.txz
- l/mozilla-nss-3.57-arm-1.txz
- l/mozjs78-78.3.0esr-arm-1.txz
- l/netpbm-10.92.00-arm-1.txz
- l/pango-1.46.2-arm-1.txz
- n/mcabber-1.1.2-arm-1.txz
- n/mtr-0.94-arm-1.txz
- n/openssh-8.4p1-arm-1.txz
- n/openssl-1.1.1h-arm-1.txz
- n/php-7.4.11-arm-1.txz
This update fixes bugs and two security issues:
Core: PHP parses encoded cookie names so malicious `__Host-` cookies
can be sent.
OpenSSL: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7070
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7069
(* Security fix *) - n/samba-4.13.0-arm-1.txz
- x/mesa-20.2.0-arm-1.txz
- x/xterm-360-arm-1.txz
- xap/mozilla-firefox-78.3.0esr-arm-1.txz
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/78.3.0/releasenotes/
(* Security fix *) - xap/vim-gvim-8.2.1728-arm-1.txz
Added
- d/autoconf-archive-2019.01.06-arm-1.txz