diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2022-02-15 20:00:48 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2022-02-16 13:29:58 +0100 |
| commit | c9881ad9794a314c7c9d106a6f82d19f07cda088 (patch) | |
| tree | 196a5646afe2bf7edaab38ad306d42a6d56967fe /patches/source/util-linux/slack-desc | |
| parent | 9a5f4fd634196e1d4257a31e89f24291b0398bc5 (diff) | |
| download | current-c9881ad9794a314c7c9d106a6f82d19f07cda088.tar.gz current-c9881ad9794a314c7c9d106a6f82d19f07cda088.tar.xz | |
Tue Feb 15 20:00:48 UTC 202220220215200048_15.0
patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz: Rebuilt.
If root's mailbox did not already exist, it would be created with insecure
permissions leading to possible local information disclosure. This update
ensures that a new mailbox will be created with proper permissions and
ownership, and corrects the permissions on an existing mailbox if they are
found to be incorrect. Thanks to Martin for the bug report.
(* Security fix *)
patches/packages/util-linux-2.37.4-x86_64-1_slack15.0.txz: Upgraded.
This release fixes a security issue in chsh(1) and chfn(8):
By default, these utilities had been linked with libreadline, which allows
the INPUTRC environment variable to be abused to produce an error message
containing data from an arbitrary file. So, don't link these utilities with
libreadline as it does not use secure_getenv() (or a similar concept), or
sanitize the config file path to avoid vulnerabilities that could occur in
set-user-ID or set-group-ID programs.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563
(* Security fix *)
Diffstat (limited to 'patches/source/util-linux/slack-desc')
| -rw-r--r-- | patches/source/util-linux/slack-desc | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/patches/source/util-linux/slack-desc b/patches/source/util-linux/slack-desc new file mode 100644 index 000000000..2ddf35137 --- /dev/null +++ b/patches/source/util-linux/slack-desc @@ -0,0 +1,19 @@ +# HOW TO EDIT THIS FILE: +# The "handy ruler" below makes it easier to edit a package description. Line +# up the first '|' above the ':' following the base package name, and the '|' +# on the right side marks the last column you can put a character in. You must +# make exactly 11 lines for the formatting to be correct. It's also +# customary to leave one space after the ':'. + + |-----handy-ruler------------------------------------------------| +util-linux: util-linux (a huge collection of essential utilities) +util-linux: +util-linux: The util-linux package is a huge collection of random utilities +util-linux: that are essential to run a Linux system. +util-linux: +util-linux: Homepage: https://www.kernel.org/pub/linux/utils/util-linux/ +util-linux: +util-linux: +util-linux: +util-linux: +util-linux: |