diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2018-08-02 20:12:10 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2018-08-03 09:00:36 +0200 |
| commit | 564ec5a0ace4d77efaa63cccd7f542a454022b6d (patch) | |
| tree | 3711f80ac2edaa4323c6ea5041e1d6d54b2c9312 /source | |
| parent | 22d153f9e271d438e0d5094ac8603b97105665bd (diff) | |
| download | current-564ec5a0ace4d77efaa63cccd7f542a454022b6d.tar.gz current-564ec5a0ace4d77efaa63cccd7f542a454022b6d.tar.xz | |
Thu Aug 2 20:12:10 UTC 201820180802201210
ap/hplip-3.18.7-x86_64-1.txz: Upgraded.
l/harfbuzz-1.8.5-x86_64-1.txz: Upgraded.
n/lftp-4.8.4-x86_64-1.txz: Upgraded.
It has been discovered that lftp up to and including version 4.8.3 does
not properly sanitize remote file names, leading to a loss of integrity
on the local system when reverse mirroring is used. A remote attacker
may trick a user to use reverse mirroring on an attacker controlled FTP
server, resulting in the removal of all files in the current working
directory of the victim's system.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10916
(* Security fix *)
x/fonttosfnt-1.0.5-x86_64-1.txz: Upgraded.
Diffstat (limited to 'source')
| -rwxr-xr-x | source/n/lftp/lftp.SlackBuild | 2 | ||||
| -rw-r--r-- | source/x/x11/build/fonttosfnt | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/source/n/lftp/lftp.SlackBuild b/source/n/lftp/lftp.SlackBuild index 81079405f..d98953be3 100755 --- a/source/n/lftp/lftp.SlackBuild +++ b/source/n/lftp/lftp.SlackBuild @@ -24,7 +24,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=lftp VERSION=${VERSION:-$(echo lftp-*.tar.xz | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-3} +BUILD=${BUILD:-1} NUMJOBS=${NUMJOBS:-" -j7 "} diff --git a/source/x/x11/build/fonttosfnt b/source/x/x11/build/fonttosfnt index 00750edc0..d00491fd7 100644 --- a/source/x/x11/build/fonttosfnt +++ b/source/x/x11/build/fonttosfnt @@ -1 +1 @@ -3 +1 |