slackware-current/patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txt

aaa_base: aaa_base (Basic Linux filesystem package)
aaa_base:
aaa_base: Sets up the empty directory tree for Slackware and adds an email to
aaa_base: root's mailbox welcoming them to Linux. :)  This package should be
aaa_base: installed first, and never uninstalled.
aaa_base:
aaa_base:
aaa_base:
aaa_base:
aaa_base:
aaa_base:
Tue Feb 15 20:00:48 UTC 2022 patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz: Rebuilt. If root's mailbox did not already exist, it would be created with insecure permissions leading to possible local information disclosure. This update ensures that a new mailbox will be created with proper permissions and ownership, and corrects the permissions on an existing mailbox if they are found to be incorrect. Thanks to Martin for the bug report. (* Security fix ) patches/packages/util-linux-2.37.4-x86_64-1_slack15.0.txz: Upgraded. This release fixes a security issue in chsh(1) and chfn(8): By default, these utilities had been linked with libreadline, which allows the INPUTRC environment variable to be abused to produce an error message containing data from an arbitrary file. So, don't link these utilities with libreadline as it does not use secure_getenv() (or a similar concept), or sanitize the config file path to avoid vulnerabilities that could occur in set-user-ID or set-group-ID programs. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563 ( Security fix *) 2022-02-15 21:00:48 +01:00			`aaa_base: aaa_base (Basic Linux filesystem package)`
			`aaa_base:`
			`aaa_base: Sets up the empty directory tree for Slackware and adds an email to`
			`aaa_base: root's mailbox welcoming them to Linux. :) This package should be`
			`aaa_base: installed first, and never uninstalled.`
			`aaa_base:`
			`aaa_base:`
			`aaa_base:`
			`aaa_base:`
			`aaa_base:`
			`aaa_base:`