mirror of
git://slackware.nl/current.git
synced 2024-12-26 09:58:59 +01:00
9aefad1034
ap/alsa-utils-1.2.12-x86_64-1.txz: Upgraded.
ap/cups-2.4.9-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
When starting the cupsd server with a Listen configuration item pointing
to a symbolic link, the cupsd process can be caused to perform an arbitrary
chmod of the provided argument, providing world-writable access to the
target.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-35235
(* Security fix *)
l/alsa-lib-1.2.12-x86_64-1.txz: Upgraded.
l/alsa-plugins-1.2.12-x86_64-1.txz: Upgraded.
l/aom-3.9.1-x86_64-1.txz: Upgraded.
l/mozjs115-115.12.0esr-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-127.0-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/127.0/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2024-25/
https://www.cve.org/CVERecord?id=CVE-2024-5687
https://www.cve.org/CVERecord?id=CVE-2024-5688
https://www.cve.org/CVERecord?id=CVE-2024-5689
https://www.cve.org/CVERecord?id=CVE-2024-5690
https://www.cve.org/CVERecord?id=CVE-2024-5691
https://www.cve.org/CVERecord?id=CVE-2024-5692
https://www.cve.org/CVERecord?id=CVE-2024-5693
https://www.cve.org/CVERecord?id=CVE-2024-5694
https://www.cve.org/CVERecord?id=CVE-2024-5695
https://www.cve.org/CVERecord?id=CVE-2024-5696
https://www.cve.org/CVERecord?id=CVE-2024-5697
https://www.cve.org/CVERecord?id=CVE-2024-5698
https://www.cve.org/CVERecord?id=CVE-2024-5699
https://www.cve.org/CVERecord?id=CVE-2024-5700
https://www.cve.org/CVERecord?id=CVE-2024-5701
(* Security fix *)
xfce/xfce4-settings-4.18.6-x86_64-1.txz: Upgraded.
|
||
|---|---|---|
| .. | ||
| a | ||
| ap | ||
| d | ||
| e | ||
| f | ||
| installer | ||
| k | ||
| kde | ||
| l | ||
| n | ||
| t | ||
| tcl | ||
| x | ||
| xap | ||
| xfce | ||
| y | ||
| buildlist-from-changelog.sh | ||
| make_world.sh | ||
| README.TXT | ||
This is the source used for Slackware. To look for a particular bit of source (let's say for 'cp'), first you would look for the full path: fuzzy:~# which cp /bin/cp Then, you grep for the package it came from. Note that the leading '/' is removed, and ^ and $ mark the beginning and end of the pattern to match: fuzzy:~# grep ^bin/cp$ /var/lib/pkgtools/packages/* /var/lib/pkgtools/packages/coreutils-9.0-x86_64-3:bin/cp From this, you can see that 'cp' came from the coreutils-9.0-x86_64-3 package. The source will be found in a corresponding subdirectory. In this case, that would be ./a/coreutils/. All of these packages have scripts that extract, patch, and compile the source automatically. These are the 'SlackBuild' scripts. Have fun! --- Patrick J. Volkerding volkerdi@slackware.com