mirror of
git://slackware.nl/current.git
synced 2025-02-11 08:48:30 +01:00
ab672bcf47
a/kernel-generic-5.18.6-x86_64-1.txz: Upgraded.
a/kernel-huge-5.18.6-x86_64-1.txz: Upgraded.
a/kernel-modules-5.18.6-x86_64-1.txz: Upgraded.
a/openssl-solibs-1.1.1p-x86_64-1.txz: Upgraded.
ap/sudo-1.9.11p3-x86_64-1.txz: Upgraded.
d/kernel-headers-5.18.6-x86-1.txz: Upgraded.
k/kernel-source-5.18.6-noarch-1.txz: Upgraded.
l/espeak-ng-1.51.1-x86_64-1.txz: Upgraded.
l/libidn-1.40-x86_64-1.txz: Upgraded.
l/mlt-7.8.0-x86_64-1.txz: Upgraded.
l/openal-soft-1.22.1-x86_64-1.txz: Upgraded.
l/pulseaudio-16.1-x86_64-1.txz: Upgraded.
l/speex-1.2.1-x86_64-1.txz: Upgraded.
l/speexdsp-1.2.1-x86_64-1.txz: Upgraded.
n/ca-certificates-20220622-noarch-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
n/openssl-1.1.1p-x86_64-1.txz: Upgraded.
In addition to the c_rehash shell command injection identified in
CVE-2022-1292, further circumstances where the c_rehash script does not
properly sanitise shell metacharacters to prevent command injection were
found by code review.
When the CVE-2022-1292 was fixed it was not discovered that there
are other places in the script where the file names of certificates
being hashed were possibly passed to a command executed through the shell.
For more information, see:
https://www.openssl.org/news/secadv/20220621.txt
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068
(* Security fix *)
x/ibus-table-1.16.9-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
46 lines
1.1 KiB
Bash
46 lines
1.1 KiB
Bash
#!/bin/sh
|
|
TMP=/var/log/setup/tmp
|
|
if [ ! -d $TMP ]; then
|
|
mkdir -p $TMP
|
|
fi
|
|
add() {
|
|
for package in $* ; do
|
|
echo "$package: ADD" >> $TMP/SeTnewtag
|
|
done
|
|
}
|
|
skip() {
|
|
for package in $* ; do
|
|
echo "$package: SKP" >> $TMP/SeTnewtag
|
|
done
|
|
}
|
|
#item ####description ###on off ###
|
|
cat /dev/null > $TMP/SeTnewtag
|
|
dialog --title "SELECTING SOFTWARE FROM SERIES K (Linux kernel source)" \
|
|
--checklist "Please confirm the packages you wish to install \
|
|
from series K. Use the UP/DOWN keys to scroll through the list, and \
|
|
the SPACE key to deselect any items you don't want to install. \
|
|
Press ENTER when you are \
|
|
done." 11 70 1 \
|
|
"kernel-source" "Linux 5.18.6 kernel source" "on" \
|
|
2> $TMP/SeTpkgs
|
|
if [ $? = 1 -o $? = 255 ]; then
|
|
rm -f $TMP/SeTpkgs
|
|
> $TMP/SeTnewtag
|
|
for pkg in \
|
|
kernel-source \
|
|
; do
|
|
echo "$pkg: SKP" >> $TMP/SeTnewtag
|
|
done
|
|
exit
|
|
fi
|
|
cat /dev/null > $TMP/SeTnewtag
|
|
for PACKAGE in \
|
|
kernel-source \
|
|
; do
|
|
if grep "\(^\| \)$PACKAGE\( \|$\)" $TMP/SeTpkgs 1> /dev/null 2> /dev/null ; then
|
|
echo "$PACKAGE: ADD" >> $TMP/SeTnewtag
|
|
else
|
|
echo "$PACKAGE: SKP" >> $TMP/SeTnewtag
|
|
fi
|
|
done
|
|
rm -f $TMP/SeTpkgs
|