The following updates has been released for Slackware Linux:
glibc (SSA:2017-181-01)
kernel (SSA:2017-181-02)
glibc (SSA:2017-181-01)
kernel (SSA:2017-181-02)
glibc (SSA:2017-181-01)
New glibc packages are available for Slackware 14.2 and -current to fix security issues.
Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/glibc-2.23-i586-2_slack14.2.txz: Rebuilt.
Applied upstream security hardening patches from git.
For more information, see:
https://sourceware.org/git/?p=glibc.git;a=commit;h=3c7cd21290cabdadd72984fb69bc51e64ff1002d
https://sourceware.org/git/?p=glibc.git;a=commit;h=46703a3995aa3ca2b816814aa4ad05ed524194dd
https://sourceware.org/git/?p=glibc.git;a=commit;h=c69d4a0f680a24fdbe323764a50382ad324041e9
https://sourceware.org/git/?p=glibc.git;a=commit;h=3776f38fcd267c127ba5eb222e2c614c191744aa
https://sourceware.org/git/?p=glibc.git;a=commit;h=adc7e06fb412a2a1ee52f8cb788caf436335b9f3
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366
(* Security fix *)
patches/packages/glibc-i18n-2.23-i586-2_slack14.2.txz: Rebuilt.
patches/packages/glibc-profile-2.23-i586-2_slack14.2.txz: Rebuilt.
(* Security fix *)
patches/packages/glibc-solibs-2.23-i586-2_slack14.2.txz: Rebuilt.
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated packages for Slackware 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/glibc-2.23-i586-2_slack14.2.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/glibc-i18n-2.23-i586-2_slack14.2.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/glibc-profile-2.23-i586-2_slack14.2.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/glibc-solibs-2.23-i586-2_slack14.2.txz
Updated packages for Slackware x86_64 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/glibc-2.23-x86_64-2_slack14.2.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/glibc-i18n-2.23-x86_64-2_slack14.2.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/glibc-profile-2.23-x86_64-2_slack14.2.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/glibc-solibs-2.23-x86_64-2_slack14.2.txz
Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/glibc-solibs-2.25-i586-3.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/glibc-2.25-i586-3.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/glibc-i18n-2.25-i586-3.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/glibc-profile-2.25-i586-3.txz
Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/glibc-solibs-2.25-x86_64-3.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/glibc-2.25-x86_64-3.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/glibc-i18n-2.25-x86_64-3.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/glibc-profile-2.25-x86_64-3.txz
MD5 signatures:
+-------------+
Slackware 14.2 packages:
663f47dc7d0dfedb2ebf7c61d3f2272c glibc-2.23-i586-2_slack14.2.txz
078372f057f25a9208065ab79057e177 glibc-i18n-2.23-i586-2_slack14.2.txz
f071cea4355537664e48208f4af62eaf glibc-profile-2.23-i586-2_slack14.2.txz
ab57d435ca54b173a9e68f71212fc461 glibc-solibs-2.23-i586-2_slack14.2.txz
Slackware x86_64 14.2 packages:
1133b60a4c0ce35878a10bd4315fb648 glibc-2.23-x86_64-2_slack14.2.txz
089ce46a9649272054b9677a545db1e2 glibc-i18n-2.23-x86_64-2_slack14.2.txz
5ac5d520b831cd7f905302feab8d0e75 glibc-profile-2.23-x86_64-2_slack14.2.txz
b8457b979d2a6652ce3c0362c2ec5638 glibc-solibs-2.23-x86_64-2_slack14.2.txz
Slackware -current packages:
4dc6a08ad5905dcab5dba980b57d6b84 a/glibc-solibs-2.25-i586-3.txz
48c6c4a925eda4dc598470721edced9c l/glibc-2.25-i586-3.txz
1afd5bdb86c5450b1429e5c3ce7c8fd1 l/glibc-i18n-2.25-i586-3.txz
55908b021b0fdf6f00027579b885eea0 l/glibc-profile-2.25-i586-3.txz
Slackware x86_64 -current packages:
1e479e2e03e837f66c95cacb2b7649f7 a/glibc-solibs-2.25-x86_64-3.txz
ec307efb44585984181c4fe0ce01ce30 l/glibc-2.25-x86_64-3.txz
6503ac6fe173da8a2da47dcbd9c24bb1 l/glibc-i18n-2.25-x86_64-3.txz
22bc7dc3ec5b8b2bc0ca7aa2226a3094 l/glibc-profile-2.25-x86_64-3.txz
Installation instructions:
+------------------------+
Upgrade the packages as root:
# upgradepkg glibc-*.txz
kernel (SSA:2017-181-02)
New kernel packages are available for Slackware 14.2 and -current to fix security issues.
Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/linux-4.4.75/*: Upgraded.
This kernel fixes security issues that include possible stack exhaustion,
memory corruption, and arbitrary code execution.
Be sure to upgrade your initrd after upgrading the kernel packages.
If you use lilo to boot your machine, be sure lilo.conf points to the correct
kernel and initrd and run lilo as root to update the bootloader.
If you use elilo to boot your machine, you should run eliloconfig to copy the
kernel and initrd to the EFI System Partition.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7482
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000365
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated packages for Slackware 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-generic-4.4.75-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-generic-smp-4.4.75_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-headers-4.4.75_smp-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-huge-4.4.75-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-huge-smp-4.4.75_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-modules-4.4.75-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-modules-smp-4.4.75_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-source-4.4.75_smp-noarch-1.txz
Updated packages for Slackware x86_64 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/linux-4.4.75/kernel-generic-4.4.75-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/linux-4.4.75/kernel-headers-4.4.75-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/linux-4.4.75/kernel-huge-4.4.75-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/linux-4.4.75/kernel-modules-4.4.75-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/linux-4.4.75/kernel-source-4.4.75-noarch-1.txz
Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-generic-4.9.35-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-generic-smp-4.9.35_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-huge-4.9.35-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-huge-smp-4.9.35_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-modules-4.9.35-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-modules-smp-4.9.35_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/d/kernel-headers-4.9.35_smp-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/k/kernel-source-4.9.35_smp-noarch-1.txz
Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/kernel-generic-4.9.35-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/kernel-huge-4.9.35-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/kernel-modules-4.9.35-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/d/kernel-headers-4.9.35-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/k/kernel-source-4.9.35-noarch-1.txz
MD5 signatures:
+-------------+
Slackware 14.2 packages:
57d55b0d62204538fac224b22741bdad kernel-generic-4.4.75-i586-1.txz
81d3bce28234fc627aca0cfe53b82473 kernel-generic-smp-4.4.75_smp-i686-1.txz
80a17782de46338e4577adf869764659 kernel-headers-4.4.75_smp-x86-1.txz
cd27938c62bb39e80ebf09702e63a36b kernel-huge-4.4.75-i586-1.txz
56fea090e299bf0039ae85784beef935 kernel-huge-smp-4.4.75_smp-i686-1.txz
4f6123e1c6887943544ce183916974c7 kernel-modules-4.4.75-i586-1.txz
fe263ee83e9937a819bd00850044e6b7 kernel-modules-smp-4.4.75_smp-i686-1.txz
8e54d04753ad5c24760cf0aad23b3fa6 kernel-source-4.4.75_smp-noarch-1.txz
Slackware x86_64 14.2 packages:
450e4e05eea49c96905b2b389bec8984 kernel-generic-4.4.75-x86_64-1.txz
bee08c3d724db810fc0f67a42fe0d41c kernel-headers-4.4.75-x86-1.txz
a4a8c40118016fa1cf46eb436d81a626 kernel-huge-4.4.75-x86_64-1.txz
05a55276038269c6c73ca2620b19545c kernel-modules-4.4.75-x86_64-1.txz
c86fb02a7bc94c5486869e2ec280576b kernel-source-4.4.75-noarch-1.txz
Slackware -current packages:
e81ea5be1ca603d09e3b92fb12853c95 a/kernel-generic-4.9.35-i586-1.txz
22936292dfddbc1c492702831a29ef1e a/kernel-generic-smp-4.9.35_smp-i686-1.txz
6ebdffe28023be0b27f3bab2f41f08ba a/kernel-huge-4.9.35-i586-1.txz
dbb94e3dcbd3090bca7d925c87585a04 a/kernel-huge-smp-4.9.35_smp-i686-1.txz
6d34cafdef750d823ade2e9cc344635f a/kernel-modules-4.9.35-i586-1.txz
bc28d36ba0fa5a2a20a299d070b5fada a/kernel-modules-smp-4.9.35_smp-i686-1.txz
39f37944b9c2ae4a1242ef4979a4256e d/kernel-headers-4.9.35_smp-x86-1.txz
4837a920917e21ed1f63c3c7ce39ef59 k/kernel-source-4.9.35_smp-noarch-1.txz
Slackware x86_64 -current packages:
08bc5e406d79bc2e77414e78d9960c3a a/kernel-generic-4.9.35-x86_64-1.txz
ea2471ae126f28c8b9f0f478773735da a/kernel-huge-4.9.35-x86_64-1.txz
844c05b167224a60c65c3c64a087b3f2 a/kernel-modules-4.9.35-x86_64-1.txz
df544f0ff4479cc2caec796f2dc44ac3 d/kernel-headers-4.9.35-x86-1.txz
574f6135608a364e4471360903a49380 k/kernel-source-4.9.35-noarch-1.txz
Installation instructions:
+------------------------+
Upgrade the packages as root:
# upgradepkg kernel-*.txz
If you are using an initrd, you'll need to rebuild it.
For a 32-bit SMP machine, use this command (substitute the appropriate
kernel version if you are not running Slackware 14.2):
# /usr/share/mkinitrd/mkinitrd_command_generator.sh -k 4.4.75-smp | bash
For a 64-bit machine, or a 32-bit uniprocessor machine, use this command
(substitute the appropriate kernel version if you are not running
Slackware 14.2):
# /usr/share/mkinitrd/mkinitrd_command_generator.sh -k 4.4.75 | bash
Please note that "uniprocessor" has to do with the kernel you are running,
not with the CPU. Most systems should run the SMP kernel (if they can)
regardless of the number of cores the CPU has. If you aren't sure which
kernel you are running, run "uname -a". If you see SMP there, you are
running the SMP kernel and should use the 4.4.75-smp version when running
mkinitrd_command_generator. Note that this is only for 32-bit -- 64-bit
systems should always use 4.4.75 as the version.
If you are using lilo or elilo to boot the machine, you'll need to ensure
that the machine is properly prepared before rebooting.
If using LILO:
By default, lilo.conf contains an image= line that references a symlink
that always points to the correct kernel. No editing should be required
unless your machine uses a custom lilo.conf. If that is the case, be sure
that the image= line references the correct kernel file. Either way,
you'll need to run "lilo" as root to reinstall the boot loader.
If using elilo:
Ensure that the /boot/vmlinuz symlink is pointing to the kernel you wish
to use, and then run eliloconfig to update the EFI System Partition.
