Slackware 1129 Published by

The following updates has been released for Slackware Linux:

mercurial (SSA:2016-092-01)
php (SSA:2016-092-02)



mercurial (SSA:2016-092-01)

New mercurial packages are available for Slackware 13.0, 13.1, 13.37, 14.0,
14.1, and -current to fix security issues.


Here are the details from the Slackware 14.1 ChangeLog:
+--------------------------+
patches/packages/mercurial-3.7.3-i486-1_slack14.1.txz: Upgraded.
This update fixes security issues and bugs, including remote code execution
in binary delta decoding, arbitrary code execution with Git subrepos, and
arbitrary code execution when converting Git repos.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3630
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3068
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3069
(* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :):

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/mercurial-3.7.3-i486-1_slack13.0.txz

Updated package for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/mercurial-3.7.3-x86_64-1_slack13.0.txz

Updated package for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/mercurial-3.7.3-i486-1_slack13.1.txz

Updated package for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/mercurial-3.7.3-x86_64-1_slack13.1.txz

Updated package for Slackware 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/mercurial-3.7.3-i486-1_slack13.37.txz

Updated package for Slackware x86_64 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/mercurial-3.7.3-x86_64-1_slack13.37.txz

Updated package for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/mercurial-3.7.3-i486-1_slack14.0.txz

Updated package for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/mercurial-3.7.3-x86_64-1_slack14.0.txz

Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/mercurial-3.7.3-i486-1_slack14.1.txz

Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/mercurial-3.7.3-x86_64-1_slack14.1.txz

Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/d/mercurial-3.7.3-i586-1.txz

Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/d/mercurial-3.7.3-x86_64-1.txz


MD5 signatures:
+-------------+

Slackware 13.0 package:
abac2d2f030f61bb537aa94f8c2867c7 mercurial-3.7.3-i486-1_slack13.0.txz

Slackware x86_64 13.0 package:
ba5c1b02c8950368faecc6dbebd38c15 mercurial-3.7.3-x86_64-1_slack13.0.txz

Slackware 13.1 package:
e070f0cfa2407ed17658158b6ded0a0a mercurial-3.7.3-i486-1_slack13.1.txz

Slackware x86_64 13.1 package:
ebe7c2002e33f1424bbbf13b1afac423 mercurial-3.7.3-x86_64-1_slack13.1.txz

Slackware 13.37 package:
0071725872205c1372b9b2757259119e mercurial-3.7.3-i486-1_slack13.37.txz

Slackware x86_64 13.37 package:
dd6ec649ffbb422792246ff5c4852b36 mercurial-3.7.3-x86_64-1_slack13.37.txz

Slackware 14.0 package:
9ae990351e4f5a052fc2a80cc1bc0121 mercurial-3.7.3-i486-1_slack14.0.txz

Slackware x86_64 14.0 package:
aa8bcc809464f7e12049c1a9a1a60930 mercurial-3.7.3-x86_64-1_slack14.0.txz

Slackware 14.1 package:
b1a632a80f4992aac202e71860b2d9f2 mercurial-3.7.3-i486-1_slack14.1.txz

Slackware x86_64 14.1 package:
952e91e8fb32f29befdf61961e7e074a mercurial-3.7.3-x86_64-1_slack14.1.txz

Slackware -current package:
8809859646562d14a39cb823c163bc12 d/mercurial-3.7.3-i586-1.txz

Slackware x86_64 -current package:
de8a58baf5db1a208b2b7bb9e4f1de01 d/mercurial-3.7.3-x86_64-1.txz


Installation instructions:
+------------------------+

Upgrade the package as root:
# upgradepkg mercurial-3.7.3-i486-1_slack14.1.txz

php (SSA:2016-092-02)

New php packages are available for Slackware 14.0, 14.1, and -current to
fix security issues.


Here are the details from the Slackware 14.1 ChangeLog:
+--------------------------+
patches/packages/php-5.6.20-i486-1_slack14.1.txz: Upgraded.
This release fixes bugs and security issues.
For more information, see:
http://php.net/ChangeLog-5.php#5.6.20
(* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :):

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/php-5.6.20-i486-1_slack14.0.txz

Updated package for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/php-5.6.20-x86_64-1_slack14.0.txz

Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/php-5.6.20-i486-1_slack14.1.txz

Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/php-5.6.20-x86_64-1_slack14.1.txz

Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/php-5.6.20-i586-1.txz

Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/php-5.6.20-x86_64-1.txz


MD5 signatures:
+-------------+

Slackware 14.0 package:
3035d987383a4c886da12aac34061e9a php-5.6.20-i486-1_slack14.0.txz

Slackware x86_64 14.0 package:
f0d09a9f4d063469ec521070e7321180 php-5.6.20-x86_64-1_slack14.0.txz

Slackware 14.1 package:
0e782c919b4178837a46cc35e531b57f php-5.6.20-i486-1_slack14.1.txz

Slackware x86_64 14.1 package:
21d009222c27f235805bbe82e71a3cfa php-5.6.20-x86_64-1_slack14.1.txz

Slackware -current package:
318dbd4a5b6833f0ef643544c43276e7 n/php-5.6.20-i586-1.txz

Slackware x86_64 -current package:
02da2a7e68369c601769a6f495885a97 n/php-5.6.20-x86_64-1.txz


Installation instructions:
+------------------------+

Upgrade the package as root:
# upgradepkg php-5.6.20-i486-1_slack14.1.txz

Then, restart Apache httpd:
# /etc/rc.d/rc.httpd stop
# /etc/rc.d/rc.httpd start