Slackware 14.1: 2015-047-01 Moderate: Symlink Security Risk Patch
slackware
February 16, 2015
New patch packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue
Summary
Here are the details from the Slackware 14.1 ChangeLog: patches/packages/patch-2.7.4-i486-1_slack14.1.txz: Upgraded. Patch no longer follows symbolic links to input and output files. This ensures that symbolic links created by git-style patches cannot cause patch to write outside the working directory. For more information, see: https://www.cve.org/CVERecord?id=CVE-2015-1196 (* Security fix *)
Topics Covered
Where Find New Packages
Thanks to the friendly folks at the OSU Open Source Lab
(https://osuosl.org/) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for
additional mirror sites near you.
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware 13.37:
Updated package for Slackware x86_64 13.37:
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:
MD5 Signatures
Slackware 13.0 package:
f887adfdfb23434dd3f37d3f49a9077d patch-2.7.4-i486-1_slack13.0.txz
Slackware x86_64 13.0 package:
58455b6b9842e708d422038ab8fe7edb patch-2.7.4-x86_64-1_slack13.0.txz
Slackware 13.1 package:
fd369453096a7118ade75fe489ab17e9 patch-2.7.4-i486-1_slack13.1.txz
Slackware x86_64 13.1 package:
cc381cc22597f5553bf681dad3d343f0 patch-2.7.4-x86_64-1_slack13.1.txz
Slackware 13.37 package:
acf0d74eee4378cb7d9118ff97825c6b patch-2.7.4-i486-1_slack13.37.txz
Slackware x86_64 13.37 package:
38281ce24307296474d00139783d5131 patch-2.7.4-x86_64-1_slack13.37.txz
Slackware 14.0 package:
883366258723850e1c172833da20e9f3 patch-2.7.4-i486-1_slack14.0.txz
Slackware x86_64 14.0 package:
1ee2e9fa194f40682a551fb6b9bd83a7 patch-2.7.4-x86_64-1_slack14.0.txz
Slackware 14.1 package:
7824fea560e2e0fe4510048e2bb3ce3b patch-2.7.4-i486-1_slack14.1.txz
Slackware x86_64 14.1 package:
e951553245144de113bc5950e6ebd7c6 patch-2.7.4-x86_64-1_slack14.1.txz
Slackware -current package:
025d4917aca246e4bb81ec2c21cc7886 a/patch-2.7.4-i486-1.txz
Slackware x86_64 -current package:
60940b74eaca8815b56b94de206a2e64 a/patch-2.7.4-x86_64-1.txz
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Installation Instructions
Installation instructions: Upgrade the package as root: # upgradepkg patch-2.7.4-i486-1_slack14.1.txz
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!