Date: Mon, 11 Mar 2002 18:31:37 -0800 (PST)
From: Slackware Security Team <security@slackware.com>
To: slackware-security@slackware.com
Subject: [slackware-security] cvs recompiled against updated zlib + /tmp fix


New cvs packages are available to fix security problems.

Here's the information from the Slackware 8.0 ChangeLog:

----------------------------
Mon Mar 11 17:54:12 PST 2002
patches/packages/cvs.tgz:  Patched to link to the shared zlib on the system
  instead of statically linking to the included zlib source.  Also, use mktemp
  to create files in /tmp files more safely.
  (* Security fix *)
----------------------------


WHERE TO FIND THE NEW PACKAGE:
------------------------------
Updated cvs package for Slackware 7.1: 
 

Updated cvs package for Slackware 8.0: 
 


MD5 SIGNATURE:
--------------

Here is the md5sum for the package:

Slackware 7.1:
03dab4f6898e34033e379d7ef706c21f  cvs.tgz

Slackware 8.0:
6758d0f323e9ebbd9aa1272c6c9dc482  cvs.tgz


INSTALLATION INSTRUCTIONS:
--------------------------

As root, upgrade to the new cvs.tgz package:
# upgradepkg cvs.tgz

Remember, it's also a good idea to backup configuration files before
upgrading packages.

- Slackware Linux Security Team
   The Slackware Linux Project




Slackware: 'cvs' Multiple vulnerabilities

March 12, 2002
Patched to link to the shared zlib on the system instead of statically linking to the included zlib source

Summary

Where Find New Packages

MD5 Signatures

Severity
Date: Mon, 11 Mar 2002 18:31:37 -0800 (PST) From: Slackware Security Team <security@slackware.com> To: slackware-security@slackware.com Subject: [slackware-security] cvs recompiled against updated zlib + /tmp fix
New cvs packages are available to fix security problems.
Here's the information from the Slackware 8.0 ChangeLog:
---------------------------- Mon Mar 11 17:54:12 PST 2002 patches/packages/cvs.tgz: Patched to link to the shared zlib on the system instead of statically linking to the included zlib source. Also, use mktemp to create files in /tmp files more safely. (* Security fix *) ----------------------------
WHERE TO FIND THE NEW PACKAGE: ------------------------------ Updated cvs package for Slackware 7.1:
Updated cvs package for Slackware 8.0:
MD5 SIGNATURE: --------------
Here is the md5sum for the package:
Slackware 7.1: 03dab4f6898e34033e379d7ef706c21f cvs.tgz
Slackware 8.0: 6758d0f323e9ebbd9aa1272c6c9dc482 cvs.tgz
INSTALLATION INSTRUCTIONS: --------------------------
As root, upgrade to the new cvs.tgz package: # upgradepkg cvs.tgz
Remember, it's also a good idea to backup configuration files before upgrading packages.
- Slackware Linux Security Team The Slackware Linux Project

Installation Instructions

Related News