New libnotify packages are available for Slackware 15.0 and -current to fix a security issue. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] libnotify (SSA:2023-283-02) New libnotify packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/libnotify-0.8.3-i586-1_slack15.0.txz: Upgraded. This release contains a critical stability/minor security update which affects Electron applications that utilize Portal notifications (eg, through Flatpak). It is highly recommended that all users of libnotify 0.8.x update to this release. (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/libnotify-0.8.3-i586-1_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/libnotify-0.8.3-x86_64-1_slack15.0.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/libnotify-0.8.3-i586-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/libnotify-0.8.3-x86_64-1.txz MD5 signatures: +-------------+ Slackware 15.0 package: 9fa17d1faa882d2d14bfa2dfe009f079 libnotify-0.8.3-i586-1_slack15.0.txz Slackware x86_64 15.0 package: 6a9a601e6f4053e166ce2029e990c6b7 libnotify-0.8.3-x86_64-1_slack15.0.txz Slackware -current package: 4b31ada4e25abe2d29d892a4a169150c l/libnotify-0.8.3-i586-1.txz Slackware x86_64 -current package: 9411aff6ff3a6857d567d1a9731a30e6 l/libnotify-0.8.3-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg libnotify-0.8.3-i586-1_slack15.0.txz +-----+ . Updated libnotify versions for Slackware 15.0 and current tackle significant security vulnerabilities affecting Electron application notifications.. Libnotify Update, Slackware Security, Electron App Fix, Package Upgrade, Security Update. . Severity: Critical. LinuxSecurity.com Team
This update fixes a [bug](https://github.com/mesonbuild/meson/issues/5268) in the Meson build system which caused binaries and libraries to incorrectly be marking as requiring an executable stack. This makes them more vulnerable to security issues, and also can result in errors caused by SELinux denials. This update also provides rebuilds of all the packages that were built with the buggy. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-ac2a21ff07 2019-04-17 16:04:32.355044 --------------------------------------------------------------------------------Name : libnotify Product : Fedora 30 Version : 0.7.8 Release : 2.fc30 URL : https://www.gnome.org/ Summary : Desktop notification library Description : libnotify is a library for sending desktop notifications to a notification daemon, as defined in the freedesktop.org Desktop Notifications spec. These notifications can be used to inform the user about an event or display some form of information without getting in the user's way. --------------------------------------------------------------------------------Update Information: This update fixes a [bug](https://github.com/mesonbuild/meson/issues/5268) in the Meson build system which caused binaries and libraries to incorrectly be marking as requiring an executable stack. This makes them more vulnerable to security issues, and also can result in errors caused by SELinux denials. This update also provides rebuilds of all the packages that were built with the buggy Meson, excepting packages for updates were already pending (in those cases, those updates have been edited instead). This includes gnome-initial-setup, which was affected by this problem, resulting in a [release-blocking bug](https://bugzilla.redhat.com/show_bug.cgi?id=1699099) that prevented it running correctly with SELinux in enforcingmode. --------------------------------------------------------------------------------References: [ 1 ] Bug #1699099 - gnome-initial-setup 3.32.0+ crashes due to SELinux denials (because it has execstack flag set, because meson 0.50.0 sets it when it shouldn't) https://bugzilla.redhat.com/show_bug.cgi?id=1699099 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-ac2a21ff07' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.