Slackware: 'cvs' Multiple vulnerabilities
March 12, 2002
Patched to link to the shared zlib on the system instead of statically linking to the included zlib source
Summary
Where Find New Packages
MD5 Signatures
Severity
Date: Mon, 11 Mar 2002 18:31:37 -0800 (PST) From: Slackware Security Team <security@slackware.com> To: slackware-security@slackware.com Subject: [slackware-security] cvs recompiled against updated zlib + /tmp fix
New cvs packages are available to fix security problems.
Here's the information from the Slackware 8.0 ChangeLog:
---------------------------- Mon Mar 11 17:54:12 PST 2002 patches/packages/cvs.tgz: Patched to link to the shared zlib on the system instead of statically linking to the included zlib source. Also, use mktemp to create files in /tmp files more safely. (* Security fix *) ----------------------------
WHERE TO FIND THE NEW PACKAGE: ------------------------------ Updated cvs package for Slackware 7.1:
Updated cvs package for Slackware 8.0:
MD5 SIGNATURE: --------------
Here is the md5sum for the package:
Slackware 7.1: 03dab4f6898e34033e379d7ef706c21f cvs.tgz
Slackware 8.0: 6758d0f323e9ebbd9aa1272c6c9dc482 cvs.tgz
INSTALLATION INSTRUCTIONS: --------------------------
As root, upgrade to the new cvs.tgz package: # upgradepkg cvs.tgz
Remember, it's also a good idea to backup configuration files before upgrading packages.
- Slackware Linux Security Team The Slackware Linux Project
Installation Instructions
