LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (http://www.linuxquestions.org/questions/slackware-14/)
-   -   Is this a real security update? glibc? No post on slackware's site tho (http://www.linuxquestions.org/questions/slackware-14/is-this-a-real-security-update-glibc-no-post-on-slackwares-site-tho-476923/)

Old_Fogie 08-24-2006 08:51 AM

Is this a real security update? glibc? No post on slackware's site tho
 
Hi all,

I just did an rsync of slackware 10.2 to

Quote:

RSYNCURL="slackware.mirrors.tds.net::slackware"
the changelog for the "downloaded" changelog shows this:

Quote:

Tue Aug 22 15:20:32 CDT 2006
patches/packages/glibc-2.3.5-i486-6_slack10.2.tgz: Patched an issue with
kernel version parsing in ld-2.3.5.so that was leading glibc to treat 2.4
kernels with 4 version parts (such as 2.4.33.1) as if they supported NPTL,
leading to a crash at boot.
Added ru_RU.CP1251 locale support.
Updated timezone information from tzdata2006j.
Updated timezone utilities from tzcode2006j.
patches/packages/glibc-i18n-2.3.5-noarch-6_slack10.2.tgz: Rebuilt.
Added ru_RU.CP1251 locale support.
patches/packages/glibc-profile-2.3.5-i486-6_slack10.2.tgz: Recompiled.
patches/packages/glibc-solibs-2.3.5-i486-6_slack10.2.tgz: Patched an issue
with kernel version parsing in ld-2.3.5.so that was leading glibc to treat
2.4 kernels with 4 version parts (such as 2.4.33.1) as if they supported
NPTL, leading to a crash at boot.
patches/packages/glibc-zoneinfo-2.3.5-noarch-6_slack10.2.tgz:
Updated timezone information from tzdata2006j.
But the latest change shown on Pat's/Slackware site is from 8/18/2006.

Did Pat maybe forget to update the security section of the site, or is there something wierd here going on.

Thank you in advance.

PsychoticDude85 08-24-2006 09:00 AM

This is in the changelog here:
http://www.slackware.com/changelog/stable.php?cpu=i386

TSquaredF 08-24-2006 09:01 AM

Hi Fogie,
That update is on the Slackware site. Maybe it just took a while to come up & you caught it iat the wrong time. I use KDE & just found a small utility on kde-apps.org called KSlackCheck, that lets you check any of the changelogs. I think I read that you don't use KDE, so that may not help you, but I really like it.
Regards,
Bill

Old_Fogie 08-24-2006 09:06 AM

oh I'm a complete buffoon, I looked at security only and didn't go down the left to the changelog section.

I'm trying to use a different mirror than slackware.com for my rsync, then use slapt-get here locally from my rsync to do my updates. This way I don't beat Pat up on bandwith and all.

But I'm still learning the routine of checking pat's site for security logs and fixes and compare to my rysnc to make sure.

My mistake, but thank you so much for clarifying.

I'll be sure to check out that KSlackCheck thanks for the tip.

Old_Fogie 08-24-2006 09:07 AM

Oh one question, is it okay to install these 'fixes' I thought glibc was like the heart of the system. I'm not using 2.4 series kernels except for a pc that does not need any security on it as it's not networked. If I use 2.6 kernels are these ok?

PsychoticDude85 08-24-2006 09:23 AM

This is a repackage of the same version, it's package 6 of glibc 2.3.5, so it should be perfectly fine. :)


All times are GMT -5. The time now is 05:36 PM.