Quote:

Originally Posted by mancha Update 20140304 GnuTLS A security audit of GnuTLS, carried out by one of its primary developers, has identified serious flaws in its certificate validation code (CVE-2014-0092). The vulnerabilities can be exploited via specially-crafted certificates to effectively circumvent certificate validation checks. Solution: Slackware deployed security fixes for Slackware 13.0 through current the day the issue became public (20140303). I encourage those who've not yet applied these updates to do so as soon as possible. Note: Slackware 12.1 and 12.2 systems can address this issue by rebuilding GnuTLS after applying Slackware 13.0's fix. --mancha

1. l/loudmouth a library for the Jabber instant messenger protocol.
2. xap/pan a usenet news reader.

1. libssh
   
   A problem with how libssh handles prng states for forked sshd's (CVE-2014-0017) has been fixed upstream.
   
   Solution: Rebuild libssh 0.5.4 (or 0.5.5) after applying upstream fix.
   
   
2. file
   
   Two security issues were identified with libmagic (file package):
   
   CVE-2014-1943 (infinite recursion flaw)
   CVE-2014-2270 (improper bounds checking)
   
   Solution: Rebuild file 5.14 after applying my backport fixes:
   
   file-5.14_CVE-2014-1943.diff
   file-5.14_CVE-2014-2270.diff
   Note: should be applied in above order.
   
   PoC for CVE-2014-1943:
   
   Code:

   $ echo -n "4552000000" | xxd -r -p | file -

3. php
   
   The above libmagic security issues affect Slackware's PHP package because PHP bundles libmagic for its fileinfo extension.
   
   Solution: Rebuild PHP 5.4.24 (or PHP 5.4.25) after applying my backport fixes:
   
   php-5.4.24_CVE-2014-1943.diff
   php-5.4.24_CVE-2014-2270.diff
   Note: should be applied in above order.
   
   PoC for CVE-2014-1943:
   
   Code:

   <?php
   /* CVE-2014-1943 */
   $finfo = new finfo(FILEINFO_MIME);
   $hex = hex2bin("4552000000");
   return $finfo->buffer($hex);
   ?>

4. FreeType
   
   Two security issues have been identified in FreeType's CFF driver:
   
   CVE-2014-2240 (out-of-bounds stack read/write)
   CVE-2014-2241 (denial of service via triggerable assertion)
   
   Solution: Upgrade to FreeType 2.5.3.
   
   
5. udisks & udisks2
   
   A flaw in the way udisks/udisks2 processes path names (CVE-2014-0004) can be exploited by malicious local users, via
   specially-crafted directory structures, to execute arbitrary code as the udisks daemon (i.e. root).
   
   Solution: Apply Slackware's security update from 20140311.
   
   
6. mutt
   
   A buffer overflow vulnerability (CVE-2014-0467) was discovered in mutt's parsing of RFC2049 headers. A remote attacker
   can exploit this via an email with specially-crafted headers to cause a DoS and potentially execute arbitrary code.
   
   Solution: Apply Slackware's security update from 20140312.
   
   
7. samba
   
   An internal samba audit has identified two security issues:
   
   CVE-2013-4496 (flaw allows bypass of password lock-out and unlimited password attempts via the samr interface).
   CVE-2013-6442 (flaw in smbacls potentially clears an object's existing ACLs leaving it unprotected).
   
   Solution: Apply Slackware's security update from 20140313.

Quote:

Originally Posted by mats_b_tegner In order to compile FreeType 2.5.3 Harfbuzz needs to be updated as well.

1. FreeType
   
   Mats, thanks for bringing this up. Actually, HarfBuzz is a new and optional dependency of FreeType as of 2.5.3.
   FreeType 2.5.3 will build on stock Slackware 14.1 but automatically disables HarfBuzz support when it doesn't
   detect a new enough version.
   
   However, building FreeType 2.5.3 requires a modified illadvisederror patch (see note at end), so I've amended my
   recommendation for most slackers:
   
   Solution: Rebuild Slackware 14.1 FreeType 2.5.0.1 after applying my CVE-2014-2240+CVE-2014-2241 backport fix (sig).

Note: For those wishing to upgrade to FreeType 2.5.3:

• Get my FreeType 2.5.3 illadvisederror patch (gzip it or edit the Slackbuild so it applies uncompressed)
• Build FreeType 2.5.3 (1st pass with no HarfBuzz support)
• Upgrade to HarfBuzz 0.9.26 [OPTIONAL STEP]
• Rebuild FreeType 2.5.3 (2nd pass with HarfBuzz support) [OPTIONAL STEP]
  
  Keep in mind lots of things depend on HarfBuzz and FreeType so upgrading these two libs is done at your own risk.