LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 06-29-2010, 07:53 AM   #1
GazL
LQ Guru
 
Registered: May 2008
Posts: 5,035
Blog Entries: 16

Rep: Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657
CRITICAL SECURITY ISSUE in libpng and libtiff


Just a heads up:

libpng 1.4.2, 1.2.43 and libtiff 3.9.2 are being reported as containing vulnerabilities:

http://www.h-online.com/security/new...y-1030043.html

Updated version are available upstream.
 
Old 06-29-2010, 08:19 AM   #2
damgar
Senior Member
 
Registered: Sep 2009
Location: dallas, tx
Distribution: Slackware - current multilib/gsb Arch
Posts: 1,949
Blog Entries: 8

Rep: Reputation: 201Reputation: 201Reputation: 201
Wow. The updates from -current a few months ago when libpng was updated were quite large due to the number of packages that had to be rebuilt. I wonder if they'll all have to be rebuilt again?
 
Old 06-29-2010, 08:27 AM   #3
GazL
LQ Guru
 
Registered: May 2008
Posts: 5,035

Original Poster
Blog Entries: 16

Rep: Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657
Most stuff will be dynamically linked against them so shouldn't need rebuilding. I don't know whether there'll be anything that statically builds against them in slackware. I'm not sure how you'd go about finding that out to be honest.

They're both minor bugfix releases, and seem to build just fine with the existing slackbuilds. I've put them on here and all seems fine so far.
 
Old 06-29-2010, 08:58 AM   #4
Martinezio
Member
 
Registered: May 2009
Location: Warsaw, Poland
Distribution: Slackware64-current
Posts: 191

Rep: Reputation: 32
Latest update of libpng in Slackware was from 1.2.x tree to 1.4.x tree. There is a significant version bump, which changed also library file name and links, so most packages, that relies on libpng must be upgraded to relink it to new library file name. Curren update is not major version bump, so at least the library link should stay untoucht.
 
Old 06-30-2010, 03:06 AM   #5
mats_b_tegner
Member
 
Registered: Nov 2009
Location: Gothenburg, Sweden
Distribution: Slackware64
Posts: 531

Rep: Reputation: 316Reputation: 316Reputation: 316Reputation: 316
Updated packages are available according to the latest ChangeLog.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Libtiff issue pramod.srk Linux - Newbie 16 02-19-2009 03:16 AM
error while loading shared libraries: libpng.so.2: [I reinstalled libPNG!] Shioni Linux - Software 1 09-09-2006 07:21 PM
LIBPNG & MRTG Issue mrigor Linux - Software 1 10-05-2005 01:59 PM
firefox 1.0.6 - critical security flaw slackhack Linux - Security 3 09-23-2005 01:13 AM
libpng security update ? dunric Slackware 1 08-07-2004 03:31 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 05:38 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration