LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (https://www.linuxquestions.org/questions/slackware-14/)
-   -   Requests for -current (14.2-->15.0) (https://www.linuxquestions.org/questions/slackware-14/requests-for-current-14-2-15-0-a-4175620463/)

Thom1b 03-13-2018 04:24 AM

New releases of samba are out with critical security fixes.

Quote:

Release Announcements
---------------------

These are security release in order to address the following defects:

o CVE-2018-1050 (Denial of Service Attack on external print server.)
o CVE-2018-1057 (Authenticated users can change other users' password.)


=======
Details
=======

o CVE-2018-1050:
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of
service attack when the RPC spoolss service is configured to be run as
an external daemon. Missing input sanitization checks on some of the
input parameters to spoolss RPC calls could cause the print spooler
service to crash.

There is no known vulnerability associated with this error, merely a
denial of service. If the RPC spoolss service is left by default as an
internal service, all a client can do is crash its own authenticated
connection.

o CVE-2018-1057:
On a Samba 4 AD DC the LDAP server in all versions of Samba from
4.0.0 onwards incorrectly validates permissions to modify passwords
over LDAP allowing authenticated users to change any other users'
passwords, including administrative users.

Possible workarounds are described at a dedicated page in the Samba wiki:
https://wiki.samba.org/index.php/CVE-2018-1057

saxa 03-13-2018 05:27 AM

Glade 3.22.0

https://download.gnome.org/sources/g...3.22.0.changes
https://download.gnome.org/sources/g...-3.22.0.tar.xz

saxa 03-13-2018 05:29 AM

glib2
https://download.gnome.org/sources/g...-2.56.0.tar.xz
gtk+3
https://download.gnome.org/sources/g...3.22.29.tar.xz
vte
https://download.gnome.org/sources/v...-0.52.0.tar.xz

saxa 03-13-2018 05:29 AM

atk
https://download.gnome.org/sources/a...-2.28.1.tar.xz

saxa 03-13-2018 05:31 AM

gobject-introspection
https://download.gnome.org/sources/g...-1.56.0.tar.xz
dconf-editor
https://download.gnome.org/sources/d...-3.28.0.tar.xz

saxa 03-13-2018 05:33 AM

at-spi2-core 2.28.0
https://download.gnome.org/sources/a...-2.28.0.tar.xz
at-spi2-atk 2.26.2
https://download.gnome.org/sources/a...-2.26.2.tar.xz

saxa 03-13-2018 05:33 AM

gucharmap 10.0.4
https://download.gnome.org/sources/g...-10.0.4.tar.xz

gmgf 03-13-2018 05:34 AM

Other news deps for gtk3 ;)

at-spi2-core-2.28.0 (this new version need meson) ;)

http://ftp.gnome.org/pub/gnome/sourc...re-2.28.0.news
http://ftp.gnome.org/pub/gnome/sourc...-2.28.0.tar.xz

at-spi2-atk-2.26.2
http://ftp.gnome.org/pub/gnome/sourc...tk-2.26.2.news
http://ftp.gnome.org/pub/gnome/sourc...-2.26.2.tar.xz

gmgf 03-13-2018 05:51 AM

Ok sorry, for the double post,'saxa' is faster ;)

gmgf 03-13-2018 06:55 AM

gvfs-1.36.0 (need meson, or autogen.sh):

http://ftp.gnome.org/pub/gnome/sourc...fs-1.36.0.news
http://ftp.gnome.org/pub/gnome/sourc...-1.36.0.tar.xz

dconf-editor-3.28.0:
already posted but (need meson)

gnome-keyring-3.28.0.1:
http://ftp.gnome.org/pub/gnome/sourc...-3.28.0.1.news
http://ftp.gnome.org/pub/gnome/sourc....28.0.1.tar.xz

gmgf 03-13-2018 07:08 AM

pygobject-3.28.0:

http://ftp.gnome.org/pub/gnome/sourc...ct-3.28.0.news
http://ftp.gnome.org/pub/gnome/sourc...-3.28.0.tar.xz

gsettings-desktop-schemas-3.28.0:
http://ftp.gnome.org/pub/gnome/sourc...as-3.28.0.news
http://ftp.gnome.org/pub/gnome/sourc...-3.28.0.tar.xz

gmgf 03-13-2018 07:41 AM

pycairo-1.16.3:

(no problem here with this new version, not need the ' # Fix libdir ' in the SlackBuild)
https://pycairo.readthedocs.io/en/la...g.html#v1-16-3
https://github.com/pygobject/pycairo...-1.16.3.tar.gz

bateleur 03-13-2018 08:38 AM

Firefox 59.0:

https://ftp.mozilla.org/pub/firefox/releases/59.0/

sbolokanov 03-13-2018 11:58 AM

vulkan-sdk 1.1.70.1 - 8.Mar.2018

gmgf 03-13-2018 12:20 PM

time-1.9:

https://ftp.gnu.org/gnu/time/time-1.9.tar.gz

libgpg-error-1.28:

https://www.gnupg.org/ftp/gcrypt/lib...r-1.28.tar.bz2


All times are GMT -5. The time now is 06:36 PM.