LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 04-17-2019, 09:39 AM   #3166
orbea
Senior Member
 
Registered: Feb 2015
Distribution: Slackware64-current
Posts: 1,592

Rep: Reputation: Disabled

meson-0.50.1

https://github.com/mesonbuild/meson/...-0.50.1.tar.gz

This has a fix for cross-compiling which affects winegcc built programs like wine-nine-standalone.

See: https://github.com/mesonbuild/meson/issues/5102
 
1 members found this post helpful.
Old 04-17-2019, 11:54 AM   #3167
petslack
Member
 
Registered: Apr 2009
Location: Sao Paulo, Brazil
Distribution: Slackware64-Current, Arch, OpenBSD, CentOS, Debian
Posts: 43

Rep: Reputation: 13
zstd-1.4.0

https://raw.githubusercontent.com/fa.../dev/CHANGELOG
https://github.com/facebook/zstd/rel...d-1.4.0.tar.gz
https://github.com/facebook/zstd/rel....tar.gz.sha256
 
Old 04-18-2019, 02:19 AM   #3168
Thom1b
Member
 
Registered: Mar 2010
Location: France
Distribution: Slackware
Posts: 250

Rep: Reputation: 195Reputation: 195
nghttp2-1.38.0 is released.
https://github.com/nghttp2/nghttp2/r...-1.38.0.tar.xz

openssh-8.0 is released.
https://ftp.openbsd.org/pub/OpenBSD/...h-8.0p1.tar.gz
https://ftp.openbsd.org/pub/OpenBSD/...0p1.tar.gz.asc
 
2 members found this post helpful.
Old 04-18-2019, 04:20 AM   #3169
Thom1b
Member
 
Registered: Mar 2010
Location: France
Distribution: Slackware
Posts: 250

Rep: Reputation: 195Reputation: 195
dovecot-2.3.5.2 is released with two (maybe more) security fix.
https://dovecot.org/releases/2.3/dovecot-2.3.5.2.tar.gz
https://dovecot.org/releases/2.3/dov...5.2.tar.gz.sig

Quote:
* CVE-2019-7524: Missing input buffer size validation leads into
arbitrary buffer overflow when reading fts or pop3 uidl header
from Dovecot index. Exploiting this requires direct write access to
the index files.

* CVE-2019-10691: Trying to login with 8bit username containing
invalid UTF8 input causes auth process to crash if auth policy is
enabled. This could be used rather easily to cause a DoS. Similar
crash also happens during mail delivery when using invalid UTF8 in
From or Subject header when OX push notification driver is used.
Patch for mariadb-10.3 still needed.

Last edited by Thom1b; 04-18-2019 at 04:38 AM. Reason: many CVE (not just one)
 
Old 04-18-2019, 04:20 AM   #3170
ecd102
LQ Newbie
 
Registered: Sep 2011
Distribution: Slackware-current
Posts: 13

Rep: Reputation: Disabled
Regarding openssh-8.0p1, TCP wrapper patch needs to be revised, due to an API change.

Code:
diff -uprN openssh-8.0p1.orig/configure.ac openssh-8.0p1/configure.ac
--- openssh-8.0p1.orig/configure.ac	2019-04-18 07:52:57.000000000 +0900
+++ openssh-8.0p1/configure.ac	2019-04-18 16:16:54.134740000 +0900
@@ -1494,6 +1494,62 @@ else
 	AC_MSG_RESULT([no])
 fi
 
+# Check whether user wants TCP wrappers support
+TCPW_MSG="no"
+AC_ARG_WITH([tcp-wrappers],
+	[  --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
+	[
+		if test "x$withval" != "xno" ; then
+			saved_LIBS="$LIBS"
+			saved_LDFLAGS="$LDFLAGS"
+			saved_CPPFLAGS="$CPPFLAGS"
+			if test -n "${withval}" && \
+			    test "x${withval}" != "xyes"; then
+				if test -d "${withval}/lib"; then
+					if test -n "${need_dash_r}"; then
+						LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
+					else
+						LDFLAGS="-L${withval}/lib ${LDFLAGS}"
+					fi
+				else
+					if test -n "${need_dash_r}"; then
+						LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
+					else
+						LDFLAGS="-L${withval} ${LDFLAGS}"
+					fi
+				fi
+				if test -d "${withval}/include"; then
+					CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
+				else
+					CPPFLAGS="-I${withval} ${CPPFLAGS}"
+				fi
+			fi
+			LIBS="-lwrap -lnsl $LIBS"
+			AC_MSG_CHECKING([for libwrap])
+			AC_LINK_IFELSE([AC_LANG_PROGRAM([[
+#include <sys/types.h>
+#include <sys/socket.h>
+#include <netinet/in.h>
+#include <tcpd.h>
+int deny_severity = 0, allow_severity = 0;
+				]], [[
+	hosts_access(0);
+				]])], [
+					AC_MSG_RESULT([yes])
+					AC_DEFINE([LIBWRAP], [1],
+						[Define if you want
+						TCP Wrappers support])
+					SSHDLIBS="$SSHDLIBS -lwrap -lnsl"
+					TCPW_MSG="yes"
+				], [
+					AC_MSG_ERROR([*** libwrap missing])
+				
+			])
+			LIBS="$saved_LIBS"
+		fi
+	]
+)
+
 # Check whether user wants to use ldns
 LDNS_MSG="no"
 AC_ARG_WITH(ldns,
@@ -5245,6 +5301,7 @@ echo "                       PAM support
 echo "                   OSF SIA support: $SIA_MSG"
 echo "                 KerberosV support: $KRB5_MSG"
 echo "                   SELinux support: $SELINUX_MSG"
+echo "              TCP Wrappers support: $TCPW_MSG"
 echo "              MD5 password support: $MD5_MSG"
 echo "                   libedit support: $LIBEDIT_MSG"
 echo "                   libldns support: $LDNS_MSG"
diff -uprN openssh-8.0p1.orig/sshd.8 openssh-8.0p1/sshd.8
--- openssh-8.0p1.orig/sshd.8	2019-04-18 07:52:57.000000000 +0900
+++ openssh-8.0p1/sshd.8	2019-04-18 16:16:54.134740000 +0900
@@ -873,6 +873,12 @@ the user's home directory becomes access
 This file should be writable only by the user, and need not be
 readable by anyone else.
 .Pp
+.It Pa /etc/hosts.allow
+.It Pa /etc/hosts.deny
+Access controls that should be enforced by tcp-wrappers are defined here.
+Further details are described in
+.Xr hosts_access 5 .
+.Pp
 .It Pa /etc/hosts.equiv
 This file is for host-based authentication (see
 .Xr ssh 1 ) .
@@ -975,6 +981,7 @@ The content of this file is not sensitiv
 .Xr ssh-keygen 1 ,
 .Xr ssh-keyscan 1 ,
 .Xr chroot 2 ,
+.Xr hosts_access 5 ,
 .Xr login.conf 5 ,
 .Xr moduli 5 ,
 .Xr sshd_config 5 ,
diff -uprN openssh-8.0p1.orig/sshd.c openssh-8.0p1/sshd.c
--- openssh-8.0p1.orig/sshd.c	2019-04-18 07:52:57.000000000 +0900
+++ openssh-8.0p1/sshd.c	2019-04-18 16:18:54.660257175 +0900
@@ -122,6 +122,12 @@
 #include "auth-options.h"
 #include "version.h"
 #include "ssherr.h"
+#ifdef LIBWRAP
+#include <tcpd.h>
+#include <syslog.h>
+int allow_severity;
+int deny_severity;
+#endif /* LIBWRAP */
 
 /* Re-exec fds */
 #define REEXEC_DEVCRYPTO_RESERVED_FD	(STDERR_FILENO + 1)
@@ -2022,6 +2028,26 @@ main(int ac, char **av)
 	the_active_state = ssh;
 	ssh_packet_set_server(ssh);
 
+/* Moved LIBWRAP check here */
+#ifdef LIBWRAP
+        allow_severity = options.log_facility|LOG_INFO;
+        deny_severity = options.log_facility|LOG_WARNING;
+        /* Check whether logins are denied from this host. */
+        if (ssh_packet_connection_is_on_socket(ssh)) {	/* This check must be after ssh_packet_set_connection() */
+		struct request_info req;
+
+		request_init(&req, RQ_DAEMON, __progname, RQ_FILE, sock_in, 0);
+		fromhost(&req);
+
+		if (!hosts_access(&req)) {
+			debug("Connection refused by tcp wrapper");
+			refuse(&req);
+			/* NOTREACHED */
+			fatal("libwrap refuse returns");
+		}
+	}
+#endif /* LIBWRAP */
+
 	check_ip_options(ssh);
 
 	/* Prepare the channels layer */
 
2 members found this post helpful.
Old 04-18-2019, 08:24 PM   #3171
ttk
Member
 
Registered: May 2012
Location: Sebastopol, CA
Distribution: Slackware64
Posts: 791
Blog Entries: 26

Rep: Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015
After the most recent updates, mplayer fails, as it is still linked against libcdio.so.18 (replaced by libcdio.so.19). Recompile mplayer please?

Quote:
ttk@amp:/home/ttk$ mplayer whats_wrong_with_this_picture.mp4
mplayer: error while loading shared libraries: libcdio.so.18: cannot open shared object file: No such file or directory
(Thanks to kpuc for prodding me to test mplayer. He wanted to see if it decoded his av1 transcodes.)

Last edited by ttk; 04-18-2019 at 08:26 PM.
 
Old 04-18-2019, 09:25 PM   #3172
willysr
Senior Member
 
Registered: Jul 2004
Location: Jogja, Indonesia
Distribution: Slackware-Current
Posts: 3,972

Rep: Reputation: 1231Reputation: 1231Reputation: 1231Reputation: 1231Reputation: 1231Reputation: 1231Reputation: 1231Reputation: 1231Reputation: 1231
Quote:
xap/MPlayer-20190418-x86_64-1.txz: Upgraded.
Compiled against libcdio-2.1.0.
works fine here
 
Old 04-18-2019, 09:35 PM   #3173
ttk
Member
 
Registered: May 2012
Location: Sebastopol, CA
Distribution: Slackware64
Posts: 791
Blog Entries: 26

Rep: Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015
huh. Okay, slackpkg claims I'm all up to date, but I guess I'm missing something. Checking my files.
 
Old 04-18-2019, 09:46 PM   #3174
ttk
Member
 
Registered: May 2012
Location: Sebastopol, CA
Distribution: Slackware64
Posts: 791
Blog Entries: 26

Rep: Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015
Thanks, willysr. slackpkg would not be convinced to install the latest mplayer, but after wget'ing the package and running installpkg, mplayer is working as expected. Sorry for the false report.
 
Old 04-22-2019, 05:29 AM   #3175
J_W
Member
 
Registered: Apr 2004
Location: JAPAN
Distribution: Slackware64-current
Posts: 55

Rep: Reputation: 16
The current official xpsd-4.00 of "x86_64-current" can not handle non-embeded Japanese font pdf.
I think this is because the xpdf can not find "/etc/xpdfrc".
I added -DSYSTEM_XPDFRC="/etc/xpdfrc" option to xpdf.SlackBuild and re-compiled the package.
Then I confirmed it works correctlly.
A sample of non-embeded Japanese font pdf is here.

https://box.yahoo.co.jp/guest/viewer...iewtype=detail
 
1 members found this post helpful.
Old 04-22-2019, 06:54 AM   #3176
petslack
Member
 
Registered: Apr 2009
Location: Sao Paulo, Brazil
Distribution: Slackware64-Current, Arch, OpenBSD, CentOS, Debian
Posts: 43

Rep: Reputation: 13
(Development versions)
ncurses-6.1-20190420
https://invisible-island.net/ncurses...html#t20190420
https://invisible-island.net/datafil...ncurses.tar.gz

aaa_terminfo-6.1-20190330
https://invisible-island.net/ncurses...html#t20190330
https://invisible-island.net/datafil...erminfo.src.gz
 
Old 04-22-2019, 07:21 AM   #3177
jnontour
LQ Newbie
 
Registered: Mar 2016
Location: Cali, Colombia
Distribution: Slackware64-current, CentOS, ClearOS, RouterOS
Posts: 1

Rep: Reputation: Disabled
Odd thing happening with Kernel 4.19.36. It's "freezing" for about a minute right before "Initializing LVM..." and then again right before "Updating hardware database index:". Freezing once again when attempting to reboot. Previous kernels (4.19.34, 4.19.35) are running fine.
 
Old 04-22-2019, 07:26 AM   #3178
kkady32
Member
 
Registered: Dec 2010
Distribution: Slackware64-current
Posts: 115

Rep: Reputation: 42
Quote:
Originally Posted by jnontour View Post
Odd thing happening with Kernel 4.19.36. It's "freezing" for about a minute right before "Initializing LVM..." and then again right before "Updating hardware database index:". Freezing once again when attempting to reboot. Previous kernels (4.19.34, 4.19.35) are running fine.
same here,freezing 2-3 times to boot and then to reboot
 
Old 04-22-2019, 07:45 AM   #3179
cwizardone
Senior Member
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib" & Xfce.
Posts: 4,674
Blog Entries: 1

Rep: Reputation: 2012Reputation: 2012Reputation: 2012Reputation: 2012Reputation: 2012Reputation: 2012Reputation: 2012Reputation: 2012Reputation: 2012Reputation: 2012Reputation: 2012
No problem here with the 4.19.36 kernel. None.
 
Old 04-22-2019, 08:12 AM   #3180
kkady32
Member
 
Registered: Dec 2010
Distribution: Slackware64-current
Posts: 115

Rep: Reputation: 42
from dmesg:

Quote:
8.161829] Bluetooth: hci0: Applying Intel DDC parameters completed
[ 125.687201] EXT4-fs (sda1): re-mounted. Opts: (null)
[ 246.682624] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Requests for -current (20151216) rworkman Slackware 3441 12-28-2017 03:50 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 05:59 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration