[SOLVED] Stupid questions about security patches

badmitten · 09-28-2014, 04:03 PM

1) Somewhere I got it in my head that patches must be installed in order. But the slackware security patches look like new versions of whole applications.
So do I need to install all BASH patches in order or just the most recent? Can I assume the most recent security patch has all the prior security fixes as well?

2) On the slackware security page I can get some updates but not others:
The first one is successful but the second one fails consistently.

Code:

bash-4.2$ wget ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/mozilla-nss-3.16.5-x86_64-1_slack14.1.txz
--2014-09-28 17:00:56--  ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/mozilla-nss-3.16.5-x86_64-1_slack14.1.txz
           => 'mozilla-nss-3.16.5-x86_64-1_slack14.1.txz'
Resolving ftp.slackware.com (ftp.slackware.com)... 140.211.166.134
Connecting to ftp.slackware.com (ftp.slackware.com)|140.211.166.134|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /pub/slackware/slackware64-14.1/patches/packages ... done.
==> SIZE mozilla-nss-3.16.5-x86_64-1_slack14.1.txz ... 1599992
==> PASV ... done.    ==> RETR mozilla-nss-3.16.5-x86_64-1_slack14.1.txz ... done.
Length: 1599992 (1.5M) (unauthoritative)
                                                                                                                                                                           
100%[=================================================================================================================================>] 1,599,992    445KB/s   in 3.5s   

2014-09-28 17:01:01 (443 KB/s) - 'mozilla-nss-3.16.5-x86_64-1_slack14.1.txz' saved [1599992]

bash-4.2$ 
bash-4.2$ 
bash-4.2$ 
bash-4.2$ wget ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/bash-4.2.048-x86_64-2_slack14.1.txz
--2014-09-28 17:01:53--  ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/bash-4.2.048-x86_64-2_slack14.1.txz
           => 'bash-4.2.048-x86_64-2_slack14.1.txz'
Resolving ftp.slackware.com (ftp.slackware.com)... 140.211.166.134
Connecting to ftp.slackware.com (ftp.slackware.com)|140.211.166.134|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /pub/slackware/slackware64-14.1/patches/packages ... done.
==> SIZE bash-4.2.048-x86_64-2_slack14.1.txz ... done.
==> PASV ... done.    ==> RETR bash-4.2.048-x86_64-2_slack14.1.txz ... 
No such file 'bash-4.2.048-x86_64-2_slack14.1.txz'.

What am I doing wrong here? I've also tried using firefox to download the patches the result is the same.

mancha · 09-28-2014, 04:20 PM

There's no need to sequentially apply all patches from the version you're on to the current version. In fact, you can't even if you'd
want to because the patches directory only contains the current patch package. This is why your 2nd wget fails. You need to wget
bash-4.2.049-x86_64-2_slack14.0.txz instead.

--mancha

badmitten · 09-28-2014, 04:54 PM

I think I understand. So when I look at this list:

http://www.slackware.com/security/li...ecurity&y=2014

I need to find the most recent patch of the same name and install that one. The prior patches of the same name won't be there.

Do I have it correct?

keefaz · 09-28-2014, 05:14 PM

Read Changelog last entry:
ftp://ftp.osuosl.org/pub/slackware/s.../ChangeLog.txt

bassmadrigal · 09-30-2014, 11:34 AM

Do yourself a favor and just install slackpkg from /extra. Then uncomment only one server in /etc/slackpkg/mirrors that matches your slack version (14.1) and arch (32 or 64 bit). Then run

Code:

slackpkg update gpg #only needed once
slackpkg update
slackpkg upgrade-all

See http://docs.slackware.com/slackware:slackpkg for more details (note: if you are just doing security updates, you don't need to use install-new, as there won't be any new packages introduced to an already released version. install-new and clean-system are only used when upgrading to -current, although, be careful with clean system, as it can remove packages that you installed separately.)

You may want to also blacklist the following to prevent it from accidentally upgrading one of those.

Code:

[0-9]+_SBo
[0-9]+alien

Captain Pinkeye · 09-30-2014, 11:49 AM

Quote:

Originally Posted by badmitten

Somewhere I got it in my head that patches must be installed in order.

AFAIK this is true if you apply patches to source code that you complie afterwards, not binary packages.

Quote:

But the slackware security patches look like new versions of whole applications.

They are.