Archive for the tag "glibc"
Barely a week has passed, and we have yet another local root hole in glibc that needed patching. The Slackware ChangeLog said it like this: a/glibc-solibs-2.12.1-x86_64-3.txz: Rebuilt. Patched “The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads.” This security issue allows a local attacker to gain root by specifying an unsafe […]
New glibc packages for Slackware arrived on the mirrors last night. They close a serious local root hole. From the ChangeLog: Patched “dynamic linker expands $ORIGIN in setuid library search path”. This security issue allows a local attacker to gain root if they can create a hard link to a setuid root binary. Thanks to […]
As you may have noticed already, there are interesting updates in the Slackware ChangeLog.txt ! A new kernel, and new glibc plus gcc packages means there has to be an updated set of multilib packages too or else you bunch of hybrid lovers would be left out in the cold. Well actually there is an […]
Hi folks As the Slackware ChangeLog states: Fri May 14 19:37:13 UTC 2010 Good hello! We will call this update Slackware 13.1 RC1. With this, the kernel, compiler, and glibc versions are “golden”, and everything is pretty much ready to release. Last call for bug reports… I’m in the process of building the multilib versions […]
… Ok, ok, it is not so bad actually! Au contraire! Slackware Linux development made a big leap today, when Pat Volkerding updated the distro’s “vital organs” of kernel, glibc and gcc. The “dull” phase of the slackware-current development cycle is over hopefully, and it’s back to the bleeding edge. To be fair, gcc 4.4.2 […]