pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: [pkgsrc-2014Q2] pkgsrc/emulators/suse131_base



Module Name:    pkgsrc
Committed By:   tron
Date:           Thu Sep 11 19:16:33 UTC 2014

Modified Files:
        pkgsrc/emulators/suse131_base [pkgsrc-2014Q2]: Makefile distinfo

Log Message:
Pullup ticket #4497 - requested by obache
emulators/suse131_base: security update

Revisions pulled up:
- emulators/suse131_base/Makefile                               1.9 via patch
- emulators/suse131_base/distinfo                               1.7

---
   Module Name: pkgsrc
   Committed By:        obache
   Date:                Thu Sep 11 09:28:51 UTC 2014

   Modified Files:
        pkgsrc/emulators/suse131_base: Makefile distinfo

   Log Message:
   Bump suse131_base to nb5.

      openSUSE Security Update: glibc
   ___________________________________________________________________________
   ___

   Announcement ID:    openSUSE-SU-2014:1115-1
   Rating:             important
   References:         #887022 #892073 #894553
   Cross-References:   CVE-2014-0475 CVE-2014-5119 CVE-2014-6040

   Affected Products:
                       openSUSE 13.1
                       openSUSE 12.3
   ___________________________________________________________________________
   ___

      An update that fixes three vulnerabilities is now available.

   Description:

      glibc was updated to fix three security issues:

      - A directory traversal in locale environment handling was fixed
        (CVE-2014-0475, bnc#887022, GLIBC BZ #17137)

      - Disable gconv transliteration module loading which could be used for
        code execution (CVE-2014-5119, bnc#892073, GLIBC BZ #17187)

      - Fix crashes on invalid input in IBM gconv modules (CVE-2014-6040,
        bnc#894553, BZ #17325)


To generate a diff of this commit:
cvs rdiff -u -r1.7 -r1.7.2.1 pkgsrc/emulators/suse131_base/Makefile
cvs rdiff -u -r1.6 -r1.6.2.1 pkgsrc/emulators/suse131_base/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.




Home | Main Index | Thread Index | Old Index