diff options
Diffstat (limited to 'ChangeLog.txt')
| -rw-r--r-- | ChangeLog.txt | 45 |
1 files changed, 45 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index 68a3c84d..f3a35ee8 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,48 @@ +Tue Jun 19 22:35:25 UTC 2018 +a/acl-2.2.53-x86_64-1.txz: Upgraded. +a/attr-2.4.48-x86_64-1.txz: Upgraded. +n/gnupg-1.4.23-x86_64-1.txz: Upgraded. + Sanitize the diagnostic output of the original file name in verbose mode. + By using a made up file name in the message it was possible to fake status + messages. Using this technique it was for example possible to fake the + verification status of a signed mail. + For more information, see: + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12020 + (* Security fix *) +x/libXaw3d-1.6.3-x86_64-1.txz: Upgraded. +x/libinput-1.11.1-x86_64-1.txz: Upgraded. +x/xf86-input-mouse-1.9.3-x86_64-1.txz: Upgraded. +testing/packages/pkgtools-15.0-noarch-20.txz: Rebuilt. + This update is a bit scarier than usual, so we're going to test it here + first and then move it into the main tree in a couple of days if there + are no serious bug reports. It's well-tested here, and works with the + slackpkg that's in -current now, but I don't know about slackpkg+ so that's + another reason to let it cool down here first. The purpose of this update + is to migrate the package database and directories from /var/log to + /var/lib/pkgtools. /var/log was never a good place for this data, as it is + considered by many to be a directory that could be wiped to free up some + space. Originally the package database was in /var/adm, but the FSSTND + (later FHS) group decided that directory should be a symlink to /var/log, + and I went along with that since it was years ago and I was a n00b and didn't + know any better. /var/lib/pkgtools will be a better and safer location. + The removed_packages and removed_scripts directories are really just logs + that aren't actually used for anything - those will remain under /var/log, + but moved into /var/log/pkgtools. Everything under /var/log will be + considered potentially non-permanent by the pkgtools - if any directories or + symlinks disappear from there, the pkgtools will automatically recreate them + as needed. In fact, the migration process will create symlinks from all the + old directory locations to the new ones, so anything that expects the old + locations (including slackpkg, for now) should continue to work. Once this + moves into the main tree, the plan is to fix other packages to use the new + installer script directory (/var/lib/pkgtools/setup) and change the installer + and slackpkg to use the new native locations for everything. When slackpkg + is changed over to use the new native locations, I'll also make sure to float + that in testing/ for a few days before moving it to the main tree to avoid + more unintentional disruption to slackpkg+ users. + Be aware that the package database migration is a one-way operation, but even + so if you later downgrade to an older version of the pkgtools it will still + work through the compatibility symlinks. ++--------------------------+ Tue Jun 19 05:47:22 UTC 2018 a/btrfs-progs-v4.17-x86_64-1.txz: Upgraded. a/lvm2-2.02.179-x86_64-1.txz: Upgraded. |