From 71ceb94a1412ec19af5c69ad44880ad5cd8fd643 Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Sun, 20 Oct 2019 19:39:21 +0000 Subject: Sun Oct 20 19:39:21 UTC 2019 d/python-2.7.17-x86_64-1.txz: Upgraded. This update fixes bugs and security issues: Update vendorized expat library version to 2.2.8. Disallow URL paths with embedded whitespace or control characters into the underlying http client request. Such potentially malicious header injection URLs now cause an httplib.InvalidURL exception to be raised. Avoid file reading by disallowing ``local-file://`` and ``local_file://`` URL schemes in :func:`urllib.urlopen`, :meth:`urllib.URLopener.open` and :meth:`urllib.URLopener.retrieve`. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15903 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9740 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9948 (* Security fix *) n/proftpd-1.3.6b-x86_64-1.txz: Upgraded. --- source/n/proftpd/proftpd.SlackBuild | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'source/n/proftpd/proftpd.SlackBuild') diff --git a/source/n/proftpd/proftpd.SlackBuild b/source/n/proftpd/proftpd.SlackBuild index a2484230..21c21996 100755 --- a/source/n/proftpd/proftpd.SlackBuild +++ b/source/n/proftpd/proftpd.SlackBuild @@ -23,8 +23,8 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=proftpd -VERSION=1.3.6a -DIRVER=1.3.6a +VERSION=1.3.6b +DIRVER=1.3.6b BUILD=${BUILD:-1} NUMJOBS=${NUMJOBS:-" -j$(expr $(nproc) + 1) "} -- cgit v1.2.3