Slackware kicks off '17 w/ 1 'png' patch & 2 Mozilla patches

[belham2]

http://www.theregister.co.uk/2017/01/03 ... cient_bug/


Libpng library gets fix for truly ancient bug
Where were you in June 1995? Coding image libraries?
3 Jan 2017 at 06:02, Richard Chirgwin

Slackware has raced out of the blocks in 2017, issuing one patch for the libpng image library on New Year's Day, and two Mozilla patches.

The libpng bug got its Common Vulnerabilities and Exposures number, CVE-2016-10087, on December 30. Slackware's announcement says the bug can't be exploited without active user input.

The “unlikely sequence

[peebee]

http://www.theregister.co.uk/2017/01/03 ... cient_bug/

Fixed version already in LxPupSc-17.01.1

[8Geee]

Just reecently ca. Feb. 10 are patches for tcpdump and pcap. Openssl 1.0.2 has gone from J --> K. Slacko5.7 distros need the first two.

Sorry openssl 1.0.1 no more updates.

The security advisories for 2017 can be found HERE.

Regards
8Geee