-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security]  util-linux (SSA:2023-290-01)

New util-linux packages are available for Slackware 15.0 and -current to
fix a security issue.


Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/util-linux-2.37.4-i586-2_slack15.0.txz:  Rebuilt.
  Copy /etc/pam.d/login to /etc/pam.d/remote. This is needed for /bin/login's
  '-h' option, used (for example) by telnetd. If -h is used without
  /etc/pam.d/remote, pam will not be configured properly, and /etc/securetty
  will be ignored, possibly allowing root to login from a tty that is not
  considered secure. Of course, the usual disclaimers about the security of
  telnet/telnetd apply.
  Thanks to HytronBG and Petri Kaukasoina.
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(https://osuosl.org/) for donating FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://www.slackware.com/ for
additional mirror sites near you.

Updated package for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/util-linux-2.37.4-i586-2_slack15.0.txz

Updated package for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/util-linux-2.37.4-x86_64-2_slack15.0.txz

Updated package for Slackware -current:

Updated package for Slackware x86_64 -current:


MD5 signatures:
+-------------+

Slackware 15.0 package:
0ab69fb662e808d5033a62b917687a89  util-linux-2.37.4-i586-2_slack15.0.txz

Slackware x86_64 15.0 package:
2dc9875335310349305fa954df3e1718  util-linux-2.37.4-x86_64-2_slack15.0.txz

Slackware -current package:
984ab1346951c9fd35630b91bada57ba  a/util-linux-2.39.2-i586-2.txz

Slackware x86_64 -current package:
706adb41ef91134d363b1fd9d1fbc967  a/util-linux-2.39.2-x86_64-2.txz


Installation instructions:
+------------------------+

Upgrade the package as root:
# upgradepkg util-linux-2.37.4-i586-2_slack15.0.txz


+-----+

Slackware: 2023-290-01: util-linux Security Update

October 17, 2023
New util-linux packages are available for Slackware 15.0 and -current to fix a security issue

Summary

Here are the details from the Slackware 15.0 ChangeLog: patches/packages/util-linux-2.37.4-i586-2_slack15.0.txz: Rebuilt. Copy /etc/pam.d/login to /etc/pam.d/remote. This is needed for /bin/login's '-h' option, used (for example) by telnetd. If -h is used without /etc/pam.d/remote, pam will not be configured properly, and /etc/securetty will be ignored, possibly allowing root to login from a tty that is not considered secure. Of course, the usual disclaimers about the security of telnet/telnetd apply. Thanks to HytronBG and Petri Kaukasoina. (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/util-linux-2.37.4-i586-2_slack15.0.txz
Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/util-linux-2.37.4-x86_64-2_slack15.0.txz
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 15.0 package: 0ab69fb662e808d5033a62b917687a89 util-linux-2.37.4-i586-2_slack15.0.txz
Slackware x86_64 15.0 package: 2dc9875335310349305fa954df3e1718 util-linux-2.37.4-x86_64-2_slack15.0.txz
Slackware -current package: 984ab1346951c9fd35630b91bada57ba a/util-linux-2.39.2-i586-2.txz
Slackware x86_64 -current package: 706adb41ef91134d363b1fd9d1fbc967 a/util-linux-2.39.2-x86_64-2.txz

Severity
[slackware-security] util-linux (SSA:2023-290-01)
New util-linux packages are available for Slackware 15.0 and -current to fix a security issue.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg util-linux-2.37.4-i586-2_slack15.0.txz

Related News