php= old was Re: ntp

 

Indeed, looking at the changelog for -current though I am a bit
concerned, it still has php 5.4? thats in EOL phase, it will only for
next 12 months get critical security fixes, no general bug fixes and
nothing new. 

For me not a problem since I always build from source because of my
requirements, but if Pat is reading this group, he might like to know,
no config changes were required except for extensions path (obviously
since its a x.major. update), if anyone builds for them (suhosin etc)
going from 5.4 to 5.5 (.20 at present) so upgrade is painless. 

On 23/12/2014 18:28, Didier Spaier wrote: 

> Case closed:
> 
> Tue Dec 23 00:05:23 UTC 2014
> patches/packages/ntp-4.2.8-i486-1_slack14.1.txz: Upgraded.
> In addition to bug fixes and enhancements, this release fixes
> several high-severity vulnerabilities discovered by Neel Mehta
> and Stephen Roettger of the Google Security Team.
> For more information, see:
> https://www.kb.cert.org/vuls/id/852879 [1]
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9293 [2]
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9294 [3]
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295 [4]
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9296 [5]
> (* Security fix *)
> 
> _______________________________________________
> slackware mailing list
> [email protected]
> https://mailman.lug.org.uk/mailman/listinfo/slackware [6]

 

Links:
------
[1] https://www.kb.cert.org/vuls/id/852879
[2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9293
[3] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9294
[4] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295
[5] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9296
[6] https://mailman.lug.org.uk/mailman/listinfo/slackware

_______________________________________________
slackware mailing list
[email protected]
https://mailman.lug.org.uk/mailman/listinfo/slackware