Skip to Content.
Sympa Menu

sm-discuss - [SM-Discuss] Announcing stable grimoire 0.61-21 release

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Vlad Glagolev <stealth AT tiberian.ru>
  • To: Source Mage Discussion <sm-discuss AT lists.ibiblio.org>
  • Cc: sm-announce AT lists.ibiblio.org
  • Subject: [SM-Discuss] Announcing stable grimoire 0.61-21 release
  • Date: Fri, 30 Jan 2015 11:57:30 +0300

Stable grimoire version 0.61-21 has been released!

It's a long-awaiting security release with included fixes for
Heartbleed (openssl)[0], ShellShock (bash)[1] and GHOST (glibc)[2] for
0.61 stable (current stable) branch. GHOST one is really dangerous [3],
you can check for vulnerable systems via compiling GHOST.c file[4].

The tarballs have been signed and uploaded to our server and will be
propogating out to the mirrors within six hours.

To download the grimoire manually, get
http://codex.sourcemage.org/stable.tar.bz2 or specifically
http://codex.sourcemage.org/stable-0.61.tar.bz2 .

GPG signatures are available at
http://codex.sourcemage.org/stable.tar.bz2.asc or
http://codex.sourcemage.org/stable-0.61.tar.bz2.asc .

Following updates were integrated[5]:

Eric Sandall (2):
openssl: Work-around for Bug #556 no longer needed (cherry picked
from commit 544add2f2405b8bc918f07f837a414a11d0bbc01)
openssl: Parallel jobs on install work, re-enable with make_normal
(cherry picked from commit 3dcb495c36cd1888d3dd66d9f56cde4acc0b68a5)

Florian Franzmann (8):
shell-term-fm/bash: add patches 38-45 (cherry picked from commit
a2beb984b6795b2e29fd40cc0f49cd5c7299e354)
shell-term-fm/bash: version 4.3 patchlevel 25 (cherry picked from
commit fc999e5e88455dfdc844706804db20354b22df23)
shell-term-fm/bash: fix CVE 2014 7169 (cherry picked from commit
d075d0bdb85b6fd78517064bc911af64a2ef5f4e)
shell-term-fm/bash: replace unofficial patch for CVE 2014 7169 with the
upstream patch (cherry picked from commit
707d46aaf0b9d27b9c4e9b3041892539adb78da9)
shell-term-fm/bash: another patch against the ShellShock issues,
security update (cherry picked from commit
598d3d28572b29ea4634e7c3db6b1a5e9d368aeb)
crypto/openssl: version 1.0.1g, fixes CVE-2014-0160 (cherry picked
from commit 3602ff4607c6d3c675a0adbdc50a27b4b17d33e1)
crypto/openssl: versions 0.9.8zc and 1.0.1j, fixes CVE-2014-3513,
CVE-2014-3567, CVE-2014-3568 (cherry picked from commit
6008ba006698e290bed753e2a7a946e724d0364f)
disk/lilo: version 24.0 (cherry picked from commit
cb95d872e35cf0d021e728fdda4cebf21dab5081)

Ladislav Hagara (3):
bash 4.3.30, SECURITY_PATCH=8 (cherry picked from commit
e88ce9afb4c87ccfe8361f0ff7f45374d40d8733)
openssl 1.0.0l, SECURITY_PATCH=21 (cherry picked from commit
2d5628d16d10368299f10c284a9968ac52ffb063)
openssl 0.9.8zd, 1.0.1k, SECURITY_PATCH++ (cherry picked from
commit e89b45edd79e13d5e6dcf594e65269c3a1a84422)

Treeve Jelbert (2):
readline: => 6.3 (cherry picked from commit
96226863928bf48ba146e93d293b1ad085751cc0)
readline - tweak install (cherry picked from commit
da5a26f03c88b04d03e22961a9eea1665d7ef54c)

Vlad Glagolev (12):
glibc: added ability to build valgrind-friendly version (cherry
picked from commit 21338d5f7bbf149474af72cde762628a6270be68)
glibc: critical security update (CVE-2015-0235)
readline: corrected a typo in HISTORY (cherry picked from commit
45a920c32dbcdcd7295b9cfce305455720abef0b)
readline: resurrect-compliance++ (cherry picked from commit
ceeb6aaa052b87fdbfc66d9ca759befb071cbea9)
bash: => 4.3.28 [security] (cherry picked from commit
9286565c8a13c90c11fb1a92b614800a20756549)
bash: => 4.3.29 [security] (cherry picked from commit
a161fe690b36fdf5296ccacfac811c5854779944)
openssl: => 1.0.1h (1.0), 0.9.8za (0.9) [security] (cherry picked
from commit 5341e4ebfa9593756ad8b1c242af18a9dc54cba6)
openssl: => 1.0.1i (1.0), 0.9.8zb (0.9) [security] (cherry picked
from commit 0fc4b9a254a36d38c07b3fbe62442ac377c3c5a2)
simpleinit-msb: fixed critical segfault on invoking from Xen (as a
guest HVM DomU) (cherry picked from commit
1b1cf232f72479eefdc007c9fcf45397655ebda6)
lilo: added patch for Xen XVD disks recognition (cherry picked from
commit 0399d9c1077b4b429a2965ff67f8fac2a31ab6a0)
lilo: => 24.1 (cherry picked from commit
0de096102d0e659c8cce74b9e5352f85a3bd02d8)
VERSION: 0.61-21

[0] http://heartbleed.com/
[1] https://shellshocker.net/
[2] http://www.openwall.com/lists/oss-security/2015/01/27/9
[3]
https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability
[4]
http://www.cyberciti.biz/faq/cve-2015-0235-ghost-glibc-buffer-overflow-linux-test-program/
[5] Generated: 'git shortlog --no-merges stable-0.61-20..stable-0.61-21'

--
Vlad Glagolev <stealth AT tiberian.ru>

Attachment: pgpjmq0RC6E_U.pgp
Description: PGP signature



  • [SM-Discuss] Announcing stable grimoire 0.61-21 release, Vlad Glagolev, 01/30/2015

Archive powered by MHonArc 2.6.24.

Top of Page