crux-devel

Download

crux-devel@lists.crux.nu

August 2013

3 participants
2 discussions

prt-get --group
by Alan Mizrahi 30 Aug '13

30 Aug '13

Hi people, I made a change in prt-get to add a --group parameter. When --group is present the operation becomes a group operation, and a failure to install or upgrade a package makes prt-get stop. So: prt-get grpinst ... Becomes: prt-get install --group ... But one can also use it with the other invocations: prt-get update --group ... prt-get depinst --group ... prt-get sysup --group This renders grpinst obsolete, so the patch also removes it. Any opinions? Best regards, Alan Mizrahi

2 1

[oeriksson@mandriva.com: [oss-security] CVE Request -- php - handling of certs with null bytes]
by Fredrik Rinnestam 16 Aug '13

16 Aug '13

----- Forwarded message from Oden Eriksson <oeriksson(a)mandriva.com> ----- Date: Wed, 14 Aug 2013 10:47:06 +0200 From: Oden Eriksson <oeriksson(a)mandriva.com> To: oss-security(a)lists.openwall.com Subject: [oss-security] CVE Request -- php - handling of certs with null bytes User-Agent: KMail/4.10.5 (Linux/3.8.13.4-desktop-1.mga3; KDE/4.10.5; x86_64; ; ) Hello, A similar flaw as in ruby and python was discovered and fixed for php. ruby - CVE-2013-4073 python - CVE-2013-4238 php - CVE-2013-???? http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulner… Upstream fixes: http://git.php.net/?p=php-src.git;a=commit;h=dcea4ec698dcae39b7bba6f6aa0893… http://git.php.net/?p=php-src.git;a=commit;h=2874696a5a8d46639d261571f915c4… _https://bugs.mageia.org/show_bug.cgi?id=10997_ Cheers. -------- [1] http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulner… [2] http://git.php.net/?p=php-src.git;a=commit;h=dcea4ec698dcae39b7bba6f6aa0893… [3] http://git.php.net/?p=php-src.git;a=commit;h=2874696a5a8d46639d261571f915c4… ----- End forwarded message ----- -- Fredrik Rinnestam -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1