Miroirs/slackware-current
1
0
Fork 0
mirror of git://slackware.nl/current.git synced 2024-12-27 09:59:16 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Wed Dec 4 22:24:22 UTC 2024

Browse source 
patches/packages/python3-3.9.21-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  gh-126623: Upgraded libexpat to 2.6.4 to fix CVE-2024-50602.
  gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to consistently use the
  mapped IPv4 address value for deciding properties. Properties which have
  their behavior fixed are is_multicast, is_reserved, is_link_local, is_global,
  and is_unspecified.
  gh-124651: Properly quote template strings in venv activation scripts.
  gh-103848: Added checks to ensure that [ bracketed ] hosts found by
  urllib.parse.urlsplit() are of IPv6 or IPvFuture format.
  gh-95588: Clarified the conflicting advice given in the ast documentation
  about ast.literal_eval() being safe for use on untrusted input while at the
  same time warning that it can crash the process. The latter statement is true
  and is deemed unfixable without a large amount of work unsuitable for a
  bugfix. So we keep the warning and no longer claim that literal_eval is safe.
  For more information, see:
    https://pythoninsider.blogspot.com/2024/12/python-3131-3128-31111-31016-and-3921.html
    https://www.cve.org/CVERecord?id=CVE-2024-50602
  (* Security fix *)
This commit is contained in:
Patrick J Volkerding 2024-12-04 22:24:22 +00:00 committed by Eric Hameleers
parent ed6f2434aa
commit 39de03bf5f
4 changed files with 73 additions and 23 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
ChangeLog.rss
View file

@ -11,9 +11,38 @@
<description>Tracking Slackware development in git.</description> <description>Tracking Slackware development in git.</description>
<language>en-us</language> <language>en-us</language>
<id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id> <id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
<pubDate>Tue, 3 Dec 2024 22:37:55 GMT</pubDate> <pubDate>Wed, 4 Dec 2024 22:24:22 GMT</pubDate>
<lastBuildDate>Wed, 4 Dec 2024 12:30:31 GMT</lastBuildDate> <lastBuildDate>Thu, 5 Dec 2024 12:30:29 GMT</lastBuildDate>
<generator>maintain_current_git.sh v 1.17</generator> <generator>maintain_current_git.sh v 1.17</generator>
<item>
<title>Wed, 4 Dec 2024 22:24:22 GMT</title>
<pubDate>Wed, 4 Dec 2024 22:24:22 GMT</pubDate>
<link>https://git.slackware.nl/current/tag/?h=20241204222422</link>
<guid isPermaLink="false">20241204222422</guid>
<description>
<![CDATA[<pre>
patches/packages/python3-3.9.21-x86_64-1_slack15.0.txz: Upgraded.
This update fixes security issues:
gh-126623: Upgraded libexpat to 2.6.4 to fix CVE-2024-50602.
gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to consistently use the
mapped IPv4 address value for deciding properties. Properties which have
their behavior fixed are is_multicast, is_reserved, is_link_local, is_global,
and is_unspecified.
gh-124651: Properly quote template strings in venv activation scripts.
gh-103848: Added checks to ensure that [ bracketed ] hosts found by
urllib.parse.urlsplit() are of IPv6 or IPvFuture format.
gh-95588: Clarified the conflicting advice given in the ast documentation
about ast.literal_eval() being safe for use on untrusted input while at the
same time warning that it can crash the process. The latter statement is true
and is deemed unfixable without a large amount of work unsuitable for a
bugfix. So we keep the warning and no longer claim that literal_eval is safe.
For more information, see:
https://pythoninsider.blogspot.com/2024/12/python-3131-3128-31111-31016-and-3921.html
https://www.cve.org/CVERecord?id=CVE-2024-50602
(* Security fix *)
</pre>]]>
</description>
</item>
<item> <item>
<title>Tue, 3 Dec 2024 22:37:55 GMT</title> <title>Tue, 3 Dec 2024 22:37:55 GMT</title>
<pubDate>Tue, 3 Dec 2024 22:37:55 GMT</pubDate> <pubDate>Tue, 3 Dec 2024 22:37:55 GMT</pubDate>

21
ChangeLog.txt
View file

@ -1,3 +1,24 @@
Wed Dec 4 22:24:22 UTC 2024
patches/packages/python3-3.9.21-x86_64-1_slack15.0.txz: Upgraded.
This update fixes security issues:
gh-126623: Upgraded libexpat to 2.6.4 to fix CVE-2024-50602.
gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to consistently use the
mapped IPv4 address value for deciding properties. Properties which have
their behavior fixed are is_multicast, is_reserved, is_link_local, is_global,
and is_unspecified.
gh-124651: Properly quote template strings in venv activation scripts.
gh-103848: Added checks to ensure that [ bracketed ] hosts found by
urllib.parse.urlsplit() are of IPv6 or IPvFuture format.
gh-95588: Clarified the conflicting advice given in the ast documentation
about ast.literal_eval() being safe for use on untrusted input while at the
same time warning that it can crash the process. The latter statement is true
and is deemed unfixable without a large amount of work unsuitable for a
bugfix. So we keep the warning and no longer claim that literal_eval is safe.
For more information, see:
https://pythoninsider.blogspot.com/2024/12/python-3131-3128-31111-31016-and-3921.html
https://www.cve.org/CVERecord?id=CVE-2024-50602
(* Security fix *)
+--------------------------+
Tue Dec 3 22:37:55 UTC 2024 Tue Dec 3 22:37:55 UTC 2024
extra/llvm-19.1.5-x86_64-1_slack15.0.txz: Upgraded. extra/llvm-19.1.5-x86_64-1_slack15.0.txz: Upgraded.
patches/packages/mozilla-thunderbird-128.5.1esr-x86_64-1_slack15.0.txz: Upgraded. patches/packages/mozilla-thunderbird-128.5.1esr-x86_64-1_slack15.0.txz: Upgraded.

42
FILELIST.TXT
View file

@ -1,20 +1,20 @@
Tue Dec 3 22:41:53 UTC 2024 Wed Dec 4 22:27:34 UTC 2024
Here is the file list for this directory. If you are using a Here is the file list for this directory. If you are using a
mirror site and find missing or extra files in the disk mirror site and find missing or extra files in the disk
subdirectories, please have the archive administrator refresh subdirectories, please have the archive administrator refresh
the mirror. the mirror.
drwxr-xr-x 12 root root 4096 2024-12-03 22:37 . drwxr-xr-x 12 root root 4096 2024-12-04 22:24 .
-rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0 -rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0
-rw-r--r-- 1 root root 16609 2022-03-30 19:03 ./CHANGES_AND_HINTS.TXT -rw-r--r-- 1 root root 16609 2022-03-30 19:03 ./CHANGES_AND_HINTS.TXT
-rw-r--r-- 1 root root 1261886 2024-11-30 20:54 ./CHECKSUMS.md5 -rw-r--r-- 1 root root 1261886 2024-12-03 22:42 ./CHECKSUMS.md5
-rw-r--r-- 1 root root 195 2024-11-30 20:54 ./CHECKSUMS.md5.asc -rw-r--r-- 1 root root 195 2024-12-03 22:42 ./CHECKSUMS.md5.asc
-rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING -rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING
-rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3 -rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3
-rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT -rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT
-rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT -rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT
-rw-r--r-- 1 root root 2180303 2024-12-03 22:37 ./ChangeLog.txt -rw-r--r-- 1 root root 2181566 2024-12-04 22:24 ./ChangeLog.txt
drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI
drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT
-rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi -rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi
@ -25,7 +25,7 @@ drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT
-rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh -rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh
-rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg -rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg
-rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg -rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg
-rw-r--r-- 1 root root 1654099 2024-11-30 20:54 ./FILELIST.TXT -rw-r--r-- 1 root root 1654099 2024-12-03 22:41 ./FILELIST.TXT
-rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY -rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY
-rw-r--r-- 1 root root 864745 2022-02-02 08:25 ./PACKAGES.TXT -rw-r--r-- 1 root root 864745 2022-02-02 08:25 ./PACKAGES.TXT
-rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT -rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT
@ -821,13 +821,13 @@ drwxr-xr-x 2 root root 4096 2022-12-17 19:52 ./pasture/source/samba
-rw-r--r-- 1 root root 7921 2018-04-29 17:31 ./pasture/source/samba/smb.conf.default -rw-r--r-- 1 root root 7921 2018-04-29 17:31 ./pasture/source/samba/smb.conf.default
-rw-r--r-- 1 root root 7933 2018-01-14 20:41 ./pasture/source/samba/smb.conf.default.orig -rw-r--r-- 1 root root 7933 2018-01-14 20:41 ./pasture/source/samba/smb.conf.default.orig
-rw-r--r-- 1 root root 536 2017-03-23 19:18 ./pasture/source/samba/smb.conf.diff.gz -rw-r--r-- 1 root root 536 2017-03-23 19:18 ./pasture/source/samba/smb.conf.diff.gz
drwxr-xr-x 4 root root 4096 2024-12-03 22:41 ./patches drwxr-xr-x 4 root root 4096 2024-12-04 22:27 ./patches
-rw-r--r-- 1 root root 142654 2024-12-03 22:41 ./patches/CHECKSUMS.md5 -rw-r--r-- 1 root root 142654 2024-12-04 22:27 ./patches/CHECKSUMS.md5
-rw-r--r-- 1 root root 195 2024-12-03 22:41 ./patches/CHECKSUMS.md5.asc -rw-r--r-- 1 root root 195 2024-12-04 22:27 ./patches/CHECKSUMS.md5.asc
-rw-r--r-- 1 root root 196688 2024-12-03 22:41 ./patches/FILE_LIST -rw-r--r-- 1 root root 196688 2024-12-04 22:27 ./patches/FILE_LIST
-rw-r--r-- 1 root root 19009709 2024-12-03 22:41 ./patches/MANIFEST.bz2 -rw-r--r-- 1 root root 18986623 2024-12-04 22:27 ./patches/MANIFEST.bz2
-rw-r--r-- 1 root root 100361 2024-12-03 22:41 ./patches/PACKAGES.TXT -rw-r--r-- 1 root root 100361 2024-12-04 22:27 ./patches/PACKAGES.TXT
drwxr-xr-x 7 root root 32768 2024-12-03 22:41 ./patches/packages drwxr-xr-x 7 root root 32768 2024-12-04 22:27 ./patches/packages
-rw-r--r-- 1 root root 360 2023-09-26 19:28 ./patches/packages/Cython-0.29.36-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 360 2023-09-26 19:28 ./patches/packages/Cython-0.29.36-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 2389564 2023-09-26 19:28 ./patches/packages/Cython-0.29.36-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 2389564 2023-09-26 19:28 ./patches/packages/Cython-0.29.36-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2023-09-26 19:28 ./patches/packages/Cython-0.29.36-x86_64-1_slack15.0.txz.asc -rw-r--r-- 1 root root 163 2023-09-26 19:28 ./patches/packages/Cython-0.29.36-x86_64-1_slack15.0.txz.asc
@ -1205,9 +1205,9 @@ drwxr-xr-x 2 root root 4096 2024-06-08 19:45 ./patches/packages/old-linux
-rw-r--r-- 1 root root 371 2023-12-20 20:35 ./patches/packages/proftpd-1.3.8b-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 371 2023-12-20 20:35 ./patches/packages/proftpd-1.3.8b-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 1392708 2023-12-20 20:35 ./patches/packages/proftpd-1.3.8b-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 1392708 2023-12-20 20:35 ./patches/packages/proftpd-1.3.8b-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2023-12-20 20:35 ./patches/packages/proftpd-1.3.8b-x86_64-1_slack15.0.txz.asc -rw-r--r-- 1 root root 163 2023-12-20 20:35 ./patches/packages/proftpd-1.3.8b-x86_64-1_slack15.0.txz.asc
-rw-r--r-- 1 root root 664 2024-09-08 18:22 ./patches/packages/python3-3.9.20-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 664 2024-12-04 20:09 ./patches/packages/python3-3.9.21-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 19179024 2024-09-08 18:22 ./patches/packages/python3-3.9.20-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 19180952 2024-12-04 20:09 ./patches/packages/python3-3.9.21-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 195 2024-09-08 18:22 ./patches/packages/python3-3.9.20-x86_64-1_slack15.0.txz.asc -rw-r--r-- 1 root root 195 2024-12-04 20:09 ./patches/packages/python3-3.9.21-x86_64-1_slack15.0.txz.asc
-rw-r--r-- 1 root root 260 2022-03-20 22:36 ./patches/packages/qt5-5.15.3_20220318_e507d3e5-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 260 2022-03-20 22:36 ./patches/packages/qt5-5.15.3_20220318_e507d3e5-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 99025556 2022-03-20 22:36 ./patches/packages/qt5-5.15.3_20220318_e507d3e5-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 99025556 2022-03-20 22:36 ./patches/packages/qt5-5.15.3_20220318_e507d3e5-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2022-03-20 22:36 ./patches/packages/qt5-5.15.3_20220318_e507d3e5-x86_64-1_slack15.0.txz.asc -rw-r--r-- 1 root root 163 2022-03-20 22:36 ./patches/packages/qt5-5.15.3_20220318_e507d3e5-x86_64-1_slack15.0.txz.asc
@ -1319,7 +1319,7 @@ drwxr-xr-x 2 root root 4096 2024-06-08 19:45 ./patches/packages/old-linux
-rw-r--r-- 1 root root 463 2023-04-05 18:16 ./patches/packages/zstd-1.5.5-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 463 2023-04-05 18:16 ./patches/packages/zstd-1.5.5-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 459652 2023-04-05 18:16 ./patches/packages/zstd-1.5.5-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 459652 2023-04-05 18:16 ./patches/packages/zstd-1.5.5-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2023-04-05 18:16 ./patches/packages/zstd-1.5.5-x86_64-1_slack15.0.txz.asc -rw-r--r-- 1 root root 163 2023-04-05 18:16 ./patches/packages/zstd-1.5.5-x86_64-1_slack15.0.txz.asc
drwxr-xr-x 136 root root 4096 2024-12-03 22:37 ./patches/source drwxr-xr-x 136 root root 4096 2024-12-04 22:18 ./patches/source
drwxr-xr-x 2 root root 4096 2023-09-26 19:22 ./patches/source/Cython drwxr-xr-x 2 root root 4096 2023-09-26 19:22 ./patches/source/Cython
-rw-r--r-- 1 root root 1623580 2023-07-04 19:24 ./patches/source/Cython/Cython-0.29.36.tar.lz -rw-r--r-- 1 root root 1623580 2023-07-04 19:24 ./patches/source/Cython/Cython-0.29.36.tar.lz
-rwxr-xr-x 1 root root 3041 2023-09-26 19:23 ./patches/source/Cython/Cython.SlackBuild -rwxr-xr-x 1 root root 3041 2023-09-26 19:23 ./patches/source/Cython/Cython.SlackBuild
@ -2430,11 +2430,11 @@ drwxr-xr-x 2 root root 4096 2017-04-20 21:08 ./patches/source/proftpd/etc
-rw-r--r-- 1 root root 13966952 2023-12-20 04:42 ./patches/source/proftpd/proftpd-1.3.8b.tar.xz -rw-r--r-- 1 root root 13966952 2023-12-20 04:42 ./patches/source/proftpd/proftpd-1.3.8b.tar.xz
-rwxr-xr-x 1 root root 4774 2023-12-20 20:34 ./patches/source/proftpd/proftpd.SlackBuild -rwxr-xr-x 1 root root 4774 2023-12-20 20:34 ./patches/source/proftpd/proftpd.SlackBuild
-rw-r--r-- 1 root root 826 2018-02-27 06:13 ./patches/source/proftpd/slack-desc -rw-r--r-- 1 root root 826 2018-02-27 06:13 ./patches/source/proftpd/slack-desc
drwxr-xr-x 2 root root 4096 2024-09-08 18:20 ./patches/source/python3 drwxr-xr-x 2 root root 4096 2024-12-04 19:58 ./patches/source/python3
-rw-r--r-- 1 root root 19648968 2024-09-06 19:46 ./patches/source/python3/Python-3.9.20.tar.xz -rw-r--r-- 1 root root 19647056 2024-12-03 18:18 ./patches/source/python3/Python-3.9.21.tar.xz
-rw-r--r-- 1 root root 833 2024-09-07 10:25 ./patches/source/python3/Python-3.9.20.tar.xz.asc -rw-r--r-- 1 root root 833 2024-12-03 18:18 ./patches/source/python3/Python-3.9.21.tar.xz.asc
-rw-r--r-- 1 root root 890 2017-01-12 20:00 ./patches/source/python3/README -rw-r--r-- 1 root root 890 2017-01-12 20:00 ./patches/source/python3/README
-rw-r--r-- 1 root root 2553492 2024-09-06 19:50 ./patches/source/python3/python-3.9.20-docs-text.tar.bz2 -rw-r--r-- 1 root root 2554222 2024-12-03 18:19 ./patches/source/python3/python-3.9.21-docs-text.tar.bz2
-rw-r--r-- 1 root root 372 2021-11-20 19:27 ./patches/source/python3/python.sysconfig.py.x86_64.diff.gz -rw-r--r-- 1 root root 372 2021-11-20 19:27 ./patches/source/python3/python.sysconfig.py.x86_64.diff.gz
-rwxr-xr-x 1 root root 6380 2023-06-08 19:59 ./patches/source/python3/python3.SlackBuild -rwxr-xr-x 1 root root 6380 2023-06-08 19:59 ./patches/source/python3/python3.SlackBuild
-rw-r--r-- 1 root root 495 2020-10-24 22:31 ./patches/source/python3/python3.distutils.x86_64.diff.gz -rw-r--r-- 1 root root 495 2020-10-24 22:31 ./patches/source/python3/python3.distutils.x86_64.diff.gz

0
patches/packages/python3-3.9.20-x86_64-1_slack15.0.txt → patches/packages/python3-3.9.21-x86_64-1_slack15.0.txt
View file