diff --git a/ChangeLog.rss b/ChangeLog.rss index cdc61b2b7..9e9bf2b0f 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,9 +11,47 @@ Tracking Slackware development in git. en-us urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f - Thu, 8 Feb 2024 22:17:18 GMT - Thu, 8 Feb 2024 23:47:33 GMT + Fri, 9 Feb 2024 21:48:09 GMT + Fri, 9 Feb 2024 22:28:49 GMT maintain_current_git.sh v 1.17 + + Fri, 9 Feb 2024 21:48:09 GMT + Fri, 9 Feb 2024 21:48:09 GMT + https://git.slackware.nl/current/tag/?h=20240209214809 + 20240209214809 + + +l/libhandy-1.8.3-x86_64-1.txz: Upgraded. +xap/xpdf-4.05-x86_64-1.txz: Upgraded. + This update fixes security issues: + Fixed a bug in the ICCBased color space parser that was allowing the number + of components to be zero. Thanks to huckleberry for the bug report. + Fixed a bug in the ICCBased color space parser that was allowing the number + of components to be zero. Thanks to huckleberry for the bug report. + Added checks for PDF object loops in AcroForm::scanField(), + Catalog::readPageLabelTree2(), and Catalog::readEmbeddedFileTree(). + The zero-width character problem can also happen if the page size is very + large -- that needs to be limited too, the same way as character position + coordinates. Thanks to jlinliu for the bug report. + Add some missing bounds check code in DCTStream. Thanks to Jiahao Liu for + the bug report. + Fix a deadlock when an object stream's length field is contained in another + object stream. Thanks to Jiahao Liu for the bug report. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2023-2662 + https://www.cve.org/CVERecord?id=CVE-2023-2662 + https://www.cve.org/CVERecord?id=CVE-2018-7453 + https://www.cve.org/CVERecord?id=CVE-2018-16369 + https://www.cve.org/CVERecord?id=CVE-2022-36561 + https://www.cve.org/CVERecord?id=CVE-2022-41844 + https://www.cve.org/CVERecord?id=CVE-2023-2663 + https://www.cve.org/CVERecord?id=CVE-2023-2664 + https://www.cve.org/CVERecord?id=CVE-2023-3044 + https://www.cve.org/CVERecord?id=CVE-2023-3436 + (* Security fix *) + ]]> + + Thu, 8 Feb 2024 22:17:18 GMT Thu, 8 Feb 2024 22:17:18 GMT diff --git a/ChangeLog.txt b/ChangeLog.txt index fa4aed52a..ecfeda000 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,33 @@ +Fri Feb 9 21:48:09 UTC 2024 +l/libhandy-1.8.3-x86_64-1.txz: Upgraded. +xap/xpdf-4.05-x86_64-1.txz: Upgraded. + This update fixes security issues: + Fixed a bug in the ICCBased color space parser that was allowing the number + of components to be zero. Thanks to huckleberry for the bug report. + Fixed a bug in the ICCBased color space parser that was allowing the number + of components to be zero. Thanks to huckleberry for the bug report. + Added checks for PDF object loops in AcroForm::scanField(), + Catalog::readPageLabelTree2(), and Catalog::readEmbeddedFileTree(). + The zero-width character problem can also happen if the page size is very + large -- that needs to be limited too, the same way as character position + coordinates. Thanks to jlinliu for the bug report. + Add some missing bounds check code in DCTStream. Thanks to Jiahao Liu for + the bug report. + Fix a deadlock when an object stream's length field is contained in another + object stream. Thanks to Jiahao Liu for the bug report. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2023-2662 + https://www.cve.org/CVERecord?id=CVE-2023-2662 + https://www.cve.org/CVERecord?id=CVE-2018-7453 + https://www.cve.org/CVERecord?id=CVE-2018-16369 + https://www.cve.org/CVERecord?id=CVE-2022-36561 + https://www.cve.org/CVERecord?id=CVE-2022-41844 + https://www.cve.org/CVERecord?id=CVE-2023-2663 + https://www.cve.org/CVERecord?id=CVE-2023-2664 + https://www.cve.org/CVERecord?id=CVE-2023-3044 + https://www.cve.org/CVERecord?id=CVE-2023-3436 + (* Security fix *) ++--------------------------+ Thu Feb 8 22:17:18 UTC 2024 a/kernel-firmware-20240208_fbef4d3-noarch-1.txz: Upgraded. a/kernel-generic-6.6.16-x86_64-1.txz: Upgraded. diff --git a/FILELIST.TXT b/FILELIST.TXT index 2ca6a86ea..e5ed89f0e 100644 --- a/FILELIST.TXT +++ b/FILELIST.TXT @@ -1,20 +1,20 @@ -Thu Feb 8 22:23:37 UTC 2024 +Fri Feb 9 21:52:32 UTC 2024 Here is the file list for this directory. If you are using a mirror site and find missing or extra files in the disk subdirectories, please have the archive administrator refresh the mirror. -drwxr-xr-x 12 root root 4096 2024-02-08 22:17 . +drwxr-xr-x 12 root root 4096 2024-02-09 21:48 . -rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0 -rw-r--r-- 1 root root 16617 2022-02-02 23:27 ./CHANGES_AND_HINTS.TXT --rw-r--r-- 1 root root 1136278 2024-02-07 20:12 ./CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2024-02-07 20:12 ./CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 1136451 2024-02-08 22:23 ./CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2024-02-08 22:23 ./CHECKSUMS.md5.asc -rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING -rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3 -rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT -rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT --rw-r--r-- 1 root root 950051 2024-02-08 22:17 ./ChangeLog.txt +-rw-r--r-- 1 root root 951653 2024-02-09 21:48 ./ChangeLog.txt drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI drwxr-xr-x 2 root root 4096 2024-02-08 22:17 ./EFI/BOOT -rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi @@ -25,9 +25,9 @@ drwxr-xr-x 2 root root 4096 2024-02-08 22:17 ./EFI/BOOT -rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh -rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg -rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg --rw-r--r-- 1 root root 1483205 2024-02-07 20:12 ./FILELIST.TXT +-rw-r--r-- 1 root root 1483488 2024-02-08 22:23 ./FILELIST.TXT -rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY --rw-r--r-- 1 root root 896563 2024-02-08 22:22 ./PACKAGES.TXT +-rw-r--r-- 1 root root 896563 2024-02-09 21:52 ./PACKAGES.TXT -rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT -rw-r--r-- 1 root root 3629 2024-02-08 22:05 ./README.initrd -rw-r--r-- 1 root root 34114 2023-12-11 20:35 ./README_CRYPT.TXT @@ -666,11 +666,11 @@ drwxr-xr-x 2 root root 4096 2022-02-03 07:02 ./patches -rw-r--r-- 1 root root 575 2022-02-03 07:02 ./patches/FILE_LIST -rw-r--r-- 1 root root 14 2022-02-03 07:02 ./patches/MANIFEST.bz2 -rw-r--r-- 1 root root 224 2022-02-03 07:02 ./patches/PACKAGES.TXT -drwxr-xr-x 17 root root 4096 2024-02-08 22:22 ./slackware64 --rw-r--r-- 1 root root 349457 2024-02-08 22:22 ./slackware64/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2024-02-08 22:22 ./slackware64/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 432903 2024-02-08 22:22 ./slackware64/FILE_LIST --rw-r--r-- 1 root root 4415556 2024-02-08 22:22 ./slackware64/MANIFEST.bz2 +drwxr-xr-x 17 root root 4096 2024-02-09 21:52 ./slackware64 +-rw-r--r-- 1 root root 349457 2024-02-09 21:52 ./slackware64/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2024-02-09 21:52 ./slackware64/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 432903 2024-02-09 21:51 ./slackware64/FILE_LIST +-rw-r--r-- 1 root root 4410557 2024-02-09 21:51 ./slackware64/MANIFEST.bz2 lrwxrwxrwx 1 root root 15 2009-08-23 23:34 ./slackware64/PACKAGES.TXT -> ../PACKAGES.TXT drwxr-xr-x 2 root root 32768 2024-02-08 22:21 ./slackware64/a -rw-r--r-- 1 root root 327 2022-02-15 18:16 ./slackware64/a/aaa_base-15.1-x86_64-2.txt @@ -2757,7 +2757,7 @@ drwxr-xr-x 2 root root 86016 2024-02-07 20:11 ./slackware64/kde -rw-r--r-- 1 root root 517 2023-12-07 21:02 ./slackware64/kde/zanshin-23.08.4-x86_64-1.txt -rw-r--r-- 1 root root 683696 2023-12-07 21:02 ./slackware64/kde/zanshin-23.08.4-x86_64-1.txz -rw-r--r-- 1 root root 163 2023-12-07 21:02 ./slackware64/kde/zanshin-23.08.4-x86_64-1.txz.asc -drwxr-xr-x 2 root root 90112 2024-02-08 22:22 ./slackware64/l +drwxr-xr-x 2 root root 90112 2024-02-09 21:51 ./slackware64/l -rw-r--r-- 1 root root 329 2022-03-06 20:00 ./slackware64/l/GConf-3.2.6-x86_64-8.txt -rw-r--r-- 1 root root 928144 2022-03-06 20:00 ./slackware64/l/GConf-3.2.6-x86_64-8.txz -rw-r--r-- 1 root root 163 2022-03-06 20:00 ./slackware64/l/GConf-3.2.6-x86_64-8.txz.asc @@ -3300,9 +3300,9 @@ drwxr-xr-x 2 root root 90112 2024-02-08 22:22 ./slackware64/l -rw-r--r-- 1 root root 342 2021-09-09 01:34 ./slackware64/l/libgtop-2.40.0-x86_64-5.txt -rw-r--r-- 1 root root 196192 2021-09-09 01:34 ./slackware64/l/libgtop-2.40.0-x86_64-5.txz -rw-r--r-- 1 root root 163 2021-09-09 01:34 ./slackware64/l/libgtop-2.40.0-x86_64-5.txz.asc --rw-r--r-- 1 root root 293 2023-03-04 19:38 ./slackware64/l/libhandy-1.8.2-x86_64-1.txt --rw-r--r-- 1 root root 447904 2023-03-04 19:38 ./slackware64/l/libhandy-1.8.2-x86_64-1.txz --rw-r--r-- 1 root root 163 2023-03-04 19:38 ./slackware64/l/libhandy-1.8.2-x86_64-1.txz.asc +-rw-r--r-- 1 root root 293 2024-02-09 19:22 ./slackware64/l/libhandy-1.8.3-x86_64-1.txt +-rw-r--r-- 1 root root 432484 2024-02-09 19:22 ./slackware64/l/libhandy-1.8.3-x86_64-1.txz +-rw-r--r-- 1 root root 163 2024-02-09 19:22 ./slackware64/l/libhandy-1.8.3-x86_64-1.txz.asc -rw-r--r-- 1 root root 461 2023-11-01 20:04 ./slackware64/l/libical-3.0.17-x86_64-2.txt -rw-r--r-- 1 root root 615596 2023-11-01 20:04 ./slackware64/l/libical-3.0.17-x86_64-2.txz -rw-r--r-- 1 root root 163 2023-11-01 20:04 ./slackware64/l/libical-3.0.17-x86_64-2.txz.asc @@ -5430,7 +5430,7 @@ drwxr-xr-x 2 root root 65536 2024-02-07 20:10 ./slackware64/x -rw-r--r-- 1 root root 213 2022-07-11 18:36 ./slackware64/x/xwud-1.0.6-x86_64-1.txt -rw-r--r-- 1 root root 25896 2022-07-11 18:36 ./slackware64/x/xwud-1.0.6-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-07-11 18:36 ./slackware64/x/xwud-1.0.6-x86_64-1.txz.asc -drwxr-xr-x 2 root root 16384 2024-02-07 20:10 ./slackware64/xap +drwxr-xr-x 2 root root 16384 2024-02-09 21:51 ./slackware64/xap -rw-r--r-- 1 root root 625 2024-01-30 20:29 ./slackware64/xap/MPlayer-20240130-x86_64-1.txt -rw-r--r-- 1 root root 2705540 2024-01-30 20:29 ./slackware64/xap/MPlayer-20240130-x86_64-1.txz -rw-r--r-- 1 root root 163 2024-01-30 20:29 ./slackware64/xap/MPlayer-20240130-x86_64-1.txz.asc @@ -5577,9 +5577,9 @@ drwxr-xr-x 2 root root 16384 2024-02-07 20:10 ./slackware64/xap -rw-r--r-- 1 root root 443 2023-12-05 23:08 ./slackware64/xap/xpaint-3.1.4-x86_64-2.txt -rw-r--r-- 1 root root 847840 2023-12-05 23:08 ./slackware64/xap/xpaint-3.1.4-x86_64-2.txz -rw-r--r-- 1 root root 163 2023-12-05 23:08 ./slackware64/xap/xpaint-3.1.4-x86_64-2.txz.asc --rw-r--r-- 1 root root 188 2022-04-26 18:19 ./slackware64/xap/xpdf-4.04-x86_64-1.txt --rw-r--r-- 1 root root 2516660 2022-04-26 18:19 ./slackware64/xap/xpdf-4.04-x86_64-1.txz --rw-r--r-- 1 root root 163 2022-04-26 18:19 ./slackware64/xap/xpdf-4.04-x86_64-1.txz.asc +-rw-r--r-- 1 root root 188 2024-02-09 19:27 ./slackware64/xap/xpdf-4.05-x86_64-1.txt +-rw-r--r-- 1 root root 2517468 2024-02-09 19:27 ./slackware64/xap/xpdf-4.05-x86_64-1.txz +-rw-r--r-- 1 root root 163 2024-02-09 19:27 ./slackware64/xap/xpdf-4.05-x86_64-1.txz.asc -rw-r--r-- 1 root root 498 2023-12-05 23:08 ./slackware64/xap/xsane-0.999-x86_64-6.txt -rw-r--r-- 1 root root 1624064 2023-12-05 23:08 ./slackware64/xap/xsane-0.999-x86_64-6.txz -rw-r--r-- 1 root root 163 2023-12-05 23:08 ./slackware64/xap/xsane-0.999-x86_64-6.txz.asc @@ -5697,11 +5697,11 @@ drwxr-xr-x 2 root root 4096 2023-03-08 20:34 ./slackware64/y -rw-r--r-- 1 root root 1491108 2023-02-19 18:31 ./slackware64/y/nethack-3.6.7-x86_64-1.txz -rw-r--r-- 1 root root 163 2023-02-19 18:31 ./slackware64/y/nethack-3.6.7-x86_64-1.txz.asc -rw-r--r-- 1 root root 26 2020-12-30 21:55 ./slackware64/y/tagfile -drwxr-xr-x 18 root root 4096 2024-02-08 22:23 ./source --rw-r--r-- 1 root root 611196 2024-02-08 22:23 ./source/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2024-02-08 22:23 ./source/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 851065 2024-02-08 22:23 ./source/FILE_LIST --rw-r--r-- 1 root root 25262969 2024-02-08 22:23 ./source/MANIFEST.bz2 +drwxr-xr-x 18 root root 4096 2024-02-09 21:52 ./source +-rw-r--r-- 1 root root 611196 2024-02-09 21:52 ./source/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2024-02-09 21:52 ./source/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 851065 2024-02-09 21:52 ./source/FILE_LIST +-rw-r--r-- 1 root root 25253473 2024-02-09 21:52 ./source/MANIFEST.bz2 -rw-r--r-- 1 root root 828 2022-02-02 04:43 ./source/README.TXT drwxr-xr-x 124 root root 4096 2024-01-26 20:27 ./source/a -rw-r--r-- 1 root root 339 2023-09-28 19:06 ./source/a/FTBFSlog @@ -10927,8 +10927,8 @@ drwxr-xr-x 2 root root 4096 2022-09-06 18:27 ./source/l/libgtop -rwxr-xr-x 1 root root 4420 2022-09-06 18:27 ./source/l/libgtop/libgtop.SlackBuild -rw-r--r-- 1 root root 44 2020-12-19 16:24 ./source/l/libgtop/libgtop.url -rw-r--r-- 1 root root 830 2020-12-27 20:39 ./source/l/libgtop/slack-desc -drwxr-xr-x 2 root root 4096 2023-03-04 19:37 ./source/l/libhandy --rw-r--r-- 1 root root 1778096 2023-03-04 12:14 ./source/l/libhandy/libhandy-1.8.2.tar.xz +drwxr-xr-x 2 root root 4096 2024-02-09 19:22 ./source/l/libhandy +-rw-r--r-- 1 root root 1791428 2024-02-09 13:36 ./source/l/libhandy/libhandy-1.8.3.tar.xz -rwxr-xr-x 1 root root 3268 2023-01-29 19:14 ./source/l/libhandy/libhandy.SlackBuild -rw-r--r-- 1 root root 749 2023-01-29 19:17 ./source/l/libhandy/slack-desc drwxr-xr-x 2 root root 4096 2023-11-01 19:30 ./source/l/libical @@ -15426,13 +15426,13 @@ drwxr-xr-x 2 root root 4096 2023-12-05 20:57 ./source/xap/xpaint -rw-r--r-- 1 root root 1314645 2021-08-16 12:10 ./source/xap/xpaint/xpaint-3.1.4.tar.lz -rwxr-xr-x 1 root root 4904 2023-12-05 20:57 ./source/xap/xpaint/xpaint.SlackBuild -rw-r--r-- 1 root root 43 2021-03-27 18:22 ./source/xap/xpaint/xpaint.url -drwxr-xr-x 4 root root 4096 2022-04-26 18:17 ./source/xap/xpdf +drwxr-xr-x 4 root root 4096 2024-02-09 19:24 ./source/xap/xpdf -rw-r--r-- 1 root root 325 2010-01-11 04:59 ./source/xap/xpdf/doinst.sh.gz -drwxr-xr-x 2 root root 4096 2021-01-29 18:38 ./source/xap/xpdf/lang +drwxr-xr-x 2 root root 4096 2024-02-09 19:27 ./source/xap/xpdf/lang -rw-r--r-- 1 root root 1080 2011-08-15 21:28 ./source/xap/xpdf/lang/xpdf-arabic-2011-aug-15.tar.xz -rw-r--r-- 1 root root 235 2013-03-28 20:51 ./source/xap/xpdf/lang/xpdf-arabic.diff.gz -rw-r--r-- 1 root root 381 2019-10-03 18:53 ./source/xap/xpdf/lang/xpdf-chinese-simplified.diff.gz --rw-r--r-- 1 root root 361568 2020-12-22 22:47 ./source/xap/xpdf/lang/xpdf-chinese-simplified.tar.xz +-rw-r--r-- 1 root root 358232 2023-12-05 22:04 ./source/xap/xpdf/lang/xpdf-chinese-simplified.tar.xz -rw-r--r-- 1 root root 361 2019-10-03 18:59 ./source/xap/xpdf/lang/xpdf-chinese-traditional.diff.gz -rw-r--r-- 1 root root 374404 2020-12-22 22:47 ./source/xap/xpdf/lang/xpdf-chinese-traditional.tar.xz -rw-r--r-- 1 root root 1504 2011-08-15 21:28 ./source/xap/xpdf/lang/xpdf-cyrillic-2011-aug-15.tar.xz @@ -15444,7 +15444,7 @@ drwxr-xr-x 2 root root 4096 2021-01-29 18:38 ./source/xap/xpdf/lang -rw-r--r-- 1 root root 743 2019-10-03 18:55 ./source/xap/xpdf/lang/xpdf-japanese.diff.gz -rw-r--r-- 1 root root 289552 2020-12-22 22:47 ./source/xap/xpdf/lang/xpdf-japanese.tar.xz -rw-r--r-- 1 root root 336 2021-01-29 18:38 ./source/xap/xpdf/lang/xpdf-korean.diff.gz --rw-r--r-- 1 root root 327024 2020-12-22 22:47 ./source/xap/xpdf/lang/xpdf-korean.tar.xz +-rw-r--r-- 1 root root 329140 2023-12-05 22:04 ./source/xap/xpdf/lang/xpdf-korean.tar.xz -rw-r--r-- 1 root root 1316 2011-08-15 21:28 ./source/xap/xpdf/lang/xpdf-latin2-2011-aug-15.tar.xz -rw-r--r-- 1 root root 224 2013-03-28 20:51 ./source/xap/xpdf/lang/xpdf-latin2.diff.gz -rw-r--r-- 1 root root 1804 2011-08-15 21:28 ./source/xap/xpdf/lang/xpdf-thai-2011-aug-15.tar.xz @@ -15454,8 +15454,8 @@ drwxr-xr-x 2 root root 4096 2021-01-29 18:38 ./source/xap/xpdf/lang drwxr-xr-x 2 root root 4096 2021-01-29 18:32 ./source/xap/xpdf/patches -rw-r--r-- 1 root root 555 2017-09-26 04:39 ./source/xap/xpdf/patches/xpdfrc.diff.gz -rw-r--r-- 1 root root 640 2018-02-27 06:13 ./source/xap/xpdf/slack-desc --rw-r--r-- 1 root root 685124 2022-04-18 21:27 ./source/xap/xpdf/xpdf-4.04.tar.lz --rwxr-xr-x 1 root root 5287 2022-04-26 18:17 ./source/xap/xpdf/xpdf.SlackBuild +-rw-r--r-- 1 root root 699200 2024-02-07 23:07 ./source/xap/xpdf/xpdf-4.05.tar.lz +-rwxr-xr-x 1 root root 5287 2024-02-09 19:27 ./source/xap/xpdf/xpdf.SlackBuild -rw-r--r-- 1 root root 3260 2010-01-11 05:07 ./source/xap/xpdf/xpdf.desktop -rw-r--r-- 1 root root 27 2019-10-03 18:45 ./source/xap/xpdf/xpdf.url -rw-r--r-- 1 root root 2751 2016-03-03 05:04 ./source/xap/xpdf/xpdfIcon.xpm diff --git a/source/xap/xpdf/xpdf.SlackBuild b/source/xap/xpdf/xpdf.SlackBuild index 8c4950c8a..6bd1e65a3 100755 --- a/source/xap/xpdf/xpdf.SlackBuild +++ b/source/xap/xpdf/xpdf.SlackBuild @@ -23,7 +23,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=xpdf -VERSION=4.04 +VERSION=4.05 PATCHLEVEL= BUILD=${BUILD:-1}