Wed Mar 27 19:16:09 UTC 2024

patches/packages/curl-8.7.1-x86_64-1_slack15.0.txz: Upgraded. This release fixes the following security issues: TLS certificate check bypass with mbedTLS. HTTP/2 push headers memory-leak. QUIC certificate check bypass with wolfSSL. Usage of disabled protocol. For more information, see: https://curl.se/docs/CVE-2024-2466.html https://curl.se/docs/CVE-2024-2398.html https://curl.se/docs/CVE-2024-2379.html https://curl.se/docs/CVE-2024-2004.html https://www.cve.org/CVERecord?id=CVE-2024-2466 https://www.cve.org/CVERecord?id=CVE-2024-2398 https://www.cve.org/CVERecord?id=CVE-2024-2379 https://www.cve.org/CVERecord?id=CVE-2024-2004 (* Security fix *)
2025-02-05 20:46:11 +01:00 · 2024-03-27 19:16:09 +00:00 · 2024-03-27 19:16:09 +00:00 · 9146b9762b
commit 9146b9762b
parent 9543d326f2
4 changed files with 66 additions and 22 deletions
--- a/ChangeLog.rss
+++ b/ChangeLog.rss
@ -11,9 +11,35 @@
      <description>Tracking Slackware development in git.</description>
      <language>en-us</language>
      <id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
-      <pubDate>Sun, 24 Mar 2024 18:21:46 GMT</pubDate>
-      <lastBuildDate>Mon, 25 Mar 2024 12:30:31 GMT</lastBuildDate>
+      <pubDate>Wed, 27 Mar 2024 19:16:09 GMT</pubDate>
+      <lastBuildDate>Thu, 28 Mar 2024 12:30:25 GMT</lastBuildDate>
      <generator>maintain_current_git.sh v 1.17</generator>
+      <item>
+         <title>Wed, 27 Mar 2024 19:16:09 GMT</title>
+         <pubDate>Wed, 27 Mar 2024 19:16:09 GMT</pubDate>
+         <link>https://git.slackware.nl/current/tag/?h=20240327191609</link>
+         <guid isPermaLink="false">20240327191609</guid>
+         <description>
+           <![CDATA[<pre>
+patches/packages/curl-8.7.1-x86_64-1_slack15.0.txz:  Upgraded.
+  This release fixes the following security issues:
+  TLS certificate check bypass with mbedTLS.
+  HTTP/2 push headers memory-leak.
+  QUIC certificate check bypass with wolfSSL.
+  Usage of disabled protocol.
+  For more information, see:
+    https://curl.se/docs/CVE-2024-2466.html
+    https://curl.se/docs/CVE-2024-2398.html
+    https://curl.se/docs/CVE-2024-2379.html
+    https://curl.se/docs/CVE-2024-2004.html
+    https://www.cve.org/CVERecord?id=CVE-2024-2466
+    https://www.cve.org/CVERecord?id=CVE-2024-2398
+    https://www.cve.org/CVERecord?id=CVE-2024-2379
+    https://www.cve.org/CVERecord?id=CVE-2024-2004
+  (* Security fix *)
+           </pre>]]>
+         </description>
+      </item>
      <item>
         <title>Sun, 24 Mar 2024 18:21:46 GMT</title>
         <pubDate>Sun, 24 Mar 2024 18:21:46 GMT</pubDate>
--- a/ChangeLog.txt
+++ b/ChangeLog.txt
@ -1,3 +1,21 @@
+Wed Mar 27 19:16:09 UTC 2024
+patches/packages/curl-8.7.1-x86_64-1_slack15.0.txz:  Upgraded.
+  This release fixes the following security issues:
+  TLS certificate check bypass with mbedTLS.
+  HTTP/2 push headers memory-leak.
+  QUIC certificate check bypass with wolfSSL.
+  Usage of disabled protocol.
+  For more information, see:
+    https://curl.se/docs/CVE-2024-2466.html
+    https://curl.se/docs/CVE-2024-2398.html
+    https://curl.se/docs/CVE-2024-2379.html
+    https://curl.se/docs/CVE-2024-2004.html
+    https://www.cve.org/CVERecord?id=CVE-2024-2466
+    https://www.cve.org/CVERecord?id=CVE-2024-2398
+    https://www.cve.org/CVERecord?id=CVE-2024-2379
+    https://www.cve.org/CVERecord?id=CVE-2024-2004
+  (* Security fix *)
+--------------------------+
 Sun Mar 24 18:21:46 UTC 2024
 patches/packages/emacs-29.3-x86_64-1_slack15.0.txz:  Upgraded.
  GNU Emacs through 28.2 allows attackers to execute commands via shell
--- a/FILELIST.TXT
+++ b/FILELIST.TXT
@ -1,20 +1,20 @@
-Sun Mar 24 18:24:40 UTC 2024
+Wed Mar 27 19:19:00 UTC 2024

 Here is the file list for this directory.  If you are using a 
 mirror site and find missing or extra files in the disk 
 subdirectories, please have the archive administrator refresh
 the mirror.

-drwxr-xr-x  12 root root      4096 2024-03-24 18:21 .
+drwxr-xr-x  12 root root      4096 2024-03-27 19:16 .
 -rw-r--r--   1 root root      5767 2022-02-02 22:44 ./ANNOUNCE.15.0
 -rw-r--r--   1 root root     16609 2022-03-30 19:03 ./CHANGES_AND_HINTS.TXT
-rw-r--r--   1 root root   1227749 2024-03-23 19:37 ./CHECKSUMS.md5
-rw-r--r--   1 root root       195 2024-03-23 19:37 ./CHECKSUMS.md5.asc
+-rw-r--r--   1 root root   1227642 2024-03-24 18:25 ./CHECKSUMS.md5
+-rw-r--r--   1 root root       195 2024-03-24 18:25 ./CHECKSUMS.md5.asc
 -rw-r--r--   1 root root     17976 1994-06-10 02:28 ./COPYING
 -rw-r--r--   1 root root     35147 2007-06-30 04:21 ./COPYING3
 -rw-r--r--   1 root root     19573 2016-06-23 20:08 ./COPYRIGHT.TXT
 -rw-r--r--   1 root root       616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT
-rw-r--r--   1 root root   2103082 2024-03-24 18:21 ./ChangeLog.txt
+-rw-r--r--   1 root root   2103841 2024-03-27 19:16 ./ChangeLog.txt
 drwxr-xr-x   3 root root      4096 2013-03-20 22:17 ./EFI
 drwxr-xr-x   2 root root      4096 2022-02-02 08:21 ./EFI/BOOT
 -rw-r--r--   1 root root   1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi
@ -25,7 +25,7 @@ drwxr-xr-x   2 root root      4096 2022-02-02 08:21 ./EFI/BOOT
 -rwxr-xr-x   1 root root      2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh
 -rw-r--r--   1 root root     10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg
 -rw-r--r--   1 root root      1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg
-rw-r--r--   1 root root   1603988 2024-03-23 19:37 ./FILELIST.TXT
+-rw-r--r--   1 root root   1603867 2024-03-24 18:24 ./FILELIST.TXT
 -rw-r--r--   1 root root      1572 2012-08-29 18:27 ./GPG-KEY
 -rw-r--r--   1 root root    864745 2022-02-02 08:25 ./PACKAGES.TXT
 -rw-r--r--   1 root root      8034 2022-02-02 03:36 ./README.TXT
@ -828,13 +828,13 @@ drwxr-xr-x   2 root root      4096 2022-12-17 19:52 ./pasture/source/samba
 -rw-r--r--   1 root root      7921 2018-04-29 17:31 ./pasture/source/samba/smb.conf.default
 -rw-r--r--   1 root root      7933 2018-01-14 20:41 ./pasture/source/samba/smb.conf.default.orig
 -rw-r--r--   1 root root       536 2017-03-23 19:18 ./pasture/source/samba/smb.conf.diff.gz
-drwxr-xr-x   4 root root      4096 2024-03-24 18:24 ./patches
-rw-r--r--   1 root root    109769 2024-03-24 18:24 ./patches/CHECKSUMS.md5
-rw-r--r--   1 root root       195 2024-03-24 18:24 ./patches/CHECKSUMS.md5.asc
-rw-r--r--   1 root root    149921 2024-03-24 18:24 ./patches/FILE_LIST
-rw-r--r--   1 root root  15353847 2024-03-24 18:24 ./patches/MANIFEST.bz2
-rw-r--r--   1 root root     77641 2024-03-24 18:24 ./patches/PACKAGES.TXT
-drwxr-xr-x   5 root root     32768 2024-03-24 18:24 ./patches/packages
+drwxr-xr-x   4 root root      4096 2024-03-27 19:19 ./patches
+-rw-r--r--   1 root root    109769 2024-03-27 19:19 ./patches/CHECKSUMS.md5
+-rw-r--r--   1 root root       195 2024-03-27 19:19 ./patches/CHECKSUMS.md5.asc
+-rw-r--r--   1 root root    149921 2024-03-27 19:18 ./patches/FILE_LIST
+-rw-r--r--   1 root root  15339311 2024-03-27 19:18 ./patches/MANIFEST.bz2
+-rw-r--r--   1 root root     77641 2024-03-27 19:18 ./patches/PACKAGES.TXT
+drwxr-xr-x   5 root root     32768 2024-03-27 19:18 ./patches/packages
 -rw-r--r--   1 root root       360 2023-09-26 19:28 ./patches/packages/Cython-0.29.36-x86_64-1_slack15.0.txt
 -rw-r--r--   1 root root   2389564 2023-09-26 19:28 ./patches/packages/Cython-0.29.36-x86_64-1_slack15.0.txz
 -rw-r--r--   1 root root       163 2023-09-26 19:28 ./patches/packages/Cython-0.29.36-x86_64-1_slack15.0.txz.asc
@ -874,9 +874,9 @@ drwxr-xr-x   5 root root     32768 2024-03-24 18:24 ./patches/packages
 -rw-r--r--   1 root root       416 2023-05-19 18:13 ./patches/packages/cups-filters-1.28.17-x86_64-1_slack15.0.txt
 -rw-r--r--   1 root root    827024 2023-05-19 18:13 ./patches/packages/cups-filters-1.28.17-x86_64-1_slack15.0.txz
 -rw-r--r--   1 root root       163 2023-05-19 18:13 ./patches/packages/cups-filters-1.28.17-x86_64-1_slack15.0.txz.asc
-rw-r--r--   1 root root       552 2024-01-31 20:06 ./patches/packages/curl-8.6.0-x86_64-1_slack15.0.txt
-rw-r--r--   1 root root   1238472 2024-01-31 20:06 ./patches/packages/curl-8.6.0-x86_64-1_slack15.0.txz
-rw-r--r--   1 root root       163 2024-01-31 20:06 ./patches/packages/curl-8.6.0-x86_64-1_slack15.0.txz.asc
+-rw-r--r--   1 root root       552 2024-03-27 18:48 ./patches/packages/curl-8.7.1-x86_64-1_slack15.0.txt
+-rw-r--r--   1 root root   1250520 2024-03-27 18:48 ./patches/packages/curl-8.7.1-x86_64-1_slack15.0.txz
+-rw-r--r--   1 root root       195 2024-03-27 18:48 ./patches/packages/curl-8.7.1-x86_64-1_slack15.0.txz.asc
 -rw-r--r--   1 root root       373 2022-02-24 19:12 ./patches/packages/cyrus-sasl-2.1.28-x86_64-1_slack15.0.txt
 -rw-r--r--   1 root root    993108 2022-02-24 19:12 ./patches/packages/cyrus-sasl-2.1.28-x86_64-1_slack15.0.txz
 -rw-r--r--   1 root root       163 2022-02-24 19:12 ./patches/packages/cyrus-sasl-2.1.28-x86_64-1_slack15.0.txz.asc
@ -1213,7 +1213,7 @@ drwxr-xr-x   2 root root      4096 2023-11-21 21:09 ./patches/packages/old-linux
 -rw-r--r--   1 root root       463 2023-04-05 18:16 ./patches/packages/zstd-1.5.5-x86_64-1_slack15.0.txt
 -rw-r--r--   1 root root    459652 2023-04-05 18:16 ./patches/packages/zstd-1.5.5-x86_64-1_slack15.0.txz
 -rw-r--r--   1 root root       163 2023-04-05 18:16 ./patches/packages/zstd-1.5.5-x86_64-1_slack15.0.txz.asc
-drwxr-xr-x 110 root root      4096 2024-03-24 18:04 ./patches/source
+drwxr-xr-x 110 root root      4096 2024-03-27 18:48 ./patches/source
 drwxr-xr-x   2 root root      4096 2023-09-26 19:22 ./patches/source/Cython
 -rw-r--r--   1 root root   1623580 2023-07-04 19:24 ./patches/source/Cython/Cython-0.29.36.tar.lz
 -rwxr-xr-x   1 root root      3041 2023-09-26 19:23 ./patches/source/Cython/Cython.SlackBuild
@ -1314,9 +1314,9 @@ drwxr-xr-x   2 root root      4096 2023-05-19 18:08 ./patches/source/cups-filter
 -rw-r--r--   1 root root        46 2021-06-29 19:51 ./patches/source/cups/cups.url
 -rw-r--r--   1 root root       454 2021-04-26 18:11 ./patches/source/cups/doinst.sh.gz
 -rw-r--r--   1 root root      1094 2018-11-29 19:15 ./patches/source/cups/slack-desc
-drwxr-xr-x   2 root root      4096 2024-01-31 20:06 ./patches/source/curl
-rw-r--r--   1 root root   2630108 2024-01-31 07:07 ./patches/source/curl/curl-8.6.0.tar.xz
-rw-r--r--   1 root root       488 2024-01-31 07:07 ./patches/source/curl/curl-8.6.0.tar.xz.asc
+drwxr-xr-x   2 root root      4096 2024-03-27 17:01 ./patches/source/curl
+-rw-r--r--   1 root root   2707016 2024-03-27 08:04 ./patches/source/curl/curl-8.7.1.tar.xz
+-rw-r--r--   1 root root       488 2024-03-27 08:04 ./patches/source/curl/curl-8.7.1.tar.xz.asc
 -rwxr-xr-x   1 root root      4861 2022-04-27 18:34 ./patches/source/curl/curl.SlackBuild
 -rw-r--r--   1 root root        30 2018-04-20 16:49 ./patches/source/curl/curl.url
 -rw-r--r--   1 root root      1004 2019-02-06 21:57 ./patches/source/curl/slack-desc
--- a/patches/packages/curl-8.7.1-x86_64-1_slack15.0.txt
+++ b/patches/packages/curl-8.7.1-x86_64-1_slack15.0.txt