diff --git a/ChangeLog.rss b/ChangeLog.rss index a4c2a49f1..c8bcf1016 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,9 +11,32 @@ Tracking Slackware development in git. en-us urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f - Fri, 19 May 2023 16:42:36 GMT - Fri, 19 May 2023 17:35:42 GMT + Fri, 19 May 2023 18:59:24 GMT + Fri, 19 May 2023 19:40:43 GMT maintain_current_git.sh v 1.17 + + Fri, 19 May 2023 18:59:24 GMT + Fri, 19 May 2023 18:59:24 GMT + https://git.slackware.nl/current/tag/?h=20230519185924 + 20230519185924 + + +a/pam-1.5.3-x86_64-1.txz: Upgraded. +ap/cups-filters-1.28.17-x86_64-2.txz: Rebuilt. + [PATCH] Merge pull request from GHSA-gpxc-v2m8-fr3x. + With execv() command line arguments are passed as separate strings and + not the full command line in a single string. This prevents arbitrary + command execution by escaping the quoting of the arguments in a job + with forged job title. + Thanks to marav. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2023-24805 + (* Security fix *) +ap/vim-9.0.1569-x86_64-1.txz: Upgraded. +xap/vim-gvim-9.0.1569-x86_64-1.txz: Upgraded. + ]]> + + Fri, 19 May 2023 16:42:36 GMT Fri, 19 May 2023 16:42:36 GMT diff --git a/ChangeLog.txt b/ChangeLog.txt index 2a2888ec4..b7b05e0ed 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,18 @@ +Fri May 19 18:59:24 UTC 2023 +a/pam-1.5.3-x86_64-1.txz: Upgraded. +ap/cups-filters-1.28.17-x86_64-2.txz: Rebuilt. + [PATCH] Merge pull request from GHSA-gpxc-v2m8-fr3x. + With execv() command line arguments are passed as separate strings and + not the full command line in a single string. This prevents arbitrary + command execution by escaping the quoting of the arguments in a job + with forged job title. + Thanks to marav. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2023-24805 + (* Security fix *) +ap/vim-9.0.1569-x86_64-1.txz: Upgraded. +xap/vim-gvim-9.0.1569-x86_64-1.txz: Upgraded. ++--------------------------+ Fri May 19 16:42:36 UTC 2023 a/exfatprogs-1.2.1-x86_64-1.txz: Upgraded. d/cmake-3.26.4-x86_64-1.txz: Upgraded. diff --git a/FILELIST.TXT b/FILELIST.TXT index 63a27adac..251d75261 100644 --- a/FILELIST.TXT +++ b/FILELIST.TXT @@ -1,20 +1,20 @@ -Fri May 19 16:45:53 UTC 2023 +Fri May 19 19:03:37 UTC 2023 Here is the file list for this directory. If you are using a mirror site and find missing or extra files in the disk subdirectories, please have the archive administrator refresh the mirror. -drwxr-xr-x 12 root root 4096 2023-05-19 16:42 . +drwxr-xr-x 12 root root 4096 2023-05-19 18:59 . -rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0 -rw-r--r-- 1 root root 16617 2022-02-02 23:27 ./CHANGES_AND_HINTS.TXT --rw-r--r-- 1 root root 1115780 2023-05-18 15:23 ./CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2023-05-18 15:23 ./CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 1115918 2023-05-19 16:46 ./CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2023-05-19 16:46 ./CHECKSUMS.md5.asc -rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING -rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3 -rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT -rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT --rw-r--r-- 1 root root 638801 2023-05-19 16:42 ./ChangeLog.txt +-rw-r--r-- 1 root root 639448 2023-05-19 18:59 ./ChangeLog.txt drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI drwxr-xr-x 2 root root 4096 2023-05-17 20:59 ./EFI/BOOT -rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi @@ -25,9 +25,9 @@ drwxr-xr-x 2 root root 4096 2023-05-17 20:59 ./EFI/BOOT -rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh -rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg -rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg --rw-r--r-- 1 root root 1455089 2023-05-18 15:22 ./FILELIST.TXT +-rw-r--r-- 1 root root 1455259 2023-05-19 16:45 ./FILELIST.TXT -rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY --rw-r--r-- 1 root root 872193 2023-05-19 16:45 ./PACKAGES.TXT +-rw-r--r-- 1 root root 872193 2023-05-19 19:03 ./PACKAGES.TXT -rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT -rw-r--r-- 1 root root 3629 2023-05-17 20:24 ./README.initrd -rw-r--r-- 1 root root 34162 2022-01-30 20:35 ./README_CRYPT.TXT @@ -687,13 +687,13 @@ drwxr-xr-x 2 root root 4096 2022-02-03 07:02 ./patches -rw-r--r-- 1 root root 575 2022-02-03 07:02 ./patches/FILE_LIST -rw-r--r-- 1 root root 14 2022-02-03 07:02 ./patches/MANIFEST.bz2 -rw-r--r-- 1 root root 224 2022-02-03 07:02 ./patches/PACKAGES.TXT -drwxr-xr-x 17 root root 4096 2023-05-19 16:45 ./slackware64 --rw-r--r-- 1 root root 340403 2023-05-19 16:45 ./slackware64/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2023-05-19 16:45 ./slackware64/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 422009 2023-05-19 16:44 ./slackware64/FILE_LIST --rw-r--r-- 1 root root 4299644 2023-05-19 16:44 ./slackware64/MANIFEST.bz2 +drwxr-xr-x 17 root root 4096 2023-05-19 19:03 ./slackware64 +-rw-r--r-- 1 root root 340403 2023-05-19 19:03 ./slackware64/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2023-05-19 19:03 ./slackware64/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 422009 2023-05-19 19:02 ./slackware64/FILE_LIST +-rw-r--r-- 1 root root 4301031 2023-05-19 19:02 ./slackware64/MANIFEST.bz2 lrwxrwxrwx 1 root root 15 2009-08-23 23:34 ./slackware64/PACKAGES.TXT -> ../PACKAGES.TXT -drwxr-xr-x 2 root root 32768 2023-05-19 16:44 ./slackware64/a +drwxr-xr-x 2 root root 32768 2023-05-19 19:02 ./slackware64/a -rw-r--r-- 1 root root 327 2022-02-15 18:16 ./slackware64/a/aaa_base-15.1-x86_64-2.txt -rw-r--r-- 1 root root 10720 2022-02-15 18:16 ./slackware64/a/aaa_base-15.1-x86_64-2.txz -rw-r--r-- 1 root root 163 2022-02-15 18:16 ./slackware64/a/aaa_base-15.1-x86_64-2.txz.asc @@ -959,9 +959,9 @@ drwxr-xr-x 2 root root 32768 2023-05-19 16:44 ./slackware64/a -rw-r--r-- 1 root root 417 2021-07-11 17:53 ./slackware64/a/os-prober-1.79-x86_64-1.txt -rw-r--r-- 1 root root 16948 2021-07-11 17:53 ./slackware64/a/os-prober-1.79-x86_64-1.txz -rw-r--r-- 1 root root 163 2021-07-11 17:53 ./slackware64/a/os-prober-1.79-x86_64-1.txz.asc --rw-r--r-- 1 root root 422 2023-03-05 21:06 ./slackware64/a/pam-1.5.2-x86_64-2.txt --rw-r--r-- 1 root root 486992 2023-03-05 21:06 ./slackware64/a/pam-1.5.2-x86_64-2.txz --rw-r--r-- 1 root root 163 2023-03-05 21:06 ./slackware64/a/pam-1.5.2-x86_64-2.txz.asc +-rw-r--r-- 1 root root 422 2023-05-19 18:53 ./slackware64/a/pam-1.5.3-x86_64-1.txt +-rw-r--r-- 1 root root 499200 2023-05-19 18:53 ./slackware64/a/pam-1.5.3-x86_64-1.txz +-rw-r--r-- 1 root root 163 2023-05-19 18:53 ./slackware64/a/pam-1.5.3-x86_64-1.txz.asc -rw-r--r-- 1 root root 563 2021-02-13 11:13 ./slackware64/a/patch-2.7.6-x86_64-5.txt -rw-r--r-- 1 root root 120112 2021-02-13 11:13 ./slackware64/a/patch-2.7.6-x86_64-5.txz -rw-r--r-- 1 root root 163 2021-02-13 11:13 ./slackware64/a/patch-2.7.6-x86_64-5.txz.asc @@ -1080,7 +1080,7 @@ drwxr-xr-x 2 root root 32768 2023-05-19 16:44 ./slackware64/a -rw-r--r-- 1 root root 540 2021-02-13 11:22 ./slackware64/a/zoo-2.10_22-x86_64-4.txt -rw-r--r-- 1 root root 56160 2021-02-13 11:22 ./slackware64/a/zoo-2.10_22-x86_64-4.txz -rw-r--r-- 1 root root 163 2021-02-13 11:22 ./slackware64/a/zoo-2.10_22-x86_64-4.txz.asc -drwxr-xr-x 2 root root 20480 2023-05-16 19:16 ./slackware64/ap +drwxr-xr-x 2 root root 20480 2023-05-19 19:02 ./slackware64/ap -rw-r--r-- 1 root root 291 2023-05-10 18:06 ./slackware64/ap/a2ps-4.15.4-x86_64-1.txt -rw-r--r-- 1 root root 653388 2023-05-10 18:06 ./slackware64/ap/a2ps-4.15.4-x86_64-1.txz -rw-r--r-- 1 root root 163 2023-05-10 18:06 ./slackware64/ap/a2ps-4.15.4-x86_64-1.txz.asc @@ -1114,9 +1114,9 @@ drwxr-xr-x 2 root root 20480 2023-05-16 19:16 ./slackware64/ap -rw-r--r-- 1 root root 642 2023-03-08 02:07 ./slackware64/ap/cups-2.4.2-x86_64-4.txt -rw-r--r-- 1 root root 1590632 2023-03-08 02:07 ./slackware64/ap/cups-2.4.2-x86_64-4.txz -rw-r--r-- 1 root root 163 2023-03-08 02:07 ./slackware64/ap/cups-2.4.2-x86_64-4.txz.asc --rw-r--r-- 1 root root 416 2023-01-25 18:38 ./slackware64/ap/cups-filters-1.28.17-x86_64-1.txt --rw-r--r-- 1 root root 832084 2023-01-25 18:38 ./slackware64/ap/cups-filters-1.28.17-x86_64-1.txz --rw-r--r-- 1 root root 163 2023-01-25 18:38 ./slackware64/ap/cups-filters-1.28.17-x86_64-1.txz.asc +-rw-r--r-- 1 root root 416 2023-05-19 18:08 ./slackware64/ap/cups-filters-1.28.17-x86_64-2.txt +-rw-r--r-- 1 root root 830952 2023-05-19 18:08 ./slackware64/ap/cups-filters-1.28.17-x86_64-2.txz +-rw-r--r-- 1 root root 163 2023-05-19 18:08 ./slackware64/ap/cups-filters-1.28.17-x86_64-2.txz.asc -rw-r--r-- 1 root root 576 2023-03-03 19:45 ./slackware64/ap/dash-0.5.12-x86_64-1.txt -rw-r--r-- 1 root root 79976 2023-03-03 19:45 ./slackware64/ap/dash-0.5.12-x86_64-1.txz -rw-r--r-- 1 root root 163 2023-03-03 19:45 ./slackware64/ap/dash-0.5.12-x86_64-1.txz.asc @@ -1320,9 +1320,9 @@ drwxr-xr-x 2 root root 20480 2023-05-16 19:16 ./slackware64/ap -rw-r--r-- 1 root root 375 2021-02-13 11:46 ./slackware64/ap/vbetool-1.2.2-x86_64-4.txt -rw-r--r-- 1 root root 14756 2021-02-13 11:46 ./slackware64/ap/vbetool-1.2.2-x86_64-4.txz -rw-r--r-- 1 root root 163 2021-02-13 11:46 ./slackware64/ap/vbetool-1.2.2-x86_64-4.txz.asc --rw-r--r-- 1 root root 383 2023-04-27 19:10 ./slackware64/ap/vim-9.0.1493-x86_64-1.txt --rw-r--r-- 1 root root 8601288 2023-04-27 19:10 ./slackware64/ap/vim-9.0.1493-x86_64-1.txz --rw-r--r-- 1 root root 163 2023-04-27 19:10 ./slackware64/ap/vim-9.0.1493-x86_64-1.txz.asc +-rw-r--r-- 1 root root 383 2023-05-19 18:47 ./slackware64/ap/vim-9.0.1569-x86_64-1.txt +-rw-r--r-- 1 root root 8594176 2023-05-19 18:47 ./slackware64/ap/vim-9.0.1569-x86_64-1.txz +-rw-r--r-- 1 root root 163 2023-05-19 18:47 ./slackware64/ap/vim-9.0.1569-x86_64-1.txz.asc -rw-r--r-- 1 root root 604 2023-03-05 21:21 ./slackware64/ap/vorbis-tools-1.4.2-x86_64-4.txt -rw-r--r-- 1 root root 178980 2023-03-05 21:21 ./slackware64/ap/vorbis-tools-1.4.2-x86_64-4.txz -rw-r--r-- 1 root root 163 2023-03-05 21:21 ./slackware64/ap/vorbis-tools-1.4.2-x86_64-4.txz.asc @@ -5325,7 +5325,7 @@ drwxr-xr-x 2 root root 65536 2023-05-18 15:21 ./slackware64/x -rw-r--r-- 1 root root 213 2022-07-11 18:36 ./slackware64/x/xwud-1.0.6-x86_64-1.txt -rw-r--r-- 1 root root 25896 2022-07-11 18:36 ./slackware64/x/xwud-1.0.6-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-07-11 18:36 ./slackware64/x/xwud-1.0.6-x86_64-1.txz.asc -drwxr-xr-x 2 root root 16384 2023-05-14 17:08 ./slackware64/xap +drwxr-xr-x 2 root root 16384 2023-05-19 19:02 ./slackware64/xap -rw-r--r-- 1 root root 625 2022-10-09 18:00 ./slackware64/xap/MPlayer-20221009-x86_64-1.txt -rw-r--r-- 1 root root 2750024 2022-10-09 18:00 ./slackware64/xap/MPlayer-20221009-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-10-09 18:00 ./slackware64/xap/MPlayer-20221009-x86_64-1.txz.asc @@ -5439,9 +5439,9 @@ drwxr-xr-x 2 root root 16384 2023-05-14 17:08 ./slackware64/xap -rw-r--r-- 1 root root 1351876 2022-10-09 17:57 ./slackware64/xap/ssr-0.4.4-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-10-09 17:57 ./slackware64/xap/ssr-0.4.4-x86_64-1.txz.asc -rw-r--r-- 1 root root 676 2021-09-23 19:13 ./slackware64/xap/tagfile --rw-r--r-- 1 root root 503 2023-04-27 19:11 ./slackware64/xap/vim-gvim-9.0.1493-x86_64-1.txt --rw-r--r-- 1 root root 1744268 2023-04-27 19:11 ./slackware64/xap/vim-gvim-9.0.1493-x86_64-1.txz --rw-r--r-- 1 root root 163 2023-04-27 19:11 ./slackware64/xap/vim-gvim-9.0.1493-x86_64-1.txz.asc +-rw-r--r-- 1 root root 503 2023-05-19 18:48 ./slackware64/xap/vim-gvim-9.0.1569-x86_64-1.txt +-rw-r--r-- 1 root root 1747388 2023-05-19 18:48 ./slackware64/xap/vim-gvim-9.0.1569-x86_64-1.txz +-rw-r--r-- 1 root root 163 2023-05-19 18:48 ./slackware64/xap/vim-gvim-9.0.1569-x86_64-1.txz.asc -rw-r--r-- 1 root root 455 2021-02-13 13:43 ./slackware64/xap/windowmaker-0.95.9-x86_64-3.txt -rw-r--r-- 1 root root 1761052 2021-02-13 13:43 ./slackware64/xap/windowmaker-0.95.9-x86_64-3.txz -rw-r--r-- 1 root root 163 2021-02-13 13:43 ./slackware64/xap/windowmaker-0.95.9-x86_64-3.txz.asc @@ -5592,11 +5592,11 @@ drwxr-xr-x 2 root root 4096 2023-03-08 20:34 ./slackware64/y -rw-r--r-- 1 root root 1491108 2023-02-19 18:31 ./slackware64/y/nethack-3.6.7-x86_64-1.txz -rw-r--r-- 1 root root 163 2023-02-19 18:31 ./slackware64/y/nethack-3.6.7-x86_64-1.txz.asc -rw-r--r-- 1 root root 26 2020-12-30 21:55 ./slackware64/y/tagfile -drwxr-xr-x 18 root root 4096 2023-05-19 16:45 ./source --rw-r--r-- 1 root root 599263 2023-05-19 16:45 ./source/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2023-05-19 16:45 ./source/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 833141 2023-05-19 16:45 ./source/FILE_LIST --rw-r--r-- 1 root root 24537750 2023-05-19 16:45 ./source/MANIFEST.bz2 +drwxr-xr-x 18 root root 4096 2023-05-19 19:03 ./source +-rw-r--r-- 1 root root 599339 2023-05-19 19:03 ./source/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2023-05-19 19:03 ./source/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 833232 2023-05-19 19:03 ./source/FILE_LIST +-rw-r--r-- 1 root root 24534281 2023-05-19 19:03 ./source/MANIFEST.bz2 -rw-r--r-- 1 root root 828 2022-02-02 04:43 ./source/README.TXT drwxr-xr-x 123 root root 4096 2023-05-17 20:46 ./source/a -rw-r--r-- 1 root root 234 2022-10-16 18:39 ./source/a/FTBFSlog @@ -6334,11 +6334,11 @@ drwxr-xr-x 2 root root 4096 2022-09-06 18:27 ./source/a/os-prober -rw-r--r-- 1 root root 338 2013-08-30 20:22 ./source/a/os-prober/os-prober.reiserfs.diff.gz -rw-r--r-- 1 root root 27140 2021-07-10 23:07 ./source/a/os-prober/os-prober_1.79.tar.xz -rw-r--r-- 1 root root 874 2018-02-27 06:13 ./source/a/os-prober/slack-desc -drwxr-xr-x 4 root root 4096 2023-03-05 20:50 ./source/a/pam --rw-r--r-- 1 root root 988784 2021-09-03 12:20 ./source/a/pam/Linux-PAM-1.5.2.tar.xz --rw-r--r-- 1 root root 801 2021-09-03 12:20 ./source/a/pam/Linux-PAM-1.5.2.tar.xz.asc +drwxr-xr-x 4 root root 4096 2023-05-19 18:20 ./source/a/pam +-rw-r--r-- 1 root root 1020076 2023-05-08 21:44 ./source/a/pam/Linux-PAM-1.5.3.tar.xz +-rw-r--r-- 1 root root 801 2023-05-08 21:44 ./source/a/pam/Linux-PAM-1.5.3.tar.xz.asc -rw-r--r-- 1 root root 252 2014-07-26 06:55 ./source/a/pam/doinst.sh.gz -drwxr-xr-x 2 root root 4096 2020-11-11 19:58 ./source/a/pam/fedora-patches +drwxr-xr-x 2 root root 4096 2023-05-19 18:24 ./source/a/pam/fedora-patches -rw-r--r-- 1 root root 487 2019-02-02 06:05 ./source/a/pam/fedora-patches/pam-1.1.3-nouserenv.patch.gz -rw-r--r-- 1 root root 534 2019-02-02 06:05 ./source/a/pam/fedora-patches/pam-1.1.6-limits-user.patch.gz -rw-r--r-- 1 root root 541 2019-02-02 06:05 ./source/a/pam/fedora-patches/pam-1.1.8-audit-user-mgmt.patch.gz @@ -6358,11 +6358,11 @@ drwxr-xr-x 2 root root 4096 2020-11-11 19:58 ./source/a/pam/fedora-patche -rw-r--r-- 1 root root 698 2019-02-02 06:05 ./source/a/pam/fedora-patches/pam-1.3.1-unix-remove-obsolete-_unix_read_password-prototype.patch.gz -rw-r--r-- 1 root root 4944 2019-02-02 06:05 ./source/a/pam/fedora-patches/pam-1.3.1-unix-yescrypt.patch.gz -rw-r--r-- 1 root root 390 2020-06-13 19:12 ./source/a/pam/fedora-patches/pam-1.4.0-redhat-modules.patch.gz --rw-r--r-- 1 root root 857 2020-11-11 19:58 ./source/a/pam/fedora-patches/pam-1.5.0-redhat-modules.patch.gz +-rw-r--r-- 1 root root 995 2023-05-19 18:24 ./source/a/pam/fedora-patches/pam-1.5.0-redhat-modules.patch.gz -rw-r--r-- 1 root root 36626 2020-12-01 19:27 ./source/a/pam/pam-redhat-1.1.4.tar.lz -rw-r--r-- 1 root root 29 2020-12-01 19:30 ./source/a/pam/pam-redhat.url --rwxr-xr-x 1 root root 8604 2023-03-05 20:50 ./source/a/pam/pam.SlackBuild --rw-r--r-- 1 root root 106 2019-07-16 18:05 ./source/a/pam/pam.url +-rwxr-xr-x 1 root root 8625 2023-05-19 18:53 ./source/a/pam/pam.SlackBuild +-rw-r--r-- 1 root root 106 2023-05-19 18:18 ./source/a/pam/pam.url drwxr-xr-x 2 root root 4096 2020-12-01 19:29 ./source/a/pam/patches -rw-r--r-- 1 root root 386 2020-01-02 20:41 ./source/a/pam/patches/pam.etc.environment.better.comments.diff.gz -rw-r--r-- 1 root root 873 2019-07-16 20:25 ./source/a/pam/slack-desc @@ -6775,9 +6775,10 @@ drwxr-xr-x 2 root root 4096 2021-11-29 18:53 ./source/ap/cdrtools -rw-r--r-- 1 root root 52968 2007-05-17 05:50 ./source/ap/cdrtools/zisofs-tools-1.0.8.tar.bz2 -rw-r--r-- 1 root root 248 2007-05-17 05:50 ./source/ap/cdrtools/zisofs-tools-1.0.8.tar.bz2.sign drwxr-xr-x 2 root root 4096 2023-03-07 21:39 ./source/ap/cups -drwxr-xr-x 2 root root 4096 2023-01-25 18:37 ./source/ap/cups-filters +drwxr-xr-x 2 root root 4096 2023-05-19 18:08 ./source/ap/cups-filters +-rw-r--r-- 1 root root 1831 2023-05-19 18:08 ./source/ap/cups-filters/CVE-2023-24805.patch.gz -rw-r--r-- 1 root root 1230865 2023-01-25 01:38 ./source/ap/cups-filters/cups-filters-1.28.17.tar.lz --rwxr-xr-x 1 root root 4570 2023-03-01 20:05 ./source/ap/cups-filters/cups-filters.SlackBuild +-rwxr-xr-x 1 root root 4637 2023-05-19 18:04 ./source/ap/cups-filters/cups-filters.SlackBuild -rw-r--r-- 1 root root 51 2014-07-21 02:53 ./source/ap/cups-filters/cups-filters.url -rw-r--r-- 1 root root 339 2018-01-08 22:54 ./source/ap/cups-filters/doinst.sh.gz -rw-r--r-- 1 root root 908 2018-02-27 06:12 ./source/ap/cups-filters/slack-desc @@ -7275,14 +7276,14 @@ drwxr-xr-x 2 root root 4096 2021-02-13 05:31 ./source/ap/vbetool -rw-r--r-- 1 root root 24915 2015-12-20 20:37 ./source/ap/vbetool/vbetool-1.2.2.tar.gz -rwxr-xr-x 1 root root 3202 2021-02-13 05:31 ./source/ap/vbetool/vbetool.SlackBuild -rw-r--r-- 1 root root 129 2008-11-24 18:23 ./source/ap/vbetool/vbetool.info -drwxr-xr-x 2 root root 4096 2023-04-27 19:10 ./source/ap/vim +drwxr-xr-x 2 root root 4096 2023-05-19 18:29 ./source/ap/vim -rw-r--r-- 1 root root 299348 2009-07-09 22:03 ./source/ap/vim/ctags-5.8.tar.xz -rw-r--r-- 1 root root 2768 2022-02-12 08:11 ./source/ap/vim/ctags.use-conventional-unused-marker.patch.gz -rw-r--r-- 1 root root 505 2022-09-26 18:00 ./source/ap/vim/doinst.sh.gz -rw-r--r-- 1 root root 8249 2006-01-19 17:01 ./source/ap/vim/gvim.png -rw-r--r-- 1 root root 834 2018-02-27 06:13 ./source/ap/vim/slack-desc.vim -rw-r--r-- 1 root root 959 2018-03-15 02:41 ./source/ap/vim/slack-desc.vim-gvim --rw-r--r-- 1 root root 10844511 2023-04-27 19:09 ./source/ap/vim/vim-9.0.1493.tar.lz +-rw-r--r-- 1 root root 10854189 2023-05-19 18:29 ./source/ap/vim/vim-9.0.1569.tar.lz -rwxr-xr-x 1 root root 6366 2023-02-28 02:42 ./source/ap/vim/vim-gvim.SlackBuild -rwxr-xr-x 1 root root 7545 2023-02-28 02:41 ./source/ap/vim/vim.SlackBuild -rw-r--r-- 1 root root 76 2022-12-08 18:30 ./source/ap/vim/vim.url diff --git a/recompress.sh b/recompress.sh index 156b871b8..fa7696628 100755 --- a/recompress.sh +++ b/recompress.sh @@ -651,6 +651,7 @@ gzip ./source/ap/texinfo/doinst.sh gzip ./source/ap/sudo/doinst.sh gzip ./source/ap/soma/doinst.sh gzip ./source/ap/cups-filters/doinst.sh +gzip ./source/ap/cups-filters/CVE-2023-24805.patch gzip ./source/ap/bpe/bpe.port.to.strerror.diff gzip ./source/ap/ispell/local.h.linux.diff gzip ./source/ap/diffutils/doinst.sh diff --git a/source/a/pam/fedora-patches/pam-1.5.0-redhat-modules.patch b/source/a/pam/fedora-patches/pam-1.5.0-redhat-modules.patch index 82010bbad..1212a6d31 100644 --- a/source/a/pam/fedora-patches/pam-1.5.0-redhat-modules.patch +++ b/source/a/pam/fedora-patches/pam-1.5.0-redhat-modules.patch @@ -1,22 +1,26 @@ ---- ./doc/sag/pam_faillock.xml.orig 2020-11-10 09:46:13.000000000 -0600 -+++ ./doc/sag/pam_faillock.xml 2020-11-11 13:54:28.033031520 -0600 -@@ -36,3 +36,41 @@ - href="../../modules/pam_faillock/pam_faillock.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faillock-author"]/*)'/> - - +--- ./doc/sag/pam_faillock.xml.orig 2023-05-19 13:22:11.197977808 -0500 ++++ ./doc/sag/pam_faillock.xml 2023-05-19 13:24:39.673969595 -0500 +@@ -1,27 +1,38 @@ +-
+ + +
-+ pam_faillock - temporarily locking access based on failed authentication attempts during an interval + pam_faillock - temporarily locking access based on failed authentication attempts during an interval +- +- + + -+ + +- +- + + -+ + +-
+- +
+ @@ -40,11 +44,28 @@ +
+ -+
+
+-
+- +-
+-
+- +-
+-
+- +-
+-
+- +-
+-
+- +-
+-
+\ No newline at end of file +
---- ./configure.ac.orig 2020-11-11 13:54:28.033031520 -0600 -+++ ./configure.ac 2020-11-11 13:56:58.260034880 -0600 -@@ -639,6 +639,8 @@ +--- ./configure.ac.orig 2023-05-07 18:06:47.000000000 -0500 ++++ ./configure.ac 2023-05-19 13:22:11.198977808 -0500 +@@ -754,6 +754,8 @@ po/Makefile.in \ Make.xml.rules \ modules/Makefile \ @@ -53,8 +74,8 @@ modules/pam_access/Makefile \ modules/pam_debug/Makefile modules/pam_deny/Makefile \ modules/pam_echo/Makefile modules/pam_env/Makefile \ ---- ./modules/Makefile.am.orig 2020-11-11 13:54:28.033031520 -0600 -+++ ./modules/Makefile.am 2020-11-11 13:58:24.059036799 -0600 +--- ./modules/Makefile.am.orig 2023-05-07 18:06:47.000000000 -0500 ++++ ./modules/Makefile.am 2023-05-19 13:22:11.198977808 -0500 @@ -44,6 +44,8 @@ SUBDIRS := \ diff --git a/source/a/pam/pam.SlackBuild b/source/a/pam/pam.SlackBuild index 1e29e91bd..bfa4e9249 100755 --- a/source/a/pam/pam.SlackBuild +++ b/source/a/pam/pam.SlackBuild @@ -27,7 +27,7 @@ SRCNAM=Linux-PAM PKGNAM=pam PAMRHVER=${PAMRHVER:-$(echo pam-redhat-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} VERSION=${VERSION:-$(echo $SRCNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-2} +BUILD=${BUILD:-1} # Automatically determine the architecture we're building on: if [ -z "$ARCH" ]; then @@ -141,6 +141,7 @@ CXXFLAGS="$SLKCFLAGS" \ --disable-rpath \ --disable-selinux \ --disable-static \ + --enable-lastlog \ --build=$ARCH-slackware-linux || exit 1 # Make these man pages or the build falls over later diff --git a/source/a/pam/pam.url b/source/a/pam/pam.url index 07dfcb99b..d9bd3667c 100644 --- a/source/a/pam/pam.url +++ b/source/a/pam/pam.url @@ -1,2 +1,2 @@ -#http://www.linux-pam.org/library/Linux-PAM-1.3.1.tar.bz2 +#http://www.linux-pam.org/library/Linux-PAM-1.5.3.tar.bz2 https://github.com/linux-pam/linux-pam/releases diff --git a/source/ap/cups-filters/CVE-2023-24805.patch b/source/ap/cups-filters/CVE-2023-24805.patch new file mode 100644 index 000000000..e84312a82 --- /dev/null +++ b/source/ap/cups-filters/CVE-2023-24805.patch @@ -0,0 +1,167 @@ +--- ./backend/beh.c.orig 2023-01-24 19:38:24.000000000 -0600 ++++ ./backend/beh.c 2023-05-19 13:08:27.724167656 -0500 +@@ -22,12 +22,14 @@ + #include "backend-private.h" + #include + #include ++#include ++ + + /* + * Local globals... + */ + +-static int job_canceled = 0; /* Set to 1 on SIGTERM */ ++static volatile int job_canceled = 0; /* Set to 1 on SIGTERM */ + + /* + * Local functions... +@@ -213,21 +215,44 @@ + char **argv, /* I - Command-line arguments */ + char *filename) { /* I - File name of input data */ + const char *cups_serverbin; /* Location of programs */ ++ char *backend_argv[8]; // Arguments for called CUPS backend + char scheme[1024], /* Scheme from URI */ + *ptr, /* Pointer into scheme */ +- cmdline[65536]; /* Backend command line */ +- int retval; ++ backend_path[2048]; // Backend path ++ int pid, ++ wait_pid, ++ wait_status, ++ retval = 0; ++ int bytes; ++ + + /* + * Build the backend command line... + */ + +- strncpy(scheme, uri, sizeof(scheme) - 1); +- if (strlen(uri) > 1023) +- scheme[1023] = '\0'; ++ scheme[0] = '\0'; ++ strncat(scheme, uri, sizeof(scheme) - 1); + if ((ptr = strchr(scheme, ':')) != NULL) + *ptr = '\0'; +- ++ else ++ { ++ fprintf(stderr, ++ "ERROR: beh: Invalid URI, no colon (':') to mark end of scheme part.\n"); ++ exit (CUPS_BACKEND_FAILED); ++ } ++ if (strchr(scheme, '/')) ++ { ++ fprintf(stderr, ++ "ERROR: beh: Invalid URI, scheme contains a slash ('/').\n"); ++ exit (CUPS_BACKEND_FAILED); ++ } ++ if (!strcmp(scheme, ".") || !strcmp(scheme, "..")) ++ { ++ fprintf(stderr, ++ "ERROR: beh: Invalid URI, scheme (\"%s\") is a directory.\n", ++ scheme); ++ exit (CUPS_BACKEND_FAILED); ++ } + if ((cups_serverbin = getenv("CUPS_SERVERBIN")) == NULL) + cups_serverbin = CUPS_SERVERBIN; + +@@ -235,16 +260,26 @@ + fprintf(stderr, + "ERROR: beh: Direct output into a file not supported.\n"); + exit (CUPS_BACKEND_FAILED); +- } else +- snprintf(cmdline, sizeof(cmdline), +- "%s/backend/%s '%s' '%s' '%s' '%s' '%s' %s", +- cups_serverbin, scheme, argv[1], argv[2], argv[3], +- /* Apply number of copies only if beh was called with a +- file name and not with the print data in stdin, as +- backends should handle copies only if they are called +- with a file name */ +- (argc == 6 ? "1" : argv[4]), +- argv[5], filename); ++ } ++ ++ backend_argv[0] = uri; ++ backend_argv[1] = argv[1]; ++ backend_argv[2] = argv[2]; ++ backend_argv[3] = argv[3]; ++ backend_argv[4] = (argc == 6 ? "1" : argv[4]); ++ backend_argv[5] = argv[5]; ++ backend_argv[6] = filename; ++ backend_argv[7] = NULL; ++ ++ bytes = snprintf(backend_path, sizeof(backend_path), ++ "%s/backend/%s", cups_serverbin, scheme); ++ if (bytes < 0 || bytes >= sizeof(backend_path)) ++ { ++ fprintf(stderr, ++ "ERROR: beh: Invalid scheme (\"%s\"), could not determing backend path.\n", ++ scheme); ++ exit (CUPS_BACKEND_FAILED); ++ } + + /* + * Overwrite the device URI and run the actual backend... +@@ -253,17 +288,41 @@ + setenv("DEVICE_URI", uri, 1); + + fprintf(stderr, +- "DEBUG: beh: Executing backend command line \"%s\"...\n", +- cmdline); ++ "DEBUG: beh: Executing backend command line \"%s '%s' '%s' '%s' '%s' '%s'%s%s\"...\n", ++ backend_path, backend_argv[1], backend_argv[2], backend_argv[3], ++ backend_argv[4], backend_argv[5], ++ (backend_argv[6] && backend_argv[6][0] ? " " : ""), ++ (backend_argv[6] && backend_argv[6][0] ? backend_argv[6] : "")); + fprintf(stderr, + "DEBUG: beh: Using device URI: %s\n", + uri); + +- retval = system(cmdline) >> 8; ++ if ((pid = fork()) == 0) ++ { ++ retval = execv(backend_path, backend_argv); ++ ++ if (retval == -1) ++ fprintf(stderr, "ERROR: Unable to execute backend: %s\n", ++ strerror(errno)); ++ exit (CUPS_BACKEND_FAILED); ++ } ++ else if (pid < 0) ++ { ++ fprintf(stderr, "ERROR: Unable to fork for backend\n"); ++ return (CUPS_BACKEND_FAILED); ++ } ++ ++ while ((wait_pid = wait(&wait_status)) < 0 && errno == EINTR); + +- if (retval == -1) +- fprintf(stderr, "ERROR: Unable to execute backend command line: %s\n", +- strerror(errno)); ++ if (wait_pid >= 0 && wait_status) ++ { ++ if (WIFEXITED(wait_status)) ++ retval = WEXITSTATUS(wait_status); ++ else if (WTERMSIG(wait_status) != SIGTERM) ++ retval = WTERMSIG(wait_status); ++ else ++ retval = 0; ++ } + + return (retval); + } +@@ -277,8 +336,10 @@ + sigterm_handler(int sig) { /* I - Signal number (unused) */ + (void)sig; + +- fprintf(stderr, +- "DEBUG: beh: Job canceled.\n"); ++ const char * const msg = "DEBUG: beh: Job canceled.\n"; ++ // The if() is to eliminate the return value and silence the warning ++ // about an unused return value. ++ if (write(2, msg, strlen(msg))); + + if (job_canceled) + _exit(CUPS_BACKEND_OK); diff --git a/source/ap/cups-filters/cups-filters.SlackBuild b/source/ap/cups-filters/cups-filters.SlackBuild index 05f90d9a4..a43530823 100755 --- a/source/ap/cups-filters/cups-filters.SlackBuild +++ b/source/ap/cups-filters/cups-filters.SlackBuild @@ -24,7 +24,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=cups-filters VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-1} +BUILD=${BUILD:-2} # Automatically determine the architecture we're building on: if [ -z "$ARCH" ]; then @@ -78,6 +78,8 @@ find . \ \( -perm 666 -o -perm 664 -o -perm 600 -o -perm 444 -o -perm 440 -o -perm 400 \) \ -exec chmod 644 {} \+ +zcat $CWD/CVE-2023-24805.patch.gz | patch -p1 --verbose || exit 1 + if [ ! -r configure ]; then if [ -x ./autogen.sh ]; then NOCONFIGURE=1 ./autogen.sh