mirror of
git://slackware.nl/current.git
synced 2024-12-26 09:58:59 +01:00
151 commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Patrick J Volkerding
|
0a6c6a646b |
Mon Nov 25 21:19:23 UTC 2024
a/mkinitrd-1.4.11-x86_64-50.txz: Rebuilt. geninitrd: If the kernel to use was provided on the command line or with a predefined KERNEL variable, make sure that the KERNEL variable is set to that value before handing off control to a custom script. Thanks to LuckyCyborg for the bug report. d/git-2.47.1-x86_64-1.txz: Upgraded. d/re2c-4.0.1-x86_64-1.txz: Upgraded. l/libqalculate-5.4.0-x86_64-1.txz: Upgraded. l/netpbm-11.08.02-x86_64-1.txz: Upgraded. n/gnupg2-2.4.7-x86_64-1.txz: Upgraded. n/wget2-2.2.0-x86_64-1.txz: Upgraded. Shared library .so-version bump. extra/bash-completion/bash-completion-2.15.0-noarch-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
558ed88602 |
Fri Nov 22 22:08:18 UTC 2024
a/kernel-firmware-20241122_3ed524d-noarch-1.txz: Upgraded.
a/kernel-generic-6.12.1-x86_64-1.txz: Upgraded.
a/libblockdev-3.2.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
a/libbytesize-2.11-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
a/libpwquality-1.4.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
a/mkinitrd-1.4.11-x86_64-48.txz: Rebuilt.
remove-orphaned-initrds: fixed output path when removing dangling symlinks.
Thanks to Mechanikx.
a/nut-2.8.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
a/util-linux-2.40.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
a/volume_key-0.3.12-x86_64-9.txz: Rebuilt.
Recompiled against python3-3.12.7.
ap/hplip-3.24.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
ap/linuxdoc-tools-0.9.83-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
ap/rpm-4.20.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
ap/undervolt-0.4.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/Cython-3.0.11-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/cmake-3.31.1-x86_64-1.txz: Upgraded.
d/distcc-3.4-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/gdb-15.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/gyp-20210831_d6c5dd51-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/kernel-headers-6.12.1-x86-1.txz: Upgraded.
d/libtool-2.5.4-x86_64-1.txz: Upgraded.
d/llvm-19.1.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/mercurial-6.9-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/meson-1.6.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/python-pip-24.3.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/python-setuptools-75.6.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/python3-3.12.7-x86_64-1.txz: Upgraded.
Python 3.12 has been aging for more than a year, so it's time to take it.
Shared library .so-version bump.
d/scons-4.8.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/slacktrack-2.24-x86_64-1.txz: Upgraded.
When touching the filesystem, use xargs -P $(nproc) for a nice speedup.
k/kernel-source-6.12.1-noarch-1.txz: Upgraded.
kde/cantor-23.08.5-x86_64-13.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/kapidox-5.116.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/kdev-python-23.08.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/kig-23.08.5-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/kmymoney-5.1.3-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/kopeninghours-23.08.5-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/krita-5.2.6-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/Mako-1.3.5-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/PyQt-builder-1.16.4-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/PyQt5-5.15.11-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/PyQt5_sip-12.15.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/QScintilla-2.14.1-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/avahi-20240306_709e60f-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/boost-1.86.0-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/brotli-1.1.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/dbus-python-1.3.2-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/gexiv2-0.14.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/gi-docgen-2024.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/glade-3.40.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/gobject-introspection-1.82.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/gtk4-4.16.6-x86_64-1.txz: Upgraded.
l/lensfun-0.3.4-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libcaca-0.99.beta20-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libcap-ng-0.8.5-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libmtp-1.1.22-x86_64-1.txz: Upgraded.
l/libnvme-1.11.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libplist-2.6.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libwebp-1.4.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libxml2-2.13.5-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libxslt-1.1.42-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/mozilla-nss-3.107-x86_64-1.txz: Upgraded.
l/newt-0.52.24-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/protobuf-28.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/pycairo-1.27.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/pycups-2.0.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/pycurl-7.45.3-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/pygobject3-3.50.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/pyparsing-3.1.2-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-Jinja2-3.1.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-MarkupSafe-3.0.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-PyYAML-6.0.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-alabaster-1.0.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-appdirs-1.4.4-x86_64-8.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-babel-2.16.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-build-1.2.2.post1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-calver-2022.6.26-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-certifi-2024.8.30-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-cffi-1.17.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-chardet-5.2.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-charset-normalizer-3.4.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-distro-1.9.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-dnspython-2.7.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-docutils-0.21.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-doxypypy-0.8.8.7-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-doxyqml-0.5.3-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-editables-0.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-flit-core-3.10.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-future-1.0.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-glad2-2.0.8-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-hatch-vcs-0.4.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-hatchling-1.26.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-html5lib-1.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-idna-3.10-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-imagesize-1.4.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-importlib_metadata-8.5.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-installer-0.7.0-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-lxml-5.3.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-markdown-3.7-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-notify2-0.3.1-x86_64-12.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-packaging-24.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pathspec-0.12.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pbr-6.1.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pillow-11.0.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pluggy-1.5.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-ply-3.11-x86_64-10.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-psutil-6.1.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pycparser-2.22-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pygments-2.18.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pyproject-hooks-1.2.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pysol_cards-0.18.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-random2-1.0.2-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-requests-2.32.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-sane-2.9.1-x86_64-7.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-setuptools_scm-8.1.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-six-1.16.0-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-smartypants-2.0.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-snowballstemmer-2.2.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-sphinx-8.1.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-sphinx_rtd_theme-3.0.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-tomli-w-1.1.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-trove-classifiers-2024.10.21.16-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-typogrify-2.0.7-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-urllib3-2.2.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-webencodings-0.5.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-wheel-0.45.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-zipp-3.21.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/sip-6.8.6-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/speech-dispatcher-0.11.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/system-config-printer-1.5.18-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/talloc-2.4.2-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/tdb-1.4.12-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/tevent-0.16.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/epic5-3.0.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/fetchmail-6.5.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/getmail-6.19.05-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/gpgme-1.24.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/iptraf-ng-1.2.2-x86_64-1.txz: Upgraded.
n/net-snmp-5.9.4-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/nftables-1.1.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/nmap-7.95-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/nss-pam-ldapd-0.9.12-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/obexftp-0.24.2-x86_64-14.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/php-8.3.14-x86_64-1.txz: Upgraded.
This update fixes security issues:
LDAP: Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape).
(CVE-2024-8932)
MySQLnd: Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap
through heap buffer over-read). (CVE-2024-8929)
PDO DBLIB: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib
quoter causing OOB writes). (CVE-2024-11236)
PDO Firebird: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the
firebird quoter causing OOB writes). (CVE-2024-11236)
Streams: Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream
context might allow for CRLF injection in URIs). (CVE-2024-11234)
Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with
convert.quoted-printable-decode filter). (CVE-2024-11233)
For more information, see:
https://www.php.net/ChangeLog-8.php#8.3.14
https://www.cve.org/CVERecord?id=CVE-2024-8932
https://www.cve.org/CVERecord?id=CVE-2024-8929
https://www.cve.org/CVERecord?id=CVE-2024-11236
https://www.cve.org/CVERecord?id=CVE-2024-11234
https://www.cve.org/CVERecord?id=CVE-2024-11233
(* Security fix *)
n/pssh-2.3.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/samba-4.21.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/ibus-1.5.31-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/ibus-anthy-1.5.16-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/ibus-hangul-1.5.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/ibus-libpinyin-1.15.8-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/ibus-table-1.17.8-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/marisa-0.2.6-x86_64-12.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/pyxdg-0.28-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/xcb-proto-1.17.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
xap/blueman-2.4.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
xap/hexchat-2.16.2-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
extra/brltty/brltty-6.7-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|
||
|
Patrick J Volkerding
|
cf1f9c9d38 |
Sun Nov 17 19:50:28 UTC 2024
a/kernel-generic-6.11.9-x86_64-1.txz: Upgraded. a/mcelog-201-x86_64-1.txz: Upgraded. a/mkinitrd-1.4.11-x86_64-47.txz: Rebuilt. geninitrd: if enabled in /etc/default/geninitrd, run remove-orphaned-initrds after generating the initrd. Require AUTOGENERATE_INITRD=true in /etc/default/geninitrd to generate the initrd. d/kernel-headers-6.11.9-x86-1.txz: Upgraded. k/kernel-source-6.11.9-noarch-1.txz: Upgraded. l/imagemagick-7.1.1_41-x86_64-1.txz: Upgraded. x/libXt-1.3.1-x86_64-1.txz: Upgraded. extra/fltk/fltk-1.3.10-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt. |
||
|
Patrick J Volkerding
|
9951f6a1a8 |
Fri Nov 8 22:17:50 UTC 2024
a/kernel-firmware-20241108_ad74054-noarch-1.txz: Upgraded. a/kernel-generic-6.11.7-x86_64-1.txz: Upgraded. Unless disabled in /etc/default/geninitrd, automatically generate an initial ramdisk upon package installation or upgrade. a/mkinitrd-1.4.11-x86_64-46.txz: Rebuilt. geninitrd: also accept /opt/sbin/geninitrd as an override. Suggested by regdub. Since the installer sends different args to the setup scripts, we can't use $1 as the kernel file with setup.01.mkinitrd, so convert it into a variable in geninitrd instead (if needed). mkinitrd_command_generator.sh: pvdisplay will complain if there are any file descriptors besides stdin, stdout, and stderr, which will always be true when called from a package install script due to file locking. So send stderr from the two calls to pvdisplay to /dev/null. d/kernel-headers-6.11.7-x86-1.txz: Upgraded. k/kernel-source-6.11.7-noarch-1.txz: Upgraded. l/python-packaging-24.2-x86_64-1.txz: Upgraded. n/iptables-1.8.11-x86_64-1.txz: Upgraded. n/lftp-4.9.3-x86_64-1.txz: Upgraded. x/ibus-m17n-1.4.34-x86_64-1.txz: Upgraded. x/xbacklight-1.2.4-x86_64-1.txz: Upgraded. x/xf86-video-nouveau-1.0.18-x86_64-1.txz: Upgraded. x/xrandr-1.5.3-x86_64-1.txz: Upgraded. xfce/xfce4-weather-plugin-0.11.3-x86_64-1.txz: Upgraded. extra/xf86-video-fbdev/xf86-video-fbdev-0.5.1-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt. |
||
|
Patrick J Volkerding
|
32ccce4a53 |
Wed Oct 30 21:03:27 UTC 2024
ap/vim-9.1.0821-x86_64-1.txz: Upgraded.
d/llvm-19.1.3-x86_64-1.txz: Upgraded.
d/python-setuptools-75.3.0-x86_64-1.txz: Upgraded.
l/PyQt5-5.15.11-x86_64-2.txz: Rebuilt.
Recompiled to drop the QtWebKit and QtWebKitWidgets bindings.
Thanks to jloco.
l/libclc-19.1.3-x86_64-1.txz: Upgraded.
l/libnl3-3.11.0-x86_64-1.txz: Upgraded.
l/lz4-1.10.0-x86_64-2.txz: Rebuilt.
Make sure liblz4.pc uses lib${LIBDIRSUFFIX}. Thanks to af7567.
l/mozjs128-128.4.0esr-x86_64-1.txz: Upgraded.
n/dovecot-2.3.21.1-x86_64-3.txz: Rebuilt.
Recompiled using --with-lua. Thanks to Luigi Trovato.
n/fetchmail-6.5.0-x86_64-1.txz: Upgraded.
n/gnupg2-2.4.6-x86_64-1.txz: Upgraded.
x/xf86-input-wacom-1.2.3-x86_64-1.txz: Upgraded.
x/xorg-server-21.1.14-x86_64-1.txz: Upgraded.
This update fixes a security issue:
By providing a modified bitmap, a heap-based buffer overflow may occur.
This may lead to local privilege escalation if the server is run as root
or remote code execution (e.g. x11 over ssh).
This vulnerability was discovered by:
Jan-Niklas Sohn working with Trend Micro Zero Day Initiative
For more information, see:
https://lists.x.org/archives/xorg-announce/2024-October/003545.html
https://www.cve.org/CVERecord?id=CVE-2024-9632
(* Security fix *)
x/xorg-server-xephyr-21.1.14-x86_64-1.txz: Upgraded.
x/xorg-server-xnest-21.1.14-x86_64-1.txz: Upgraded.
x/xorg-server-xvfb-21.1.14-x86_64-1.txz: Upgraded.
x/xorg-server-xwayland-24.1.4-x86_64-1.txz: Upgraded.
This update fixes a security issue:
By providing a modified bitmap, a heap-based buffer overflow may occur.
This may lead to local privilege escalation if the server is run as root
or remote code execution (e.g. x11 over ssh).
This vulnerability was discovered by:
Jan-Niklas Sohn working with Trend Micro Zero Day Initiative
For more information, see:
https://lists.x.org/archives/xorg-announce/2024-October/003545.html
https://www.cve.org/CVERecord?id=CVE-2024-9632
(* Security fix *)
xap/mozilla-firefox-128.4.0esr-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/128.4.0/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2024-56/
https://www.cve.org/CVERecord?id=CVE-2024-10458
https://www.cve.org/CVERecord?id=CVE-2024-10459
https://www.cve.org/CVERecord?id=CVE-2024-10460
https://www.cve.org/CVERecord?id=CVE-2024-10461
https://www.cve.org/CVERecord?id=CVE-2024-10462
https://www.cve.org/CVERecord?id=CVE-2024-10463
https://www.cve.org/CVERecord?id=CVE-2024-10464
https://www.cve.org/CVERecord?id=CVE-2024-10465
https://www.cve.org/CVERecord?id=CVE-2024-10466
https://www.cve.org/CVERecord?id=CVE-2024-10467
(* Security fix *)
xap/mozilla-thunderbird-128.4.0esr-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/128.4.0esr/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2024-58/
https://www.cve.org/CVERecord?id=CVE-2024-10458
https://www.cve.org/CVERecord?id=CVE-2024-10459
https://www.cve.org/CVERecord?id=CVE-2024-10460
https://www.cve.org/CVERecord?id=CVE-2024-10461
https://www.cve.org/CVERecord?id=CVE-2024-10462
https://www.cve.org/CVERecord?id=CVE-2024-10463
https://www.cve.org/CVERecord?id=CVE-2024-10464
https://www.cve.org/CVERecord?id=CVE-2024-10465
https://www.cve.org/CVERecord?id=CVE-2024-10466
https://www.cve.org/CVERecord?id=CVE-2024-10467
(* Security fix *)
xap/vim-gvim-9.1.0821-x86_64-1.txz: Upgraded.
xap/xaos-4.3.3-x86_64-1.txz: Upgraded.
extra/tigervnc/tigervnc-1.14.1-x86_64-2.txz: Rebuilt.
Rebuilt against xorg-server-21.1.14.
This update fixes a security issue:
By providing a modified bitmap, a heap-based buffer overflow may occur.
This may lead to local privilege escalation if the server is run as root
or remote code execution (e.g. x11 over ssh).
This vulnerability was discovered by:
Jan-Niklas Sohn working with Trend Micro Zero Day Initiative
For more information, see:
https://lists.x.org/archives/xorg-announce/2024-October/003545.html
https://www.cve.org/CVERecord?id=CVE-2024-9632
(* Security fix *)
|
||
|
Patrick J Volkerding
|
05b6a05e8f |
Mon Oct 28 21:22:48 UTC 2024
a/aaa_libraries-15.1-x86_64-34.txz: Rebuilt.
Upgraded: libcap.so.2.71, libelf-0.192.so, liblzma.so.5.6.3,
libcares.so.2.19.1, libexpat.so.1.9.3, libglib-2.0.so.0.8200.2,
libgmodule-2.0.so.0.8200.2, libgobject-2.0.so.0.8200.2,
libgthread-2.0.so.0.8200.2, libisl.so.23.4.0, libjson-c.so.5.4.0,
libpng16.so.16.44.0, libtiff.so.6.1.0, libtiffxx.so.6.1.0,
libunistring.so.5.2.0.
Removed: libboost_*.so.1.85.0.
Added (temporarily): libicudata.so.74.2, libicui18n.so.74.2,
libicuio.so.74.2, libicutest.so.74.2, libicutu.so.74.2,
libicuuc.so.74.2.
a/mkinitrd-1.4.11-x86_64-41.txz: Rebuilt.
remove-orphaned-initrds: simplify matching - initrd-${FOO}.img is considered
orphaned if there is no vmlinuz-${FOO} (the contents of $FOO are arbitrary).
a/pkgtools-15.1-noarch-15.txz: Rebuilt.
make-kernel-backup: if we are backing up vmlinuz-${FOO}, then also back up
initrd-${FOO}.img if it exists. Don't try to match specific fields.
a/xfsprogs-6.11.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
ap/mpg123-1.32.8-x86_64-1.txz: Upgraded.
ap/sqlite-3.46.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
d/mercurial-6.8.2-x86_64-1.txz: Upgraded.
d/python-pip-24.3.1-x86_64-1.txz: Upgraded.
kde/kdeplasma-addons-5.27.11-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
kde/kdewebkit-5.116.0-x86_64-1.txz: Removed.
Mothing uses this. Obsolete.
kde/konsole-23.08.5-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
kde/plasma-workspace-5.27.11.1-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/M2Crypto-0.42.0-x86_64-1.txz: Removed.
Nothing in Slackware has needed this since crda was removed, and very little
elsewhere does. Thanks to lucabon.
l/babl-0.1.110-x86_64-1.txz: Upgraded.
l/boost-1.86.0-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/desktop-file-utils-0.28-x86_64-1.txz: Upgraded.
l/gspell-1.14.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/harfbuzz-10.0.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/icu4c-76.1-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libcap-2.71-x86_64-1.txz: Upgraded.
l/libical-3.0.18-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/libqalculate-5.3.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/liburing-2.8-x86_64-1.txz: Upgraded.
l/libvisio-0.1.8-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/mozjs128-128.3.1esr-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/nodejs-20.18.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/qt5-5.15.15_20241016_9f395e3b-x86_64-1.txz: Upgraded.
Compiled against icu4c-76.1.
l/qt5-webkit-5.212.0_alpha4-x86_64-13.txz: Removed.
Nothing uses this except kdewebkit, and nothing uses that.
Plus it is unmaintained, obsolete, and likely full of holes.
l/qt6-6.7.3_20240920_90e86aee-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/vte-0.78.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
n/dovecot-2.3.21.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
n/netatalk-4.0.3-x86_64-1.txz: Upgraded.
n/php-8.3.13-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
n/postfix-3.9.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
n/samba-4.21.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
n/tin-2.6.3-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
t/texlive-2024.240409-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
extra/brltty/brltty-6.7-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
extra/sendmail/sendmail-8.18.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
extra/sendmail/sendmail-cf-8.18.1-noarch-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
|
||
|
Patrick J Volkerding
|
8a32bfc76a |
Wed Oct 23 19:39:39 UTC 2024
a/openssl-solibs-3.4.0-x86_64-1.txz: Upgraded. l/pipewire-1.2.6-x86_64-1.txz: Upgraded. l/protobuf-28.3-x86_64-1.txz: Upgraded. n/epic5-3.0.1-x86_64-1.txz: Upgraded. n/openssl-3.4.0-x86_64-1.txz: Upgraded. extra/tigervnc/tigervnc-1.14.1-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
03de904154 |
Wed Oct 16 19:11:30 UTC 2024
d/llvm-19.1.2-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
d/python-setuptools-75.2.0-x86_64-1.txz: Upgraded.
kde/calligra-3.2.1-x86_64-45.txz: Rebuilt.
Recompiled against poppler-24.10.0.
kde/cantor-23.08.5-x86_64-11.txz: Rebuilt.
Recompiled against poppler-24.10.0.
kde/kdevelop-23.08.5-x86_64-3.txz: Rebuilt.
Recompiled against llvm-19.1.2.
kde/kfilemetadata-5.116.0-x86_64-8.txz: Rebuilt.
Recompiled against poppler-24.10.0.
kde/kile-2.9.93-x86_64-38.txz: Rebuilt.
Recompiled against poppler-24.10.0.
kde/kitinerary-23.08.5-x86_64-9.txz: Rebuilt.
Recompiled against poppler-24.10.0.
kde/krita-5.2.6-x86_64-2.txz: Rebuilt.
Recompiled against poppler-24.10.0.
kde/labplot-2.11.1-x86_64-4.txz: Rebuilt.
Recompiled against poppler-24.10.0.
kde/okular-23.08.5-x86_64-9.txz: Rebuilt.
Recompiled against poppler-24.10.0.
l/libclc-19.1.2-x86_64-1.txz: Upgraded.
Compiled against llvm-19.1.2.
l/libssh2-1.11.1-x86_64-1.txz: Upgraded.
src: add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack."
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-48795
(* Security fix *)
l/media-player-info-26-noarch-1.txz: Upgraded.
l/poppler-24.10.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/python-pillow-11.0.0-x86_64-1.txz: Upgraded.
l/qt5-5.15.15_20240903_363456a6-x86_64-2.txz: Rebuilt.
Patched and recompiled against llvm-19.1.2.
l/qt6-6.7.3_20240920_90e86aee-x86_64-3.txz: Rebuilt.
Patched and recompiled against llvm-19.1.2.
l/spirv-llvm-translator-19.1.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
Compiled against llvm-19.1.2.
n/bind-9.20.3-x86_64-1.txz: Upgraded.
n/c-ares-1.34.2-x86_64-1.txz: Upgraded.
x/mesa-24.2.5-x86_64-1.txz: Upgraded.
Compiled against llvm-19.1.2.
x/xf86-input-evdev-2.11.0-x86_64-1.txz: Upgraded.
x/xf86-input-libinput-1.5.0-x86_64-1.txz: Upgraded.
extra/brltty/brltty-6.7-x86_64-1.txz: Upgraded.
extra/xv/xv-6.0.2-x86_64-1.txz: Upgraded.
|
||
|
Patrick J Volkerding
|
ad15c47313 |
Wed Aug 14 19:36:01 UTC 2024
a/kernel-generic-6.10.5-x86_64-1.txz: Upgraded.
a/kernel-huge-6.10.5-x86_64-1.txz: Upgraded.
a/kernel-modules-6.10.5-x86_64-1.txz: Upgraded.
d/kernel-headers-6.10.5-x86-1.txz: Upgraded.
d/python-setuptools-72.2.0-x86_64-1.txz: Upgraded.
k/kernel-source-6.10.5-noarch-1.txz: Upgraded.
kde/okteta-0.26.16-x86_64-1.txz: Upgraded.
n/dovecot-2.3.21.1-x86_64-1.txz: Upgraded.
This update fixes security issues:
A large number of address headers in email resulted in excessive CPU usage.
Abnormally large email headers are now truncated or discarded, with a limit
of 10MB on a single header and 50MB for all the headers of all the parts of
an email.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-23184
https://www.cve.org/CVERecord?id=CVE-2024-23185
(* Security fix *)
n/lynx-2.9.2-x86_64-1.txz: Upgraded.
x/mesa-24.2.0-x86_64-1.txz: Upgraded.
xfce/xfce4-notifyd-0.9.5-x86_64-1.txz: Upgraded.
extra/tigervnc/tigervnc-1.14.0-x86_64-3.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
Thanks to Petri Kaukasoina.
extra/xv/xv-6.0.0-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|
||
|
Patrick J Volkerding
|
7bcbee5dbe |
Wed Jul 31 18:35:06 UTC 2024
a/grub-2.12-x86_64-15.txz: Rebuilt.
In /etc/default/grub, eliminate the GRUB_DISABLE_KERNEL_SYMLINKS="true"
option, replacing it with GRUB_DISPLAY_KERNEL_FILETYPES=both. This may
be set to "symlinks" (only show kernel symlinks in the menu), "files"
(only show kernel files in the menu), or "both" to show both.
Thanks to 0XBF.
In /etc/default/grub, add a new option GRUB_INITRD_FALLBACK_NAME=initrd.gz.
This defines the name of an initrd that will match to any kernel if a
better match wasn't found first. This option will be commented out by
default.
When the defaults in /etc/default/grub are left alone, the behavior of the
10_linux script is identical to the unmodified one.
ap/vim-9.1.0645-x86_64-1.txz: Upgraded.
l/protobuf-27.3-x86_64-1.txz: Upgraded.
n/curl-8.9.1-x86_64-1.txz: Upgraded.
This update fixes a security issue:
ASN.1 date parser overread.
For more information, see:
https://curl.se/docs/CVE-2024-7264.html
https://www.cve.org/CVERecord?id=CVE-2024-7264
(* Security fix *)
x/mesa-24.1.5-x86_64-1.txz: Upgraded.
xap/vim-gvim-9.1.0645-x86_64-1.txz: Upgraded.
xfce/thunar-4.18.11-x86_64-1.txz: Upgraded.
extra/tigervnc/tigervnc-1.14.0-x86_64-2.txz: Rebuilt.
Use the old build script, which worked with a couple of added slashes.
Xvnc restored, and /usr/local directories gone.
|
||
|
Patrick J Volkerding
|
bf331cc425 |
Tue Jul 30 18:39:31 UTC 2024
a/btrfs-progs-6.10-x86_64-1.txz: Upgraded. a/cryptsetup-2.7.4-x86_64-1.txz: Upgraded. a/sysvinit-3.10-x86_64-1.txz: Upgraded. d/git-2.46.0-x86_64-1.txz: Upgraded. l/gst-plugins-bad-free-1.24.6-x86_64-1.txz: Upgraded. l/gst-plugins-base-1.24.6-x86_64-1.txz: Upgraded. l/gst-plugins-good-1.24.6-x86_64-1.txz: Upgraded. l/gst-plugins-libav-1.24.6-x86_64-1.txz: Upgraded. l/gstreamer-1.24.6-x86_64-1.txz: Upgraded. l/python-sphinx-8.0.2-x86_64-1.txz: Upgraded. l/tdb-1.4.11-x86_64-1.txz: Upgraded. extra/tigervnc/tigervnc-1.14.0-x86_64-1.txz: Upgraded. Thanks to marav for the build script help. |
||
|
Patrick J Volkerding
|
b75837013c |
Thu Jul 25 02:39:18 UTC 2024
Well folks, we have some more interesting stuff in /testing now.
Our good friend LuckyCyborg posted a while back about our trials with
GRUB2, and that we were banging our heads against a wall for no reason
trying to bend GRUB2 with our 09_slackware_linux grub.d script instead
of changing our kernel/initrd naming scheme to vmlinux-6.10.1-generic
and initrd-6.10.1-generic.img. And, as is often the case, our friend is
exactly correct. Once we stopped trying to swim against the current, GRUB2
started behaving as it should.
The updates in /testing change the kernel naming scheme thusly, and modify
the geninitrd script in the mkinitrd package to also use this naming
scheme. And, of course, 09_slackware_linux is removed from GRUB2, and the
10_linux script is only lightly modified.
Because lilo and elilo work with the symlinks to the kernel and initrd,
they shouldn't care anout this change.
We've probably got 6.9.11 coming tomorrow. Unless I hear that I should stop
the presses on this change, it's likely that those kernels will be updated
using the new naming scheme and the mkinitrd and grub updates will be moved
into the main tree from /testing.
We'll stick with 6.9 in the main tree for now because I'm still encountering
suspend failure with the 6.10 kernel here.
Enjoy! :-)
a/kernel-firmware-20240723_b37d247-noarch-1.txz: Upgraded.
ap/mpg123-1.32.6-x86_64-2.txz: Rebuilt.
l/libxml2-2.13.3-x86_64-1.txz: Upgraded.
This update fixes a security issue:
Fix XXE protection in downstream code.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-40896
(* Security fix *)
l/mozilla-nss-3.102.1-x86_64-1.txz: Upgraded.
l/nodejs-20.16.0-x86_64-1.txz: Upgraded.
l/python-importlib_metadata-8.2.0-x86_64-1.txz: Upgraded.
l/v4l-utils-1.28.1-x86_64-1.txz: Upgraded.
n/c-ares-1.32.3-x86_64-1.txz: Upgraded.
n/curl-8.9.0-x86_64-1.txz: Upgraded.
n/htdig-3.2.0b6-x86_64-10.txz: Rebuilt.
Patch XSS vulnerability. Thanks to jayjwa.
Get this out of cgi-bin. Thanks to LuckyCyborg.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2007-6110
(* Security fix *)
n/libtirpc-1.3.5-x86_64-1.txz: Upgraded.
extra/fltk/fltk-1.3.9-x86_64-2.txz: Rebuilt.
extra/tigervnc/tigervnc-1.13.1-x86_64-6.txz: Rebuilt.
Not sure why 1.14.0 isn't compiling, but we'll rebuild this for now.
testing/packages/grub-2.12-x86_64-12.txz: Upgraded.
Remove 09_slackware_linux.
10_linux: don't rename Slackware ;-)
This should configure the renamed kernel/initrd perfectly.
Perhaps 10_linux should no longer accept initrd.gz as a valid name?
For now it is accepted to avoid disrupting existing workflows.
testing/packages/kernel-generic-6.10.1-x86_64-1.txz: Upgraded.
testing/packages/kernel-headers-6.10.1-x86-1.txz: Upgraded.
testing/packages/kernel-huge-6.10.1-x86_64-1.txz: Upgraded.
testing/packages/kernel-modules-6.10.1-x86_64-1.txz: Upgraded.
testing/packages/kernel-source-6.10.1-noarch-1.txz: Upgraded.
testing/packages/mkinitrd-1.4.11-x86_64-35.txz: Upgraded.
geninitrd: create initrd with initrd-version-name.img filename.
Make compat symlinks by default.
Always add LVM (I've seen it mistakenly skipped... if we can get to the
bottom of that then we'll stop always adding it)
Add /etc/default/geninitrd for configuration.
|
||
|
Patrick J Volkerding
|
abc3e67678 |
Sun May 12 19:10:12 UTC 2024
a/less-654-x86_64-1.txz: Upgraded. d/ninja-1.12.1-x86_64-1.txz: Upgraded. n/whois-5.5.23-x86_64-1.txz: Upgraded. Updated the .sc, .********* (.xn--yfro4i67o, Singapore) and .********************************* (.xn--clchc0ea0b2g2a9gcd, Singapore) TLD servers. extra/bittornado/bittornado-0.3.18-noarch-3.txz: Removed. Obsolete and based on python2. |
||
|
Patrick J Volkerding
|
afc0f1e9aa |
Thu May 9 19:26:51 UTC 2024
l/libjpeg-turbo-3.0.3-x86_64-1.txz: Upgraded.
l/nodejs-20.13.1-x86_64-1.txz: Upgraded.
l/pipewire-1.0.6-x86_64-1.txz: Upgraded.
n/php-8.3.7-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.3.7
n/wireless-regdb-2024.05.08-x86_64-1.txz: Upgraded.
extra/bash-completion/bash-completion-2.14.0-noarch-1.txz: Upgraded.
|
||
|
Patrick J Volkerding
|
ff95264870 |
Fri Apr 26 20:12:32 UTC 2024
a/kernel-firmware-20240426_fc21f47-noarch-1.txz: Upgraded. ap/cups-2.4.7-x86_64-3.txz: Rebuilt. Rebuild using --with-rundir=/run/cups. ap/cups-browsed-2.0.0-x86_64-1.txz: Added. This is the CUPS/IPP print queue browser daemon, previously part of the cups-filters package. ap/cups-filters-2.0.0-x86_64-1.txz: Upgraded. l/libarchive-3.7.4-x86_64-1.txz: Upgraded. l/libcupsfilters-2.0.0-x86_64-1.txz: Added. This is required by cups-filters-2.0.0. l/libppd-2.0.0-x86_64-1.txz: Added. This is required by cups-filters-2.0.0. l/libproxy-0.5.6-x86_64-1.txz: Upgraded. x/wayland-protocols-1.36-noarch-1.txz: Upgraded. xap/mozilla-firefox-125.0.2-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-125.0-x86_64-1.txz: Upgraded. extra/rust-for-mozilla/rust-1.70.0-x86_64-4.txz: Removed. |
||
|
Patrick J Volkerding
|
388220eab9 |
Tue Apr 23 19:48:05 UTC 2024
a/ed-1.20.2-x86_64-1.txz: Upgraded. d/parallel-20240422-noarch-1.txz: Upgraded. kde/krusader-2.8.1-x86_64-1.txz: Upgraded. kde/ktextaddons-1.5.4-x86_64-1.txz: Upgraded. l/libgusb-0.4.9-x86_64-1.txz: Upgraded. n/nmap-7.95-x86_64-1.txz: Upgraded. x/fcitx5-5.1.9-x86_64-1.txz: Upgraded. x/fcitx5-anthy-5.1.4-x86_64-1.txz: Upgraded. x/fcitx5-chinese-addons-5.1.5-x86_64-1.txz: Upgraded. x/fcitx5-gtk-5.1.3-x86_64-1.txz: Upgraded. x/fcitx5-hangul-5.1.3-x86_64-1.txz: Upgraded. x/fcitx5-kkc-5.1.3-x86_64-1.txz: Upgraded. x/fcitx5-m17n-5.1.1-x86_64-1.txz: Upgraded. x/fcitx5-qt-5.1.6-x86_64-1.txz: Upgraded. x/fcitx5-sayura-5.1.2-x86_64-1.txz: Upgraded. x/fcitx5-table-extra-5.1.5-x86_64-1.txz: Upgraded. x/fcitx5-table-other-5.1.2-x86_64-1.txz: Upgraded. x/fcitx5-unikey-5.1.4-x86_64-1.txz: Upgraded. x/libime-1.1.7-x86_64-1.txz: Upgraded. extra/emacs-regular-build/emacs-29.3-x86_64-2_regular.txz: Rebuilt. This is a bugfix release. Only build the X11/GTK+3 version. Use "emacs -nw" if you want to start it in a terminal emulator in text mode, or rebuild if you really need to get rid of the X11 dependency for some reason. Build using --with-pdumper=auto. It seems that --with-dumping=unexec produces a buggy Emacs here in the modern era, with symptoms such as "child signal FD: Invalid argument". It's possible this had something to do with the reported memory leaks as well. Thanks to 3Tom for the bug report. |
||
|
Patrick J Volkerding
|
ff9f5e9d28 |
Sat Apr 6 17:19:58 UTC 2024
a/pciutils-3.12.0-x86_64-1.txz: Upgraded. l/pygobject-2.28.7-x86_64-10.txz: Rebuilt. Build with PYTHON=python2 so that we don't have a call to unversioned python in pygobject-codegen-2.0. Fixes building gimp from git. Thanks to Petri Kaukasoina. l/pygobject3-3.48.2-x86_64-1.txz: Upgraded. x/libX11-1.8.9-x86_64-1.txz: Upgraded. x/mtdev-1.1.7-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
f603ff80a7 |
Fri Apr 5 20:11:23 UTC 2024
a/etc-15.1-x86_64-10.txz: Rebuilt.
Added nut user (218) and nut group (218).
a/genpower-1.0.5-x86_64-5.txz: Removed.
a/nut-2.8.2-x86_64-1.txz: Added.
This is a package to support uninterruptible power supplies, and replaces
the obsolete genpower package.
Thanks to V'yacheslav Stetskevych for the original SBo script.
a/sysvinit-scripts-15.1-noarch-16.txz: Rebuilt.
rc.M: start the NUT init scripts rc.nut-drvctl, rc.nut-upsd, and
rc.nut-upsmon. Remove the genpower block.
rc.6: support stopping the UPS inverter on the way down if we see
/etc/killpower. Remove the genpower block.
a/tcsh-6.24.12-x86_64-1.txz: Upgraded.
ap/man-db-2.12.1-x86_64-1.txz: Upgraded.
ap/mpg123-1.32.6-x86_64-1.txz: Upgraded.
ap/vim-9.1.0265-x86_64-1.txz: Upgraded.
d/cargo-vendor-filterer-0.5.14-x86_64-1.txz: Upgraded.
d/nasm-2.16.02-x86_64-1.txz: Upgraded.
l/libproxy-0.5.5-x86_64-1.txz: Upgraded.
l/python-hatchling-1.22.5-x86_64-1.txz: Upgraded.
l/python-typing_extensions-4.11.0-x86_64-1.txz: Upgraded.
x/xdm-1.1.16-x86_64-1.txz: Upgraded.
xap/vim-gvim-9.1.0265-x86_64-1.txz: Upgraded.
extra/bash-completion/bash-completion-2.13.0-noarch-1.txz: Upgraded.
extra/tigervnc/tigervnc-1.13.1-x86_64-5.txz: Rebuilt.
Recompiled against xorg-server-21.1.12 to fix security issues:
Heap buffer overread/data leakage in ProcXIGetSelectedEvents.
Heap buffer overread/data leakage in ProcXIPassiveGrabDevice.
Heap buffer overread/data leakage in ProcAppleDRICreatePixmap.
Use-after-free in ProcRenderAddGlyphs.
For more information, see:
https://lists.x.org/archives/xorg-announce/2024-April/003497.html
https://www.cve.org/CVERecord?id=CVE-2024-31080
https://www.cve.org/CVERecord?id=CVE-2024-31081
https://www.cve.org/CVERecord?id=CVE-2024-31082
https://www.cve.org/CVERecord?id=CVE-2024-31083
(* Security fix *)
|
||
|
Patrick J Volkerding
|
730cbea730 |
Sat Mar 30 18:08:12 UTC 2024
a/xz-5.6.1-x86_64-3.txz: Rebuilt. [PATCH] CMake: Fix sabotaged Landlock sandbox check. We don't build with CMake (yet), but it doesn't hurt to apply this. d/mercurial-6.7.2-x86_64-1.txz: Upgraded. l/boost-1.84.0-x86_64-3.txz: Rebuilt. Recompiled against python-3.11.8. Thanks to rinza. l/python-pycparser-2.22-x86_64-1.txz: Upgraded. l/python-pytz-2024.1-x86_64-2.txz: Removed. No longer needed with python-3.11. Thanks to audriusk. l/python-tomli-2.0.1-x86_64-2.txz: Removed. No longer needed with python-3.11. Thanks to TommyC7 and audriusk. n/c-ares-1.28.0-x86_64-1.txz: Upgraded. xap/xsnow-3.7.9-x86_64-1.txz: Upgraded. extra/brltty/brltty-6.6-x86_64-4.txz: Rebuilt. Don't install anything under /usr/local. Thanks to reddog83. |
||
|
Patrick J Volkerding
|
44183f6ba3 |
Fri Mar 29 20:39:11 UTC 2024
Everything in this batch besides aaa_libraries, xz, mcelog, and harfbuzz is a
rebuild or upgrade to build against python-3.11.8. Looking at the python
readiness page, it seems like a lot of stuff we use is not certified for
python-3.12 yet (although to be fair, about half as much isn't certified for
python-3.11 either). But 3.11 seems to be the safer choice even though the
final bugfix update is scheduled for Monday. And, if we do decide to move
ahead to 3.12 later on, it'll be a lot easier than this update was.
Enjoy! :-)
a/aaa_libraries-15.1-x86_64-29.txz: Rebuilt.
Upgraded: libzstd.so.1.5.6, libexpat.so.1.9.2, libglib-2.0.so.0.8000.0,
libgmodule-2.0.so.0.8000.0, libgobject-2.0.so.0.8000.0,
libgthread-2.0.so.0.8000.0.
Removed: libboost_*.so.1.83.0.
a/libblockdev-2.28-x86_64-3.txz: Rebuilt.
a/libbytesize-2.8-x86_64-2.txz: Rebuilt.
a/libpwquality-1.4.5-x86_64-2.txz: Rebuilt.
a/mcelog-198-x86_64-1.txz: Upgraded.
a/util-linux-2.40-x86_64-2.txz: Rebuilt.
a/volume_key-0.3.12-x86_64-8.txz: Rebuilt.
a/xz-5.6.1-x86_64-2.txz: Rebuilt.
Seems like a good idea to build this from a git pull rather than the signed
release tarballs. :-)
The liblzma in the previous packages were not found to be vulnerable by the
detection script, but I'd rather not carry the bad m4 files in our sources.
Here's a test script for anyone wanting to try it:
if hexdump -ve '1/1 "%.2x"' /lib*/liblzma.so.5 | grep -q f30f1efa554889f54c89ce5389fb81e7000000804883ec28488954241848894c2410 ; then
echo probably vulnerable
else
echo probably not vulnerable
fi
ap/hplip-3.23.12-x86_64-3.txz: Rebuilt.
ap/linuxdoc-tools-0.9.82-x86_64-5.txz: Rebuilt.
ap/rpm-4.19.1.1-x86_64-2.txz: Rebuilt.
ap/undervolt-20210815_e39aea1-x86_64-3.txz: Rebuilt.
ap/vim-9.1.0225-x86_64-1.txz: Upgraded.
d/Cython-3.0.9-x86_64-2.txz: Rebuilt.
d/distcc-3.4-x86_64-5.txz: Rebuilt.
d/gdb-14.2-x86_64-2.txz: Rebuilt.
d/gyp-20210831_d6c5dd51-x86_64-3.txz: Rebuilt.
d/llvm-18.1.2-x86_64-2.txz: Rebuilt.
d/mercurial-6.7.1-x86_64-2.txz: Rebuilt.
d/meson-1.4.0-x86_64-2.txz: Rebuilt.
d/python-pip-24.0-x86_64-2.txz: Rebuilt.
d/python-setuptools-69.2.0-x86_64-2.txz: Rebuilt.
d/python3-3.11.8-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
d/scons-4.7.0-x86_64-2.txz: Rebuilt.
kde/cantor-23.08.5-x86_64-4.txz: Rebuilt.
kde/kapidox-5.115.0-x86_64-2.txz: Rebuilt.
kde/kdev-python-23.08.5-x86_64-2.txz: Rebuilt.
kde/kig-23.08.5-x86_64-2.txz: Rebuilt.
kde/kmymoney-5.1.3-x86_64-4.txz: Rebuilt.
kde/kopeninghours-23.08.5-x86_64-2.txz: Rebuilt.
kde/krita-5.2.2-x86_64-6.txz: Rebuilt.
l/M2Crypto-0.41.0-x86_64-2.txz: Rebuilt.
l/Mako-1.3.2-x86_64-2.txz: Rebuilt.
l/PyQt-builder-1.15.4-x86_64-2.txz: Rebuilt.
l/PyQt5-5.15.10-x86_64-2.txz: Rebuilt.
l/PyQt5_sip-12.13.0-x86_64-2.txz: Rebuilt.
l/QScintilla-2.14.1-x86_64-3.txz: Rebuilt.
l/avahi-20240306_709e60f-x86_64-2.txz: Rebuilt.
l/brotli-1.1.0-x86_64-2.txz: Rebuilt.
l/dbus-python-1.3.2-x86_64-2.txz: Rebuilt.
l/gexiv2-0.14.2-x86_64-3.txz: Rebuilt.
l/gi-docgen-2023.3-x86_64-2.txz: Rebuilt.
l/glade-3.40.0-x86_64-2.txz: Rebuilt.
l/gobject-introspection-1.80.0-x86_64-2.txz: Rebuilt.
l/harfbuzz-8.4.0-x86_64-1.txz: Upgraded.
l/lensfun-0.3.4-x86_64-2.txz: Rebuilt.
l/libcaca-0.99.beta20-x86_64-2.txz: Rebuilt.
l/libcap-ng-0.8.4-x86_64-2.txz: Rebuilt.
l/libieee1284-0.2.11-x86_64-8.txz: Rebuilt.
l/libimobiledevice-20231007_04c0233-x86_64-2.txz: Rebuilt.
l/libnvme-1.8-x86_64-2.txz: Rebuilt.
l/libplist-2.4.0-x86_64-2.txz: Rebuilt.
l/libwebp-1.3.2-x86_64-3.txz: Rebuilt.
l/libxml2-2.12.6-x86_64-3.txz: Rebuilt.
l/libxslt-1.1.39-x86_64-2.txz: Rebuilt.
l/newt-0.52.24-x86_64-3.txz: Rebuilt.
l/protobuf-26.1-x86_64-2.txz: Rebuilt.
l/pycairo-1.26.0-x86_64-3.txz: Rebuilt.
l/pycups-2.0.1-x86_64-7.txz: Rebuilt.
l/pycurl-7.45.3-x86_64-2.txz: Rebuilt.
l/pygobject3-3.48.1-x86_64-2.txz: Rebuilt.
l/pyparsing-3.1.2-x86_64-2.txz: Rebuilt.
l/python-Jinja2-3.1.3-x86_64-2.txz: Rebuilt.
l/python-MarkupSafe-2.1.5-x86_64-2.txz: Rebuilt.
l/python-PyYAML-6.0.1-x86_64-3.txz: Rebuilt.
l/python-alabaster-0.7.16-x86_64-2.txz: Rebuilt.
l/python-appdirs-1.4.4-x86_64-7.txz: Rebuilt.
l/python-babel-2.14.0-x86_64-2.txz: Rebuilt.
l/python-build-1.2.1-x86_64-2.txz: Rebuilt.
l/python-calver-2022.6.26-x86_64-2.txz: Rebuilt.
l/python-certifi-2024.2.2-x86_64-2.txz: Rebuilt.
l/python-cffi-1.16.0-x86_64-2.txz: Rebuilt.
l/python-chardet-5.2.0-x86_64-2.txz: Rebuilt.
l/python-charset-normalizer-3.3.2-x86_64-2.txz: Rebuilt.
l/python-distro-1.9.0-x86_64-2.txz: Rebuilt.
l/python-dnspython-2.6.1-x86_64-2.txz: Rebuilt.
l/python-docutils-0.20.1-x86_64-2.txz: Rebuilt.
l/python-doxypypy-0.8.8.7-x86_64-2.txz: Rebuilt.
l/python-doxyqml-0.5.3-x86_64-2.txz: Rebuilt.
l/python-editables-0.5-x86_64-2.txz: Rebuilt.
l/python-flit-core-3.9.0-x86_64-2.txz: Rebuilt.
l/python-future-1.0.0-x86_64-2.txz: Rebuilt.
l/python-glad2-2.0.6-x86_64-2.txz: Rebuilt.
l/python-hatchling-1.22.4-x86_64-2.txz: Rebuilt.
l/python-html5lib-1.1-x86_64-2.txz: Rebuilt.
l/python-idna-3.6-x86_64-2.txz: Rebuilt.
l/python-imagesize-1.4.1-x86_64-2.txz: Rebuilt.
l/python-importlib_metadata-7.1.0-x86_64-2.txz: Rebuilt.
l/python-installer-0.7.0-x86_64-2.txz: Rebuilt.
l/python-lxml-5.1.1-x86_64-1.txz: Upgraded.
l/python-markdown-3.6-x86_64-2.txz: Rebuilt.
l/python-notify2-0.3.1-x86_64-11.txz: Rebuilt.
l/python-packaging-24.0-x86_64-2.txz: Rebuilt.
l/python-pathspec-0.12.1-x86_64-2.txz: Rebuilt.
l/python-pbr-6.0.0-x86_64-2.txz: Rebuilt.
l/python-pillow-10.2.0-x86_64-2.txz: Rebuilt.
l/python-pluggy-1.4.0-x86_64-2.txz: Rebuilt.
l/python-ply-3.11-x86_64-9.txz: Rebuilt.
l/python-psutil-5.9.8-x86_64-2.txz: Rebuilt.
l/python-pycparser-2.21-x86_64-2.txz: Rebuilt.
l/python-pygments-2.17.2-x86_64-2.txz: Rebuilt.
l/python-pyproject-hooks-1.0.0-x86_64-2.txz: Rebuilt.
l/python-pysol_cards-0.16.0-x86_64-2.txz: Rebuilt.
l/python-pytz-2024.1-x86_64-2.txz: Rebuilt.
l/python-random2-1.0.2-x86_64-2.txz: Rebuilt.
l/python-requests-2.31.0-x86_64-2.txz: Rebuilt.
l/python-sane-2.9.1-x86_64-6.txz: Rebuilt.
l/python-setuptools_scm-8.0.4-x86_64-2.txz: Rebuilt.
l/python-six-1.16.0-x86_64-4.txz: Rebuilt.
l/python-smartypants-2.0.1-x86_64-2.txz: Rebuilt.
l/python-snowballstemmer-2.2.0-x86_64-2.txz: Rebuilt.
l/python-sphinx-7.2.6-x86_64-2.txz: Rebuilt.
l/python-sphinx_rtd_theme-2.0.0-x86_64-2.txz: Rebuilt.
l/python-tomli-2.0.1-x86_64-2.txz: Rebuilt.
l/python-tomli-w-1.0.0-x86_64-2.txz: Rebuilt.
l/python-trove-classifiers-2024.3.25-x86_64-2.txz: Rebuilt.
l/python-typing_extensions-4.10.0-x86_64-2.txz: Rebuilt.
l/python-typogrify-2.0.7-x86_64-2.txz: Rebuilt.
l/python-urllib3-2.2.1-x86_64-2.txz: Rebuilt.
l/python-webencodings-0.5.1-x86_64-2.txz: Rebuilt.
l/python-wheel-0.43.0-x86_64-2.txz: Rebuilt.
l/python-zipp-3.18.1-x86_64-2.txz: Rebuilt.
l/sip-6.8.3-x86_64-2.txz: Rebuilt.
l/speech-dispatcher-0.11.5-x86_64-2.txz: Rebuilt.
l/system-config-printer-1.5.18-x86_64-2.txz: Rebuilt.
l/talloc-2.4.2-x86_64-2.txz: Rebuilt.
l/tdb-1.4.10-x86_64-2.txz: Rebuilt.
l/tevent-0.16.1-x86_64-2.txz: Rebuilt.
n/epic5-2.1.12-x86_64-7.txz: Rebuilt.
n/fetchmail-6.4.38-x86_64-2.txz: Rebuilt.
n/getmail-6.18.14-x86_64-2.txz: Rebuilt.
n/gpgme-1.23.2-x86_64-3.txz: Rebuilt.
n/net-snmp-5.9.4-x86_64-2.txz: Rebuilt.
n/nftables-1.0.9-x86_64-2.txz: Rebuilt.
n/nmap-7.94-x86_64-2.txz: Rebuilt.
n/nss-pam-ldapd-0.9.12-x86_64-4.txz: Rebuilt.
n/obexftp-0.24.2-x86_64-12.txz: Rebuilt.
n/pssh-2.3.5-x86_64-2.txz: Rebuilt.
n/samba-4.20.0-x86_64-2.txz: Rebuilt.
x/ibus-1.5.29-x86_64-3.txz: Rebuilt.
x/ibus-anthy-1.5.16-x86_64-2.txz: Rebuilt.
x/ibus-hangul-1.5.5-x86_64-2.txz: Rebuilt.
x/ibus-libpinyin-1.15.7-x86_64-2.txz: Rebuilt.
x/ibus-table-1.17.4-x86_64-2.txz: Rebuilt.
x/marisa-0.2.6-x86_64-9.txz: Rebuilt.
x/pyxdg-0.28-x86_64-2.txz: Rebuilt.
x/xcb-proto-1.16.0-x86_64-3.txz: Rebuilt.
xap/blueman-2.3.5-x86_64-2.txz: Rebuilt.
xap/hexchat-2.16.2-x86_64-2.txz: Rebuilt.
xap/vim-gvim-9.1.0225-x86_64-1.txz: Upgraded.
extra/brltty/brltty-6.6-x86_64-3.txz: Rebuilt.
|
||
|
Patrick J Volkerding
|
6a20480259 |
Fri Feb 23 02:27:35 UTC 2024
a/aaa_libraries-15.1-x86_64-26.txz: Rebuilt. Upgraded: libacl.so.1.1.2302, libattr.so.1.1.2502, liblzma.so.5.4.6, libpcre2-8.so.0.12.0, libz.so.1.3.1, libcares.so.2.11.0, libexpat.so.1.9.0, libffi.so.8.1.4, libglib-2.0.so.0.7800.4, libgmodule-2.0.so.0.7800.4, libgobject-2.0.so.0.7800.4, libgthread-2.0.so.0.7800.4, libidn.so.12.6.5, libidn2.so.0.4.0, libpng16.so.16.41.0, libpsl.so.5.3.5, libtdb.so.1.4.10, libusb-1.0.so.0.4.0. a/etc-15.1-x86_64-5.txz: Rebuilt. Added UID 214 and GID 214 for avahi. a/gettext-0.22.5-x86_64-1.txz: Upgraded. a/pkgtools-15.1-noarch-9.txz: Rebuilt. setup.services: support rc.avahidaemon and rc.avahidnsconfd. a/sysvinit-scripts-15.1-noarch-13.txz: Rebuilt. rc.M: start (if executable) rc.avahidaemon and rc.avahidnsconfd. ap/cups-2.4.7-x86_64-2.txz: Rebuilt. Recompiled against avahi. ap/cups-filters-1.28.17-x86_64-4.txz: Rebuilt. Recompiled against avahi. ap/hplip-3.23.12-x86_64-1.txz: Upgraded. Compiled against avahi. ap/xmltoman-0.6-x86_64-1.txz: Added. This is needed to generate manpages for avahi. d/distcc-3.4-x86_64-4.txz: Rebuilt. Recompiled against avahi. d/gettext-tools-0.22.5-x86_64-1.txz: Upgraded. l/avahi-20240220_dffd549-x86_64-1.txz: Added. It was either this, or drop (or fork) hplip. We'll enjoy it in the long run. Thanks to David Somero for the original build script, and to Robby Workman for years of maintenance. Signed-off-by: volkerdi Acked-by: alienBOB l/libdaemon-0.14-x86_64-1.txz: Added. This is needed by avahi. l/pipewire-1.0.3-x86_64-5.txz: Rebuilt. Recompiled against avahi. l/pulseaudio-17.0-x86_64-3.txz: Rebuilt. Recompiled against avahi. n/NetworkManager-1.46.0-x86_64-1.txz: Upgraded. n/netatalk-3.1.18-x86_64-2.txz: Rebuilt. Recompiled against avahi. n/samba-4.19.5-x86_64-2.txz: Rebuilt. Recompiled against avahi. xap/pidgin-2.14.12-x86_64-3.txz: Rebuilt. Recompiled against avahi. xap/sane-1.2.1-x86_64-3.txz: Rebuilt. Recompiled against avahi. extra/bash-completion/bash-completion-2.12.0-noarch-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
32009082ed |
Wed Feb 14 22:46:52 UTC 2024
a/btrfs-progs-6.7.1-x86_64-1.txz: Upgraded. a/ed-1.20.1-x86_64-1.txz: Upgraded. a/shadow-4.14.5-x86_64-1.txz: Upgraded. d/git-2.43.2-x86_64-1.txz: Upgraded. d/meson-1.3.2-x86_64-1.txz: Upgraded. d/tree-sitter-0.20.9-x86_64-1.txz: Upgraded. e/emacs-29.2-x86_64-2.txz: Rebuilt. Compiled with support for pdumper and native compilation. The emacs-no-x11 binary has been dropped from the package because when pdumper is used the support files need to be matched to a specific binary. If you need a non-X console version of Emacs (or just want to reduce the footprint) a traditional build is available in /extra. Thanks to drgibbon who requested this long ago. :-) Thanks to Didier Spaier for the sample build script. l/libnvme-1.8-x86_64-1.txz: Upgraded. xap/xlockmore-5.75-x86_64-1.txz: Upgraded. extra/emacs-regular-build/emacs-29.2-x86_64-2_regular.txz: Added. A "regular" build of Emacs like was previously in the main tree, with a version supporting X11/GTK+3, and a non-X console version. |
||
|
Patrick J Volkerding
|
adcf8dd382 |
Mon Feb 12 20:58:46 UTC 2024
a/procps-ng-4.0.4-x86_64-1.txz: Upgraded. a/shadow-4.14.4-x86_64-1.txz: Upgraded. ap/man-pages-6.06-noarch-1.txz: Upgraded. ap/vim-9.1.0098-x86_64-1.txz: Upgraded. d/libgccjit-13.2.0-x86_64-1.txz: Added. If we can ship GCC's D and Modula-2 support, then we can ship this. We'll probably find a use for it. ;-) Thanks to Didier Spaier for hints on the build script. d/mercurial-6.6.3-x86_64-1.txz: Upgraded. d/rust-1.76.0-x86_64-1.txz: Upgraded. l/gegl-0.4.48-x86_64-1.txz: Upgraded. l/openexr-3.2.2-x86_64-1.txz: Upgraded. l/pango-1.51.2-x86_64-1.txz: Upgraded. l/python-calver-2022.6.26-x86_64-1.txz: Added. Needed for python-trove-classifiers. Thanks to lucabon. n/openvpn-2.6.9-x86_64-1.txz: Upgraded. xap/vim-gvim-9.1.0098-x86_64-1.txz: Upgraded. extra/rust-for-mozilla/rust-1.70.0-x86_64-4.txz: Added. Let's move this here since it's lagging behind the latest Rust. |
||
|
Patrick J Volkerding
|
f75fcd750e |
Wed Jan 31 21:19:19 UTC 2024
ap/nvme-cli-2.7.1-x86_64-1.txz: Upgraded.
l/libnvme-1.7.1-x86_64-1.txz: Added.
This is required by nvme-cli.
l/pipewire-1.0.2-x86_64-1.txz: Upgraded.
n/curl-8.6.0-x86_64-1.txz: Upgraded.
n/libmilter-8.18.1-x86_64-1.txz: Upgraded.
extra/sendmail/sendmail-8.18.1-x86_64-1.txz: Upgraded.
sendmail through 8.17.2 allows SMTP smuggling in certain configurations.
Remote attackers can use a published exploitation technique to inject e-mail
messages with a spoofed MAIL FROM address, allowing bypass of an SPF
protection mechanism. This occurs because sendmail supports <LF>.<CR><LF>
but some other popular e-mail servers do not. This is resolved in 8.18 and
later versions with 'o' in srv_features.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-51765
(* Security fix *)
extra/sendmail/sendmail-cf-8.18.1-noarch-1.txz: Upgraded.
|
||
|
Patrick J Volkerding
|
8713bd99bf |
Mon Jan 29 19:17:30 UTC 2024
ap/diffstat-1.66-x86_64-1.txz: Upgraded. ap/moc-2.6_alpha3-x86_64-3.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. ap/vim-9.1.0061-x86_64-1.txz: Upgraded. d/nv-codec-headers-12.1.14.0-x86_64-1.txz: Added. Needed to build support for nvidia hardware decoders/encoders on newer GPUs. gst-plugins-bad can use it too. Thanks to Heinz Wiesinger. kde/digikam-8.2.0-x86_64-4.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. kde/ffmpegthumbs-23.08.4-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. kde/k3b-23.08.4-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. kde/kfilemetadata-5.114.0-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. kde/kpipewire-5.27.10-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. l/Imath-3.1.10-x86_64-1.txz: Upgraded. l/alsa-plugins-1.2.7.1-x86_64-3.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. l/ffmpeg-6.1.1-x86_64-1.txz: Upgraded. Shared library .so-version bump. Added some new build options in the SlackBuild. Use shaderc instead of glslang. Build against libgcrypt to enable support for RTMP[E]. Enable support for lcms2. Build against libass, libplacebo, and nv-codec-headers. Thanks to Heinz Wiesinger. l/gegl-0.4.46-x86_64-4.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. l/gst-plugins-bad-free-1.22.9-x86_64-2.txz: Rebuilt. Recompiled against libass-0.17.1. l/gst-plugins-libav-1.22.9-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. l/libass-0.17.1-x86_64-1.txz: Added. Adds ASS/SSA subtitle renderer (commonly used in the anime community). adapted SlackBuild from SBo, original by Larry Hajali/Matteo Bernardini. MPlayer and gst-plugins-bad can use it too. Thanks to Heinz Wiesinger. l/libplacebo-6.338.2-x86_64-1.txz: Added. Adds various hardware accelerated filters such as HDR -> SDR tone mapping. adapted SlackBuild from SBo, original by Hunter Sezen/Christoph Willing. Thanks to Heinz Wiesinger. l/mlt-7.22.0-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. l/netpbm-11.05.02-x86_64-1.txz: Upgraded. l/opencv-4.9.0-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. l/pipewire-1.0.1-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. l/qt5-5.15.12_20240103_b8fd1448-x86_64-3.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. x/pixman-0.43.2-x86_64-1.txz: Upgraded. xap/MPlayer-20240127-x86_64-1.txz: Upgraded. Compiled against ffmpeg-6.1.1 and libass-0.17.1. xap/audacious-plugins-4.3.1-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. xap/ffmpegthumbnailer-2.2.2-x86_64-5.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. xap/freerdp-2.11.5-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. xap/ssr-0.4.4-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. xap/vim-gvim-9.1.0061-x86_64-1.txz: Upgraded. xap/xine-lib-1.2.13-x86_64-6.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. xap/xscreensaver-6.08-x86_64-2.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. extra/tigervnc/tigervnc-1.13.1-x86_64-4.txz: Rebuilt. Recompiled against ffmpeg-6.1.1. |
||
|
Patrick J Volkerding
|
c705d52caf |
Sun Jan 21 20:50:08 UTC 2024
a/ed-1.20-x86_64-1.txz: Upgraded.
l/SDL2_ttf-2.22.0-x86_64-1.txz: Upgraded.
l/imagemagick-7.1.1_27-x86_64-1.txz: Upgraded.
l/libproxy-0.5.3-x86_64-1.txz: Upgraded.
n/nghttp2-1.59.0-x86_64-1.txz: Upgraded.
x/xbiff-1.0.5-x86_64-1.txz: Upgraded.
extra/tigervnc/tigervnc-1.13.1-x86_64-3.txz: Rebuilt.
Recompiled against xorg-server-21.1.11, including the latest patches for
several security issues. Thanks to marav.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-6377
https://www.cve.org/CVERecord?id=CVE-2023-6478
https://www.cve.org/CVERecord?id=CVE-2023-6816
https://www.cve.org/CVERecord?id=CVE-2024-0229
https://www.cve.org/CVERecord?id=CVE-2024-0408
https://www.cve.org/CVERecord?id=CVE-2024-0409
https://www.cve.org/CVERecord?id=CVE-2024-21885
https://www.cve.org/CVERecord?id=CVE-2024-21886
https://www.cve.org/CVERecord?id=CVE-2024-21886
(* Security fix *)
|
||
|
Patrick J Volkerding
|
ad1b1833ef |
Tue Dec 12 19:54:42 UTC 2023
a/aaa_libraries-15.1-x86_64-24.txz: Rebuilt.
Upgraded: libglib-2.0.so.0.7800.3, libgmodule-2.0.so.0.7800.3,
libgobject-2.0.so.0.7800.3, libgthread-2.0.so.0.7800.3.
Removed: libicudata.so.73.2, libicui18n.so.73.2, libicuio.so.73.2,
libicutest.so.73.2, libicutu.so.73.2, libicuuc.so.73.2.
ap/rpm-4.19.1-x86_64-1.txz: Upgraded.
l/frei0r-plugins-2.3.2-x86_64-1.txz: Upgraded.
l/icu4c-74.2-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-115.5.2-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/115.5.2/releasenotes/
xap/x3270-4.3ga4-x86_64-1.txz: Upgraded.
extra/brltty/brltty-6.6-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-74.2.
|
||
|
Patrick J Volkerding
|
6fde7400bc |
Mon Nov 13 19:20:40 UTC 2023
d/vala-0.56.14-x86_64-1.txz: Upgraded.
l/gst-plugins-bad-free-1.22.7-x86_64-1.txz: Upgraded.
l/gst-plugins-base-1.22.7-x86_64-1.txz: Upgraded.
l/gst-plugins-good-1.22.7-x86_64-1.txz: Upgraded.
l/gst-plugins-libav-1.22.7-x86_64-1.txz: Upgraded.
l/gstreamer-1.22.7-x86_64-1.txz: Upgraded.
l/pango-1.51.1-x86_64-1.txz: Upgraded.
x/egl-wayland-1.1.13-x86_64-2.txz: Rebuilt.
Install the NVidia ICD file. Thanks to marav.
extra/tigervnc/tigervnc-1.13.1-x86_64-2.txz: Rebuilt.
Recompiled against xorg-server-21.1.9, which addresses some security issues.
Thanks to marav.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-5367
https://www.cve.org/CVERecord?id=CVE-2023-5380
https://www.cve.org/CVERecord?id=CVE-2023-1393
(* Security fix *)
|
||
|
Patrick J Volkerding
|
9ac78ad2f6 |
Fri Nov 3 23:47:27 UTC 2023
a/btrfs-progs-6.6-x86_64-1.txz: Upgraded. a/hwdata-0.376-noarch-1.txz: Upgraded. l/elfutils-0.190-x86_64-1.txz: Upgraded. xfce/elementary-xfce-0.18-x86_64-2.txz: Rebuilt. Eliminate dangling symlinks. Thanks to marav. extra/sendmail/sendmail-8.17.2-x86_64-3.txz: Rebuilt. Recompiled against icu4c-74.1. Thanks to HQuest. extra/sendmail/sendmail-cf-8.17.2-noarch-3.txz: Rebuilt. |
||
|
Patrick J Volkerding
|
9191658382 |
Mon Sep 18 18:40:04 UTC 2023
a/sysklogd-2.5.2-x86_64-1.txz: Upgraded.
d/cargo-vendor-filterer-0.5.11-x86_64-1.txz: Upgraded.
l/adwaita-icon-theme-45.0-noarch-1.txz: Upgraded.
l/gsettings-desktop-schemas-45.0-x86_64-1.txz: Upgraded.
l/imagemagick-7.1.1_16-x86_64-1.txz: Upgraded.
l/libdeflate-1.19-x86_64-1.txz: Upgraded.
l/libqalculate-4.8.1-x86_64-1.txz: Upgraded.
l/vte-0.74.0-x86_64-1.txz: Upgraded.
n/netatalk-3.1.17-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
Validate data type in dalloc_value_for_key(). This flaw could allow a
malicious actor to cause Netatalk's afpd daemon to crash, or possibly to
execute arbitrary code.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-42464
(* Security fix *)
|
||
|
Patrick J Volkerding
|
84730d7aba |
Mon Jul 24 19:26:18 UTC 2023
ap/tmux-3.3a-x86_64-2.txz: Rebuilt. Patched to fix a crash when copying text. Thanks to nullptr, gnw, and Daedra. d/parallel-20230722-noarch-1.txz: Upgraded. l/libarchive-3.7.0-x86_64-1.txz: Upgraded. l/pipewire-0.3.75-x86_64-2.txz: Rebuilt. [PATCH] pipewire: add missing stdbool.h include to version.h.in. Thanks to marav. n/network-scripts-15.1-noarch-1.txz: Upgraded. Added netconfig.8 manpage. Thanks to metaed. extra/brltty/brltty-6.6-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
600ffa097b |
Wed Jul 12 20:41:16 UTC 2023
ap/inxi-3.3.28_1-noarch-1.txz: Upgraded.
ap/sudo-1.9.14p1-x86_64-1.txz: Upgraded.
d/rust-1.70.0-x86_64-1.txz: Upgraded.
l/harfbuzz-8.0.1-x86_64-1.txz: Upgraded.
l/lmdb-0.9.31-x86_64-1.txz: Upgraded.
l/pipewire-0.3.74-x86_64-1.txz: Upgraded.
n/krb5-1.21.1-x86_64-1.txz: Upgraded.
Fix potential uninitialized pointer free in kadm5 XDR parsing.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-36054
(* Security fix *)
n/libnftnl-1.2.6-x86_64-1.txz: Upgraded.
n/nghttp2-1.55.0-x86_64-1.txz: Upgraded.
n/openldap-2.6.5-x86_64-1.txz: Upgraded.
x/ibus-table-1.17.1-x86_64-1.txz: Upgraded.
x/xterm-384-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-115.0.2esr-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/115.0.2esr/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2023-26/
https://www.cve.org/CVERecord?id=CVE-2023-3600
(* Security fix *)
testing/packages/mozilla-thunderbird-115.0-x86_64-1.txz: Added.
|
||
|
Patrick J Volkerding
|
e4cf5f582a |
Tue Jun 6 20:26:59 UTC 2023
a/kernel-firmware-20230531_fc90c59-noarch-1.txz: Upgraded.
a/kernel-generic-6.1.32-x86_64-1.txz: Upgraded.
a/kernel-huge-6.1.32-x86_64-1.txz: Upgraded.
a/kernel-modules-6.1.32-x86_64-1.txz: Upgraded.
d/gcc-13.1.0-x86_64-2.txz: Rebuilt.
d/gcc-g++-13.1.0-x86_64-2.txz: Rebuilt.
d/gcc-gdc-13.1.0-x86_64-2.txz: Rebuilt.
d/gcc-gfortran-13.1.0-x86_64-2.txz: Rebuilt.
d/gcc-gm2-13.1.0-x86_64-2.txz: Added.
d/gcc-gnat-13.1.0-x86_64-2.txz: Rebuilt.
d/gcc-go-13.1.0-x86_64-2.txz: Rebuilt.
d/gcc-objc-13.1.0-x86_64-2.txz: Rebuilt.
d/kernel-headers-6.1.32-x86-1.txz: Upgraded.
d/libtool-2.4.7-x86_64-5.txz: Rebuilt.
Recompiled to update embedded GCC version number.
k/kernel-source-6.1.32-noarch-1.txz: Upgraded.
kde/calligra-3.2.1-x86_64-30.txz: Rebuilt.
Recompiled against poppler-23.06.0.
kde/cantor-23.04.1-x86_64-2.txz: Rebuilt.
Recompiled against poppler-23.06.0.
kde/kfilemetadata-5.106.0-x86_64-2.txz: Rebuilt.
Recompiled against poppler-23.06.0.
kde/kile-2.9.93-x86_64-25.txz: Rebuilt.
Recompiled against poppler-23.06.0.
kde/kitinerary-23.04.1-x86_64-2.txz: Rebuilt.
Recompiled against poppler-23.06.0.
kde/krita-5.1.5-x86_64-10.txz: Rebuilt.
Recompiled against poppler-23.06.0.
kde/okteta-0.26.11-x86_64-1.txz: Upgraded.
kde/okular-23.04.1-x86_64-2.txz: Rebuilt.
Recompiled against poppler-23.06.0.
l/enchant-2.5.0-x86_64-1.txz: Upgraded.
l/gtk4-4.10.4-x86_64-1.txz: Upgraded.
l/mozilla-nss-3.90-x86_64-1.txz: Upgraded.
l/openexr-3.1.8-x86_64-1.txz: Upgraded.
l/poppler-23.06.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/qtkeychain-0.14.1-x86_64-1.txz: Upgraded.
n/krb5-1.21-x86_64-1.txz: Upgraded.
n/ntp-4.2.8p17-x86_64-1.txz: Upgraded.
This is a bugfix release.
n/postfix-3.8.1-x86_64-1.txz: Upgraded.
x/xorg-server-xwayland-23.1.2-x86_64-1.txz: Upgraded.
x/xorgproto-2023.1-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-114.0-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/114.0/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2023-20/
https://www.cve.org/CVERecord?id=CVE-2023-34414
https://www.cve.org/CVERecord?id=CVE-2023-34415
https://www.cve.org/CVERecord?id=CVE-2023-34416
https://www.cve.org/CVERecord?id=CVE-2023-34417
(* Security fix *)
xfce/xfce4-panel-profiles-1.0.14-x86_64-1.txz: Upgraded.
extra/sendmail/sendmail-8.17.2-x86_64-2.txz: Rebuilt.
Recompiled without -DUSE_EAI or ICU libraries as this experimental option
is still leading to regressions.
extra/sendmail/sendmail-cf-8.17.2-noarch-2.txz: Rebuilt.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|
||
|
Patrick J Volkerding
|
cf35a7e0c8 |
Sun Jun 4 19:16:13 UTC 2023
l/ocl-icd-2.3.2-x86_64-1.txz: Upgraded. n/libmilter-8.17.2-x86_64-1.txz: Upgraded. x/egl-wayland-1.1.12-x86_64-1.txz: Upgraded. x/libdmx-1.1.5-x86_64-1.txz: Upgraded. x/xrdb-1.2.2-x86_64-1.txz: Upgraded. x/xscope-1.4.4-x86_64-1.txz: Upgraded. x/xtrans-1.5.0-noarch-1.txz: Upgraded. x/xwd-1.0.9-x86_64-1.txz: Upgraded. extra/sendmail/sendmail-8.17.2-x86_64-1.txz: Upgraded. This is a bugfix release. extra/sendmail/sendmail-cf-8.17.2-noarch-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
073715b120 |
Sun May 28 18:25:43 UTC 2023
l/at-spi2-core-2.48.3-x86_64-1.txz: Upgraded. extra/xv/xv-4.1.1-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
6b6caf66ba |
Tue Mar 21 21:18:59 UTC 2023
a/elilo-3.16-x86_64-15.txz: Rebuilt.
eliloconfig: drop support for old EFI vars interface.
Mount efivarfs on /sys/firmware/efi/efivars if we find that the directory
is empty.
d/indent-2.2.13-x86_64-1.txz: Upgraded.
d/scons-4.5.2-x86_64-1.txz: Upgraded.
x/libva-2.18.0-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-111.0.1-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/111.0.1/releasenotes/
xfce/xfce4-clipman-plugin-1.6.3-x86_64-1.txz: Upgraded.
extra/tigervnc/tigervnc-1.13.1-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
Make sure efivarfs is mounted on UEFI systems.
usb-and-pxe-installers/usbboot.img: Rebuilt.
Make sure efivarfs is mounted on UEFI systems.
|
||
|
Patrick J Volkerding
|
a240312484 |
Wed Mar 8 20:26:54 UTC 2023
Hey folks, just some more updates on the road to an eventual beta. :-)
At this point nothing remains linked with openssl-1.1.1 except for python2 and
modules, and vsftpd. I think nobody cares about trying to force python2 to use
openssl3... it's EOL but still a zombie, unfortunately. I have seen some
patches for vsftpd and intend to take a look at them. We've bumped PHP to 8.2
and just gone ahead and killed 8.0 and 8.1. Like 7.4, 8.0 is not compatible
with openssl3 and it doesn't seem worthwhile to try to patch it. And with 8.2
already out for several revisions, 8.1 does not seem particularly valuable.
If you make use of PHP you should be used to it being a moving target by now.
Enjoy, and let me know if anything isn't working right. Cheers!
a/aaa_libraries-15.1-x86_64-19.txz: Rebuilt.
Recompiled against openssl-3.0.8: libcups.so.2, libcurl.so.4.8.0,
libldap.so.2.0.200, libssh2.so.1.0.1.
a/cryptsetup-2.6.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
a/kmod-30-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
a/openssl-solibs-3.0.8-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
a/openssl11-solibs-1.1.1t-x86_64-1.txz: Added.
ap/cups-2.4.2-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
ap/hplip-3.20.5-x86_64-7.txz: Rebuilt.
Recompiled against openssl-3.0.8.
ap/lxc-4.0.12-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
ap/mariadb-10.6.12-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
ap/qpdf-11.3.0-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
ap/sudo-1.9.13p3-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/cargo-vendor-filterer-0.5.7-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/cvs-1.11.23-x86_64-9.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/git-2.39.2-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/perl-5.36.0-x86_64-5.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/python3-3.9.16-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/ruby-3.2.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/rust-1.66.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/scons-4.5.1-x86_64-1.txz: Upgraded.
kde/falkon-22.12.3-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
kde/kitinerary-22.12.3-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/M2Crypto-0.38.0-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/SDL2-2.26.4-x86_64-1.txz: Upgraded.
l/gst-plugins-bad-free-1.22.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/libarchive-3.6.2-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/libevent-2.1.12-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/libimobiledevice-20211124_2c6121d-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/libssh2-1.10.0-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/libvncserver-0.9.14-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/mlt-7.14.0-x86_64-1.txz: Upgraded.
l/neon-0.32.5-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/nodejs-19.7.0-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/opusfile-0.12-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/pipewire-0.3.66-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/pulseaudio-16.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/pycurl-7.44.1-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/qca-2.3.5-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/qt5-5.15.8_20230304_d8b881f0-x86_64-1.txz: Upgraded.
Compiled against openssl-3.0.8.
l/serf-1.3.9-x86_64-8.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/alpine-2.26-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/bind-9.18.12-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/curl-7.88.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/cyrus-sasl-2.1.28-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/dovecot-2.3.20-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/epic5-2.1.12-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/fetchmail-6.4.37-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/htdig-3.2.0b6-x86_64-9.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/httpd-2.4.56-x86_64-1.txz: Upgraded.
This update fixes two security issues:
HTTP Response Smuggling vulnerability via mod_proxy_uwsgi.
HTTP Request Smuggling attack via mod_rewrite and mod_proxy.
For more information, see:
https://downloads.apache.org/httpd/CHANGES_2.4.56
https://www.cve.org/CVERecord?id=CVE-2023-27522
https://www.cve.org/CVERecord?id=CVE-2023-25690
(* Security fix *)
NOTE: This package is compiled against openssl-3.0.8.
n/irssi-1.4.3-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/krb5-1.20.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/lftp-4.9.2-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/links-2.28-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/lynx-2.9.0dev.10-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/mutt-2.2.9-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/net-snmp-5.9.3-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/netatalk-3.1.14-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/nmap-7.93-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/ntp-4.2.8p15-x86_64-12.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/openldap-2.6.4-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/openssh-9.2p1-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/openssl-3.0.8-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
n/openssl11-1.1.1t-x86_64-1.txz: Added.
n/openvpn-2.6.0-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/php-8.2.3-x86_64-1.txz: Upgraded.
Compiled against openssl-3.0.8.
n/pidentd-3.0.19-x86_64-7.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/popa3d-1.0.3-x86_64-7.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/postfix-3.7.4-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/ppp-2.4.9-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/proftpd-1.3.8-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/rsync-3.2.7-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/s-nail-14.9.24-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/samba-4.18.0-x86_64-1.txz: Upgraded.
Build with the bundled Heimdal instead of the system MIT Kerberos.
Thanks again to rpenny.
n/slrn-1.0.3a-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/snownews-1.9-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/socat-1.7.4.4-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/stunnel-5.69-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/tcpdump-4.99.3-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/wget-1.21.3-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/wpa_supplicant-2.10-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/freerdp-2.10.0-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/gftp-2.9.1b-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/gkrellm-2.3.11-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/hexchat-2.16.1-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/sane-1.0.32-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/x3270-4.0ga14-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/xine-lib-1.2.13-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
y/bsd-games-2.17-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
extra/php80/php80-8.0.28-x86_64-1.txz: Removed.
extra/php81/php81-8.1.16-x86_64-1.txz: Removed.
extra/rust-for-mozilla/rust-1.60.0-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
extra/sendmail/sendmail-8.17.1-x86_64-7.txz: Rebuilt.
Recompiled against openssl-3.0.8.
extra/sendmail/sendmail-cf-8.17.1-noarch-7.txz: Rebuilt.
testing/packages/rust-1.67.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
testing/packages/samba-4.17.5-x86_64-2.txz: Removed.
|
||
|
Patrick J Volkerding
|
88d937fb4e |
Wed Feb 15 03:05:40 UTC 2023
a/kernel-firmware-20230214_a253a37-noarch-1.txz: Upgraded.
a/kernel-generic-6.1.12-x86_64-1.txz: Upgraded.
a/kernel-huge-6.1.12-x86_64-1.txz: Upgraded.
a/kernel-modules-6.1.12-x86_64-1.txz: Upgraded.
d/kernel-headers-6.1.12-x86-1.txz: Upgraded.
d/rust-1.66.1-x86_64-1.txz: Upgraded.
k/kernel-source-6.1.12-noarch-1.txz: Upgraded.
kde/bluedevil-5.27.0-x86_64-1.txz: Upgraded.
kde/breeze-5.27.0-x86_64-1.txz: Upgraded.
kde/breeze-grub-5.27.0-x86_64-1.txz: Upgraded.
kde/breeze-gtk-5.27.0-x86_64-1.txz: Upgraded.
kde/drkonqi-5.27.0-x86_64-1.txz: Upgraded.
kde/kactivitymanagerd-5.27.0-x86_64-1.txz: Upgraded.
kde/kde-cli-tools-5.27.0-x86_64-1.txz: Upgraded.
kde/kde-gtk-config-5.27.0-x86_64-1.txz: Upgraded.
kde/kdecoration-5.27.0-x86_64-1.txz: Upgraded.
kde/kdeplasma-addons-5.27.0-x86_64-1.txz: Upgraded.
kde/kgamma5-5.27.0-x86_64-1.txz: Upgraded.
kde/khotkeys-5.27.0-x86_64-1.txz: Upgraded.
kde/kinfocenter-5.27.0-x86_64-1.txz: Upgraded.
kde/kmenuedit-5.27.0-x86_64-1.txz: Upgraded.
kde/kpipewire-5.27.0-x86_64-1.txz: Upgraded.
kde/kscreen-5.27.0-x86_64-1.txz: Upgraded.
kde/kscreenlocker-5.27.0-x86_64-1.txz: Upgraded.
kde/ksshaskpass-5.27.0-x86_64-1.txz: Upgraded.
kde/ksystemstats-5.27.0-x86_64-1.txz: Upgraded.
kde/kwallet-pam-5.27.0-x86_64-1.txz: Upgraded.
kde/kwayland-integration-5.27.0-x86_64-1.txz: Upgraded.
kde/kwin-5.27.0-x86_64-1.txz: Upgraded.
kde/kwrited-5.27.0-x86_64-1.txz: Upgraded.
kde/layer-shell-qt-5.27.0-x86_64-1.txz: Upgraded.
kde/libkscreen-5.27.0-x86_64-1.txz: Upgraded.
kde/libksysguard-5.27.0-x86_64-1.txz: Upgraded.
kde/milou-5.27.0-x86_64-1.txz: Upgraded.
kde/oxygen-5.27.0-x86_64-1.txz: Upgraded.
kde/oxygen-sounds-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-browser-integration-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-desktop-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-disks-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-firewall-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-integration-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-nm-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-pa-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-sdk-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-systemmonitor-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-vault-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-workspace-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-workspace-wallpapers-5.27.0-x86_64-1.txz: Upgraded.
kde/polkit-kde-agent-1-5.27.0-x86_64-1.txz: Upgraded.
kde/powerdevil-5.27.0-x86_64-1.txz: Upgraded.
kde/qqc2-breeze-style-5.27.0-x86_64-1.txz: Upgraded.
kde/sddm-kcm-5.27.0-x86_64-1.txz: Upgraded.
kde/systemsettings-5.27.0-x86_64-1.txz: Upgraded.
kde/xdg-desktop-portal-kde-5.27.0-x86_64-1.txz: Upgraded.
l/mozjs102-102.8.0esr-x86_64-1.txz: Upgraded.
n/php-7.4.33-x86_64-3.txz: Rebuilt.
This update fixes security issues:
Core: Password_verify() always return true with some hash.
Core: 1-byte array overrun in common path resolve code.
SAPI: DOS vulnerability when parsing multipart request body.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-0567
https://www.cve.org/CVERecord?id=CVE-2023-0568
https://www.cve.org/CVERecord?id=CVE-2023-0662
(* Security fix *)
xap/mozilla-firefox-110.0-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/110.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/
https://www.cve.org/CVERecord?id=CVE-2023-25728
https://www.cve.org/CVERecord?id=CVE-2023-25730
https://www.cve.org/CVERecord?id=CVE-2023-25743
https://www.cve.org/CVERecord?id=CVE-2023-0767
https://www.cve.org/CVERecord?id=CVE-2023-25735
https://www.cve.org/CVERecord?id=CVE-2023-25737
https://www.cve.org/CVERecord?id=CVE-2023-25738
https://www.cve.org/CVERecord?id=CVE-2023-25739
https://www.cve.org/CVERecord?id=CVE-2023-25729
https://www.cve.org/CVERecord?id=CVE-2023-25732
https://www.cve.org/CVERecord?id=CVE-2023-25734
https://www.cve.org/CVERecord?id=CVE-2023-25740
https://www.cve.org/CVERecord?id=CVE-2023-25731
https://www.cve.org/CVERecord?id=CVE-2023-25733
https://www.cve.org/CVERecord?id=CVE-2023-25736
https://www.cve.org/CVERecord?id=CVE-2023-25741
https://www.cve.org/CVERecord?id=CVE-2023-25742
https://www.cve.org/CVERecord?id=CVE-2023-25744
https://www.cve.org/CVERecord?id=CVE-2023-25745
(* Security fix *)
extra/php80/php80-8.0.28-x86_64-1.txz: Upgraded.
This update fixes security issues:
Core: Password_verify() always return true with some hash.
Core: 1-byte array overrun in common path resolve code.
SAPI: DOS vulnerability when parsing multipart request body.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-0567
https://www.cve.org/CVERecord?id=CVE-2023-0568
https://www.cve.org/CVERecord?id=CVE-2023-0662
(* Security fix *)
extra/php81/php81-8.1.16-x86_64-1.txz: Upgraded.
This update fixes security issues:
Core: Password_verify() always return true with some hash.
Core: 1-byte array overrun in common path resolve code.
SAPI: DOS vulnerability when parsing multipart request body.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-0567
https://www.cve.org/CVERecord?id=CVE-2023-0568
https://www.cve.org/CVERecord?id=CVE-2023-0662
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/rust-1.67.1-x86_64-1.txz: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|
||
|
Patrick J Volkerding
|
201ae578a4 |
Fri Feb 3 20:04:33 UTC 2023
a/aaa_glibc-solibs-2.37-x86_64-2.txz: Rebuilt.
a/e2fsprogs-1.46.6-x86_64-1.txz: Upgraded.
a/hwdata-0.367-noarch-1.txz: Upgraded.
l/glibc-2.37-x86_64-2.txz: Rebuilt.
[PATCH] Account for grouping in printf width (bug 23432).
This issue could cause a overflow with sprintf in the corner case where an
application computes the size of buffer to be exactly enough to fit the
digits in question, but sprintf ends up writing a couple of extra bytes.
Thanks to marav for the heads-up.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-25139
(* Security fix *)
l/glibc-i18n-2.37-x86_64-2.txz: Rebuilt.
l/glibc-profile-2.37-x86_64-2.txz: Rebuilt.
l/libcap-2.67-x86_64-1.txz: Upgraded.
l/poppler-data-0.4.12-noarch-1.txz: Upgraded.
extra/php81/php81-8.1.15-x86_64-1.txz: Upgraded.
testing/packages/samba-4.17.5-x86_64-2.txz: Rebuilt.
Build with the bundled Heimdal instead of the system MIT Kerberos, since MIT
Kerberos has more issues when Samba is used as an AD DC. I'd appreciate any
feedback on the "Samba on Slackware 15" thread on LQ about how well this
works. Although it's not the sort of change I'd normally make in a -stable
release such as Slackware 15.0, in this case I'm considering it if it can
be done painlessly for any existing users... but I'll need to see some
reports about this. I'd like to note that yes, of course we saw the
"experimental" label in the configure flag we used to build Samba, but we
also saw another prominent Linux distribution go ahead and use it anyway. :)
And the Samba package built against MIT Kerberos cooked in the previous
-current development cycle for a couple of years without any objections.
Anyway, hopefully we'll get some testing from folks out there with networks
that use AD and go from there.
Thanks to Rowland Penny of the Samba team for clarifying this situation.
|
||
|
Patrick J Volkerding
|
34e6259d47 |
Sat Jan 7 01:50:00 UTC 2023
a/btrfs-progs-6.1.2-x86_64-1.txz: Upgraded.
l/mozilla-nss-3.87-x86_64-1.txz: Upgraded.
Fixed memory corruption in NSS via DER-encoded DSA and RSA-PSS signatures.
For more information, see:
https://www.mozilla.org/en-US/security/advisories/mfsa2021-51/
https://www.cve.org/CVERecord?id=CVE-2021-43527
(* Security fix *)
l/nodejs-19.4.0-x86_64-1.txz: Upgraded.
n/php-7.4.33-x86_64-2.txz: Rebuilt.
This update fixes a security issue:
PDO::quote() may return unquoted string.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-31631
(* Security fix *)
extra/php80/php80-8.0.27-x86_64-1.txz: Upgraded.
This update fixes a security issue:
PDO::quote() may return unquoted string.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-31631
(* Security fix *)
extra/php81/php81-8.1.14-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
PDO::quote() may return unquoted string.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-31631
(* Security fix *)
|
||
|
Patrick J Volkerding
|
f5b2119f53 |
Wed Nov 30 21:39:29 UTC 2022
kde/kstars-3.6.2-x86_64-1.txz: Upgraded. l/libbluray-1.3.4-x86_64-1.txz: Upgraded. l/newt-0.52.23-x86_64-1.txz: Upgraded. l/nodejs-19.2.0-x86_64-1.txz: Upgraded. x/wayland-protocols-1.31-noarch-1.txz: Upgraded. extra/php80/php80-8.0.26-x86_64-1.txz: Upgraded. extra/php81/php81-8.1.13-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
7354944bf0 |
Mon Nov 21 20:23:13 UTC 2022
a/libpwquality-1.4.5-x86_64-1.txz: Upgraded. a/pciutils-3.9.0-x86_64-1.txz: Upgraded. ap/qpdf-11.2.0-x86_64-1.txz: Upgraded. d/mercurial-6.3.1-x86_64-1.txz: Upgraded. kde/krusader-2.8.0-x86_64-1.txz: Upgraded. l/libpng-1.6.39-x86_64-1.txz: Upgraded. l/mlt-7.12.0-x86_64-1.txz: Upgraded. x/fcitx5-5.0.20-x86_64-1.txz: Upgraded. x/fcitx5-anthy-5.0.13-x86_64-1.txz: Upgraded. x/fcitx5-chinese-addons-5.0.16-x86_64-1.txz: Upgraded. x/fcitx5-gtk-5.0.20-x86_64-1.txz: Upgraded. x/fcitx5-kkc-5.0.11-x86_64-1.txz: Upgraded. x/fcitx5-m17n-5.0.11-x86_64-1.txz: Upgraded. x/fcitx5-qt-5.0.16-x86_64-1.txz: Upgraded. x/fcitx5-table-extra-5.0.12-x86_64-1.txz: Upgraded. x/fcitx5-unikey-5.0.12-x86_64-1.txz: Upgraded. x/libXdmcp-1.1.4-x86_64-1.txz: Upgraded. x/libXpm-3.5.14-x86_64-1.txz: Upgraded. x/libXrandr-1.5.3-x86_64-1.txz: Upgraded. x/libime-1.0.15-x86_64-1.txz: Upgraded. x/libinput-1.22.0-x86_64-1.txz: Upgraded. x/xcb-imdkit-1.0.4-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
f866235e9a |
Mon Oct 31 23:31:36 UTC 2022
a/ntfs-3g-2022.10.3-x86_64-1.txz: Upgraded.
ap/mpg123-1.31.0-x86_64-1.txz: Upgraded.
ap/vim-9.0.0814-x86_64-1.txz: Upgraded.
A vulnerability was found in vim and classified as problematic. Affected by
this issue is the function qf_update_buffer of the file quickfix.c of the
component autocmd Handler. The manipulation leads to use after free. The
attack may be launched remotely. Upgrading to version 9.0.0805 is able to
address this issue.
Thanks to marav for the heads-up.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-3705
(* Security fix *)
d/ccache-4.7.2-x86_64-1.txz: Upgraded.
d/make-4.4-x86_64-1.txz: Upgraded.
d/patchelf-0.16.1-x86_64-1.txz: Upgraded.
d/strace-6.0-x86_64-1.txz: Upgraded.
kde/kwin-5.26.2.1-x86_64-2.txz: Rebuilt.
[PATCH] x11window: revert more from 3a28c02f.
Thanks to Heinz Wiesinger.
[PATCH] x11: Don't force QT_NO_GLIB=1.
[PATCH] x11: Don't force QT_QPA_PLATFORM=xcb.
Thanks to marav.
l/libedit-20221030_3.1-x86_64-1.txz: Upgraded.
l/python-importlib_metadata-5.0.0-x86_64-1.txz: Upgraded.
l/taglib-1.13-x86_64-1.txz: Upgraded.
l/utf8proc-2.8.0-x86_64-1.txz: Upgraded.
n/openvpn-2.5.8-x86_64-1.txz: Upgraded.
n/socat-1.7.4.4-x86_64-1.txz: Upgraded.
x/libXext-1.3.5-x86_64-1.txz: Upgraded.
x/libXinerama-1.1.5-x86_64-1.txz: Upgraded.
x/makedepend-1.0.7-x86_64-1.txz: Upgraded.
x/rgb-1.1.0-x86_64-1.txz: Upgraded.
x/sessreg-1.1.3-x86_64-1.txz: Upgraded.
x/x11perf-1.6.2-x86_64-1.txz: Upgraded.
x/xsetroot-1.1.3-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-106.0.3-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/106.0.3/releasenotes/
xap/mozilla-thunderbird-102.4.1-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/102.4.1/releasenotes/
xap/vim-gvim-9.0.0814-x86_64-1.txz: Upgraded.
extra/php80/php80-8.0.25-x86_64-1.txz: Upgraded.
This update fixes security issues:
GD: OOB read due to insufficient input validation in imageloadfont().
Hash: buffer overflow in hash_update() on long parameter.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-31630
https://www.cve.org/CVERecord?id=CVE-2022-37454
(* Security fix *)
extra/php81/php81-8.1.12-x86_64-1.txz: Upgraded.
This update fixes security issues:
GD: OOB read due to insufficient input validation in imageloadfont().
Hash: buffer overflow in hash_update() on long parameter.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-31630
https://www.cve.org/CVERecord?id=CVE-2022-37454
(* Security fix *)
|
||
|
Patrick J Volkerding
|
58dca16531 |
Thu Oct 27 02:30:15 UTC 2022
a/aaa_libraries-15.1-x86_64-12.txz: Rebuilt.
Upgraded: libexpat.so.1.8.10, libffi.so.8.1.2.
Added (temporarily): libicudata.so.71.1, libicui18n.so.71.1,
libicuio.so.71.1, libicutest.so.71.1, libicutu.so.71.1, libicuuc.so.71.1.
a/xfsprogs-5.13.0-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-72.1.
ap/sqlite-3.39.4-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
kde/bluedevil-5.26.2-x86_64-1.txz: Upgraded.
kde/breeze-5.26.2-x86_64-1.txz: Upgraded.
kde/breeze-grub-5.26.2-x86_64-1.txz: Upgraded.
kde/breeze-gtk-5.26.2-x86_64-1.txz: Upgraded.
kde/drkonqi-5.26.2-x86_64-1.txz: Upgraded.
kde/kactivitymanagerd-5.26.2-x86_64-1.txz: Upgraded.
kde/kde-cli-tools-5.26.2-x86_64-1.txz: Upgraded.
kde/kde-gtk-config-5.26.2-x86_64-1.txz: Upgraded.
kde/kdecoration-5.26.2-x86_64-1.txz: Upgraded.
kde/kdeplasma-addons-5.26.2-x86_64-1.txz: Upgraded.
Compiled against icu4c-72.1.
kde/kgamma5-5.26.2-x86_64-1.txz: Upgraded.
kde/khotkeys-5.26.2-x86_64-1.txz: Upgraded.
kde/kinfocenter-5.26.2-x86_64-1.txz: Upgraded.
kde/kmenuedit-5.26.2-x86_64-1.txz: Upgraded.
kde/kpipewire-5.26.2-x86_64-1.txz: Upgraded.
kde/kscreen-5.26.2-x86_64-1.txz: Upgraded.
kde/kscreenlocker-5.26.2-x86_64-1.txz: Upgraded.
kde/ksshaskpass-5.26.2-x86_64-1.txz: Upgraded.
kde/ksystemstats-5.26.2-x86_64-1.txz: Upgraded.
kde/kwallet-pam-5.26.2-x86_64-1.txz: Upgraded.
kde/kwayland-integration-5.26.2-x86_64-1.txz: Upgraded.
kde/kwin-5.26.2.1-x86_64-1.txz: Upgraded.
kde/kwrited-5.26.2-x86_64-1.txz: Upgraded.
kde/layer-shell-qt-5.26.2-x86_64-1.txz: Upgraded.
kde/libkscreen-5.26.2-x86_64-1.txz: Upgraded.
kde/libksysguard-5.26.2-x86_64-1.txz: Upgraded.
kde/milou-5.26.2-x86_64-1.txz: Upgraded.
kde/oxygen-5.26.2-x86_64-1.txz: Upgraded.
kde/oxygen-sounds-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-browser-integration-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-desktop-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-disks-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-firewall-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-integration-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-nm-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-pa-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-sdk-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-systemmonitor-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-vault-5.26.2-x86_64-1.txz: Upgraded.
kde/plasma-workspace-5.26.2-x86_64-1.txz: Upgraded.
Compiled against icu4c-72.1.
kde/plasma-workspace-wallpapers-5.26.2-x86_64-1.txz: Upgraded.
kde/polkit-kde-agent-1-5.26.2-x86_64-1.txz: Upgraded.
kde/powerdevil-5.26.2-x86_64-1.txz: Upgraded.
kde/qqc2-breeze-style-5.26.2-x86_64-1.txz: Upgraded.
kde/sddm-kcm-5.26.2-x86_64-1.txz: Upgraded.
kde/systemsettings-5.26.2-x86_64-1.txz: Upgraded.
kde/xdg-desktop-portal-kde-5.26.2-x86_64-1.txz: Upgraded.
l/boost-1.80.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
l/harfbuzz-5.3.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
l/icu4c-72.1-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libical-3.0.16-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
l/libqalculate-4.4.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
l/libvisio-0.1.7-x86_64-10.txz: Rebuilt.
Recompiled against icu4c-72.1.
l/nodejs-19.0.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
l/qt5-5.15.6_20221026_0402bce0-x86_64-1.txz: Upgraded.
Compiled against icu4c-72.1.
l/qt5-webkit-5.212.0_alpha4-x86_64-10.txz: Rebuilt.
Recompiled against icu4c-72.1.
l/vte-0.68.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
n/curl-7.86.0-x86_64-1.txz: Upgraded.
This update fixes security issues:
HSTS bypass via IDN.
HTTP proxy double-free.
.netrc parser out-of-bounds access.
POST following PUT confusion.
For more information, see:
https://curl.se/docs/CVE-2022-42916.html
https://curl.se/docs/CVE-2022-42915.html
https://curl.se/docs/CVE-2022-35260.html
https://curl.se/docs/CVE-2022-32221.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42916
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42915
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35260
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
(* Security fix *)
n/dovecot-2.3.19.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
n/php-7.4.32-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
n/postfix-3.7.3-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
n/samba-4.17.2-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
n/tin-2.6.1-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-72.1.
t/texlive-2022.220801-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-72.1.
x/xorg-server-xwayland-22.1.4-x86_64-2.txz: Rebuilt.
[PATCH] xwayland/input: Do not ignore leave events.
Thanks to marav.
xap/mozilla-firefox-106.0.2-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/106.0.2/releasenotes/
extra/brltty/brltty-6.5-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
extra/php80/php80-8.0.24-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
extra/php81/php81-8.1.11-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-72.1.
extra/sendmail/sendmail-8.17.1-x86_64-6.txz: Rebuilt.
Recompiled against icu4c-72.1.
extra/sendmail/sendmail-cf-8.17.1-noarch-6.txz: Rebuilt.
|
||
|
Patrick J Volkerding
|
4191d96e29 |
Fri Sep 30 17:52:21 UTC 2022
a/dbus-1.14.2-x86_64-1.txz: Upgraded.
ap/powertop-2.15-x86_64-1.txz: Upgraded.
ap/sqlite-3.39.4-x86_64-1.txz: Upgraded.
ap/vim-9.0.0623-x86_64-1.txz: Upgraded.
Fixed use-after-free and stack-based buffer overflow.
Thanks to marav for the heads-up.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-3352
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-3324
(* Security fix *)
kde/digikam-7.8.0-x86_64-2.txz: Rebuilt.
Recompiled against lensfun-0.3.3.
kde/kstars-3.6.1-x86_64-1.txz: Upgraded.
kde/plasma-wayland-protocols-1.9.0-x86_64-1.txz: Upgraded.
l/lensfun-0.3.3-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/netpbm-11.00.00-x86_64-1.txz: Upgraded.
l/nodejs-18.10.0-x86_64-1.txz: Upgraded.
l/pipewire-0.3.59-x86_64-1.txz: Upgraded.
n/php-7.4.32-x86_64-1.txz: Upgraded.
This update fixes bugs and security issues:
phar wrapper: DOS when using quine gzip file.
Don't mangle HTTP variable names that clash with ones that have a specific
semantic meaning.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31628
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31629
(* Security fix *)
xap/mozilla-thunderbird-102.3.1-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/102.3.1/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-43/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39249
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39250
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39251
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39236
(* Security fix *)
xap/seamonkey-2.53.14-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.seamonkey-project.org/releases/seamonkey2.53.14
(* Security fix *)
xap/vim-gvim-9.0.0623-x86_64-1.txz: Upgraded.
xap/xsnow-3.5.3-x86_64-1.txz: Upgraded.
extra/php80/php80-8.0.24-x86_64-1.txz: Upgraded.
This update fixes bugs and security issues:
phar wrapper: DOS when using quine gzip file.
Don't mangle HTTP variable names that clash with ones that have a specific
semantic meaning.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31628
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31629
(* Security fix *)
extra/php81/php81-8.1.11-x86_64-1.txz: Upgraded.
This update fixes bugs and security issues:
phar wrapper: DOS when using quine gzip file.
Don't mangle HTTP variable names that clash with ones that have a specific
semantic meaning.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31628
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31629
(* Security fix *)
|
||
|
Patrick J Volkerding
|
64fbcd92b6 |
Tue Sep 6 20:21:24 UTC 2022
a/cracklib-2.9.8-x86_64-1.txz: Upgraded.
a/gawk-5.2.0-x86_64-1.txz: Upgraded.
a/grep-3.8-x86_64-1.txz: Upgraded.
a/kernel-firmware-20220902_2f2f018-noarch-1.txz: Upgraded.
a/kernel-generic-5.19.7-x86_64-1.txz: Upgraded.
a/kernel-huge-5.19.7-x86_64-1.txz: Upgraded.
a/kernel-modules-5.19.7-x86_64-1.txz: Upgraded.
a/pcmciautils-018-x86_64-5.txz: Rebuilt.
rc.pcmcia: change fgrep to grep -F.
a/pkgtools-15.1-noarch-1.txz: Upgraded.
removepkg: change fgrep to grep -F.
a/sysvinit-functions-8.53-x86_64-6.txz: Rebuilt.
/etc/rc.d/init.d/functions: change egrep to grep -E.
a/sysvinit-scripts-15.1-noarch-2.txz: Rebuilt.
rc.cpufreq: command-line choice should take priority
over /etc/default/cpufreq. Thanks to af7567.
rc.6: change egrep to grep -E.
ap/sqlite-3.39.3-x86_64-1.txz: Upgraded.
ap/vim-9.0.0396-x86_64-1.txz: Upgraded.
Fixed use after free.
Thanks to marav for the heads-up.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3099
(* Security fix *)
d/autoconf-2.71-noarch-2.txz: Rebuilt.
doinst.sh: change fgrep to grep -F.
d/autoconf-archive-2022.09.03-noarch-1.txz: Upgraded.
d/automake-1.16.5-noarch-2.txz: Rebuilt.
doinst.sh: change fgrep to grep -F.
d/kernel-headers-5.19.7-x86-1.txz: Upgraded.
d/libtool-2.4.7-x86_64-4.txz: Rebuilt.
doinst.sh: change fgrep to grep -F.
d/meson-0.63.2-x86_64-1.txz: Upgraded.
d/vala-0.56.3-x86_64-1.txz: Upgraded.
k/kernel-source-5.19.7-noarch-1.txz: Upgraded.
kde/bluedevil-5.25.5-x86_64-1.txz: Upgraded.
kde/breeze-5.25.5-x86_64-1.txz: Upgraded.
kde/breeze-grub-5.25.5-x86_64-1.txz: Upgraded.
kde/breeze-gtk-5.25.5-x86_64-1.txz: Upgraded.
kde/drkonqi-5.25.5-x86_64-1.txz: Upgraded.
kde/kactivitymanagerd-5.25.5-x86_64-1.txz: Upgraded.
kde/kde-cli-tools-5.25.5-x86_64-1.txz: Upgraded.
kde/kde-gtk-config-5.25.5-x86_64-1.txz: Upgraded.
kde/kdecoration-5.25.5-x86_64-1.txz: Upgraded.
kde/kdeplasma-addons-5.25.5-x86_64-1.txz: Upgraded.
kde/kgamma5-5.25.5-x86_64-1.txz: Upgraded.
kde/khotkeys-5.25.5-x86_64-1.txz: Upgraded.
kde/kinfocenter-5.25.5-x86_64-1.txz: Upgraded.
kde/kmenuedit-5.25.5-x86_64-1.txz: Upgraded.
kde/kscreen-5.25.5-x86_64-1.txz: Upgraded.
kde/kscreenlocker-5.25.5-x86_64-1.txz: Upgraded.
kde/ksshaskpass-5.25.5-x86_64-1.txz: Upgraded.
kde/ksystemstats-5.25.5-x86_64-1.txz: Upgraded.
kde/kwallet-pam-5.25.5-x86_64-1.txz: Upgraded.
kde/kwayland-integration-5.25.5-x86_64-1.txz: Upgraded.
kde/kwin-5.25.5-x86_64-1.txz: Upgraded.
kde/kwrited-5.25.5-x86_64-1.txz: Upgraded.
kde/layer-shell-qt-5.25.5-x86_64-1.txz: Upgraded.
kde/libkscreen-5.25.5-x86_64-1.txz: Upgraded.
kde/libksysguard-5.25.5-x86_64-1.txz: Upgraded.
kde/milou-5.25.5-x86_64-1.txz: Upgraded.
kde/oxygen-5.25.5-x86_64-1.txz: Upgraded.
kde/oxygen-sounds-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-browser-integration-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-desktop-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-disks-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-firewall-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-integration-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-nm-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-pa-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-sdk-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-systemmonitor-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-vault-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-wayland-protocols-1.8.0-x86_64-1.txz: Upgraded.
kde/plasma-workspace-5.25.5-x86_64-1.txz: Upgraded.
kde/plasma-workspace-wallpapers-5.25.5-x86_64-1.txz: Upgraded.
kde/polkit-kde-agent-1-5.25.5-x86_64-1.txz: Upgraded.
kde/powerdevil-5.25.5-x86_64-1.txz: Upgraded.
kde/qqc2-breeze-style-5.25.5-x86_64-1.txz: Upgraded.
kde/sddm-kcm-5.25.5-x86_64-1.txz: Upgraded.
kde/systemsettings-5.25.5-x86_64-1.txz: Upgraded.
kde/xdg-desktop-portal-kde-5.25.5-x86_64-1.txz: Upgraded.
l/fluidsynth-2.2.9-x86_64-1.txz: Upgraded.
l/libsoup3-3.0.8-x86_64-1.txz: Upgraded.
l/libssh-0.10.3-x86_64-1.txz: Upgraded.
l/neon-0.32.3-x86_64-1.txz: Upgraded.
l/slang-2.3.3-x86_64-1.txz: Upgraded.
n/nmap-7.93-x86_64-1.txz: Upgraded.
x/ibus-m17n-1.4.11-x86_64-1.txz: Upgraded.
x/libXft-2.3.5-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-104.0.2-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/104.0.2/releasenotes/
xap/vim-gvim-9.0.0396-x86_64-1.txz: Upgraded.
xfce/xfce4-pulseaudio-plugin-0.4.4-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|
||
|
Patrick J Volkerding
|
4ce5bf309b |
Thu Sep 1 20:01:13 UTC 2022
d/mercurial-6.2.2-x86_64-1.txz: Upgraded.
kde/calligra-3.2.1-x86_64-22.txz: Rebuilt.
Recompiled against poppler-22.09.0.
kde/cantor-22.08.0-x86_64-2.txz: Rebuilt.
Recompiled against poppler-22.09.0.
kde/kfilemetadata-5.97.0-x86_64-2.txz: Rebuilt.
Recompiled against poppler-22.09.0.
kde/kile-2.9.93-x86_64-20.txz: Rebuilt.
Recompiled against poppler-22.09.0.
kde/kitinerary-22.08.0-x86_64-2.txz: Rebuilt.
Recompiled against poppler-22.09.0.
kde/krita-5.1.0-x86_64-2.txz: Rebuilt.
Recompiled against poppler-22.09.0.
kde/okular-22.08.0-x86_64-2.txz: Rebuilt.
Recompiled against poppler-22.09.0.
l/poppler-22.09.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
[PATCH] JBIG2Stream: Fix crash on broken file.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30860
(* Security fix *)
xap/mozilla-thunderbird-102.2.1-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/102.2.1/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-38/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3033
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3034
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36059
(* Security fix *)
extra/php80/php80-8.0.23-x86_64-1.txz: Upgraded.
extra/php81/php81-8.1.10-x86_64-1.txz: Upgraded.
|
||
|
Patrick J Volkerding
|
e20909a770 |
Tue Aug 30 19:39:30 UTC 2022
a/cryptsetup-2.5.0-x86_64-3.txz: Rebuilt.
rc.luks: use --batch-mode when creating encrypted swap.
Thanks to Markus Wiesner.
a/sysvinit-3.05-x86_64-1.txz: Upgraded.
ap/vim-9.0.0334-x86_64-1.txz: Upgraded.
Fixed use after free.
Thanks to marav for the heads-up.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3016
(* Security fix *)
kde/digikam-7.8.0-x86_64-1.txz: Upgraded.
kde/fcitx5-configtool-5.0.15-x86_64-1.txz: Upgraded.
kde/umbrello-22.08.0-x86_64-2.txz: Rebuilt.
Recompiled against kdevelop-22.08.0. Thanks to th_r.
x/fcitx5-5.0.19-x86_64-1.txz: Upgraded.
x/fcitx5-chinese-addons-5.0.15-x86_64-1.txz: Upgraded.
x/libime-1.0.14-x86_64-1.txz: Upgraded.
xap/NetworkManager-openvpn-1.10.0-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-104.0.1-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/104.0.1/releasenotes/
xap/vim-gvim-9.0.0334-x86_64-1.txz: Upgraded.
extra/sendmail/sendmail-8.17.1-x86_64-5.txz: Rebuilt.
Patched sendmail.h to fix SASL auth. Thanks to af7567.
Build without -DUSE_EAI (which is evidently considered experimental) since
the option breaks the vacation binary. Thanks to bitfuzzy and HQuest.
It is possible that this could work but requires additional options. I found
this in the ChangeLog for the SUSE rpm:
Experimental support for SMTPUTF8 (EAI, see RFC 6530-6533) is available
when using the compile time option USE_EAI (see also
devtools/Site/site.config.m4.sample for other required settings) and the cf
option SMTPUTF8. If a mail submission via the command line requires the
use of SMTPUTF8, e.g., because a header uses UTF-8 encoding, but the
addresses on the command line are all ASCII, then the new option -U must be
used, and the cf option SMTPUTF8 must be set in submit.cf.
Any assistance with getting -DUSE_EAI working properly would be appreciated.
extra/sendmail/sendmail-cf-8.17.1-noarch-5.txz: Rebuilt.
|
||
|
Patrick J Volkerding
|
c08e498a00 |
Tue Aug 23 19:27:56 UTC 2022
ap/inxi-3.3.21_1-noarch-1.txz: Upgraded.
d/ccache-4.6.2-x86_64-1.txz: Upgraded.
d/parallel-20220822-noarch-1.txz: Upgraded.
kde/kleopatra-22.08.0-x86_64-2.txz: Rebuilt.
Patched to build with gpgme-1.18.0.
l/babl-0.1.94-x86_64-1.txz: Upgraded.
l/hunspell-1.7.1-x86_64-1.txz: Upgraded.
Fixed invalid read operation in SuggestMgr::leftcommonsubstring
in suggestmgr.cxx.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16707
(* Security fix *)
l/libqalculate-4.3.0-x86_64-1.txz: Upgraded.
n/ethtool-5.19-x86_64-1.txz: Upgraded.
n/gpgme-1.18.0-x86_64-1.txz: Upgraded.
n/nghttp2-1.49.0-x86_64-1.txz: Upgraded.
x/ibus-1.5.27-x86_64-1.txz: Upgraded.
x/libglvnd-1.5.0-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-104.0-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/104.0/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2022-33/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38472
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38473
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38474
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38475
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38477
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38478
(* Security fix *)
xap/mozilla-thunderbird-102.2.0-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/102.2.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-36/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38472
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38473
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38476
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38477
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38478
(* Security fix *)
extra/sendmail/sendmail-8.17.1-x86_64-4.txz: Rebuilt.
In recent versions of glibc, USE_INET6 has been removed which caused sendmail
to reject mail from IPv6 addresses. Adding -DHAS_GETHOSTBYNNAME2=1 to the
site.config.m4 allows the reverse lookups to work again fixing this issue.
Thanks to talo.
extra/sendmail/sendmail-cf-8.17.1-noarch-4.txz: Rebuilt.
|
||
|
Patrick J Volkerding
|
2d7cee3961 |
Mon Aug 8 23:29:31 UTC 2022
Hey folks, here's that graphics stack upgrade that you've been waiting for!
After looking at what drivers are currently shipped by other projects, I took
an axe to the driver list. Some of the removed drivers will still compile even
though they are abandoned, and some of the others are still getting git commits
(which allows *some* of them to compile). The removed stuff mostly looks
obsolete to me (we really can't support ancient hardware forever). But if you
think I've gone too far with any of these removals, please make or contribute
to a thread about it on LQ and I'll take any comments there into consideration.
a/kernel-firmware-20220808_e6857b6-noarch-1.txz: Upgraded.
ap/vim-9.0.0174-x86_64-1.txz: Upgraded.
l/gnu-efi-3.0.15-x86_64-1.txz: Upgraded.
n/libtirpc-1.3.3-x86_64-1.txz: Upgraded.
n/mutt-2.2.7-x86_64-1.txz: Upgraded.
x/egl-wayland-1.1.10-x86_64-1.txz: Upgraded.
x/libdrm-2.4.112-x86_64-1.txz: Upgraded.
x/libglvnd-1.4.0-x86_64-1.txz: Upgraded.
x/mesa-22.1.5-x86_64-1.txz: Upgraded.
Includes Mesa amber 21.3.9 DRI drivers, and mesa-demos-8.5.0.
Thanks to LuckyCyborg for posting some valuable hints on LQ.
x/xcb-proto-1.15.2-x86_64-1.txz: Upgraded.
x/xf86-input-acecad-1.5.0-x86_64-14.txz: Removed.
x/xf86-input-evdev-2.10.6-x86_64-4.txz: Rebuilt.
x/xf86-input-joystick-1.6.3-x86_64-5.txz: Removed.
x/xf86-input-keyboard-1.9.0-x86_64-5.txz: Removed.
x/xf86-input-libinput-1.2.1-x86_64-2.txz: Rebuilt.
x/xf86-input-mouse-1.9.3-x86_64-3.txz: Removed.
x/xf86-input-penmount-1.5.0-x86_64-14.txz: Removed.
x/xf86-input-synaptics-1.9.2-x86_64-1.txz: Upgraded.
x/xf86-input-vmmouse-13.1.0-x86_64-9.txz: Removed.
x/xf86-input-void-1.4.1-x86_64-3.txz: Removed.
x/xf86-input-wacom-1.0.0-x86_64-2.txz: Rebuilt.
x/xf86-video-amdgpu-22.0.0-x86_64-2.txz: Rebuilt.
x/xf86-video-apm-1.3.0-x86_64-3.txz: Removed.
x/xf86-video-ark-0.7.5-x86_64-13.txz: Removed.
x/xf86-video-ast-1.1.5-x86_64-7.txz: Removed.
x/xf86-video-ati-20220730_7a6a34af-x86_64-1.txz: Upgraded.
x/xf86-video-chips-1.4.0-x86_64-3.txz: Removed.
x/xf86-video-cirrus-1.5.3-x86_64-7.txz: Removed.
x/xf86-video-dummy-0.4.0-x86_64-2.txz: Rebuilt.
x/xf86-video-glint-1.2.9-x86_64-5.txz: Removed.
x/xf86-video-i128-1.4.0-x86_64-3.txz: Removed.
x/xf86-video-i740-1.4.0-x86_64-3.txz: Removed.
x/xf86-video-intel-20210115_31486f40-x86_64-1.txz: Upgraded.
x/xf86-video-mach64-6.9.6-x86_64-3.txz: Removed.
x/xf86-video-mga-2.0.0-x86_64-3.txz: Removed.
x/xf86-video-neomagic-1.3.0-x86_64-3.txz: Removed.
x/xf86-video-nouveau-20220125_29cc528-x86_64-1.txz: Upgraded.
x/xf86-video-nv-2.1.21-x86_64-5.txz: Removed.
x/xf86-video-openchrome-0.6.0-x86_64-6.txz: Rebuilt.
x/xf86-video-r128-6.12.0-x86_64-3.txz: Removed.
x/xf86-video-rendition-4.2.7-x86_64-3.txz: Removed.
x/xf86-video-s3-0.7.0-x86_64-3.txz: Removed.
x/xf86-video-s3virge-1.11.0-x86_64-3.txz: Removed.
x/xf86-video-savage-20190128_8579718-x86_64-3.txz: Removed.
x/xf86-video-siliconmotion-1.7.9-x86_64-5.txz: Removed.
x/xf86-video-sis-0.12.0-x86_64-3.txz: Removed.
x/xf86-video-sisusb-0.9.7-x86_64-5.txz: Removed.
x/xf86-video-tdfx-1.5.0-x86_64-3.txz: Removed.
x/xf86-video-tga-1.2.2-x86_64-13.txz: Removed.
x/xf86-video-trident-1.3.8-x86_64-5.txz: Removed.
x/xf86-video-tseng-1.2.5-x86_64-13.txz: Removed.
x/xf86-video-v4l-0.3.0-x86_64-3.txz: Removed.
x/xf86-video-vboxvideo-1.0.0-x86_64-5.txz: Removed.
x/xf86-video-vesa-2.5.0-x86_64-4.txz: Rebuilt.
x/xf86-video-vmware-20220621_ff5637a-x86_64-1.txz: Upgraded.
x/xf86-video-voodoo-1.2.5-x86_64-14.txz: Removed.
x/xorg-server-21.1.4-x86_64-1.txz: Upgraded.
x/xorg-server-xephyr-21.1.4-x86_64-1.txz: Upgraded.
x/xorg-server-xnest-21.1.4-x86_64-1.txz: Upgraded.
x/xorg-server-xvfb-21.1.4-x86_64-1.txz: Upgraded.
x/xorg-server-xwayland-22.1.3-x86_64-1.txz: Upgraded.
x/xorgproto-2022.1-x86_64-1.txz: Upgraded.
xap/geeqie-2.0-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-103.0.2-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/103.0.2/releasenotes/
xap/vim-gvim-9.0.0174-x86_64-1.txz: Upgraded.
extra/xf86-video-fbdev/xf86-video-fbdev-0.5.0-x86_64-2.txz: Rebuilt.
|