a/kernel-generic-5.10.5-x86_64-1.txz: Upgraded.
a/kernel-huge-5.10.5-x86_64-1.txz: Upgraded.
a/kernel-modules-5.10.5-x86_64-1.txz: Upgraded.
d/kernel-headers-5.10.5-x86-1.txz: Upgraded.
d/meson-0.56.1-x86_64-1.txz: Upgraded.
k/kernel-source-5.10.5-noarch-1.txz: Upgraded.
We'll turn off the silent stream feature as there's a known deadlock bug that
remains in 5.10.5. Perhaps we'll restore it once that's patched... but we
made it this far without the feature so I'll probably wait for a case to be
made for it. Thanks to Petri Kaukasoina.
Also build the intelfb module. This doesn't have anything to do with the
lockups occurring on Intel systems, but we might as well provide the module.
It remains blacklisted by default.
FB_INTEL n -> m
SND_HDA_INTEL_HDMI_SILENT_STREAM y -> n
+FB_INTEL_DEBUG n
+FB_INTEL_I2C y
l/imagemagick-7.0.10_56-x86_64-1.txz: Upgraded.
x/ibus-table-1.12.3-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-78.6.1esr-x86_64-1.txz: Upgraded.
This release contains a security fix:
A malicious peer could have modified a COOKIE-ECHO chunk in a SCTP packet
in a way that potentially resulted in a use-after-free. We presume that with
enough effort it could have been exploited to run arbitrary code.
For more information, see:
https://www.mozilla.org/en-US/firefox/78.6.1/releasenotes/https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/exfatprogs-1.0.4-x86_64-1.txz: Added.
ap/vim-8.2.2269-x86_64-1.txz: Upgraded.
Add Ruby and Tcl support, make language support dynamic if possible.
d/ruby-3.0.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
d/subversion-1.14.0-x86_64-4.txz: Rebuilt.
Recompiled against ruby-3.0.0.
l/openexr-2.5.4-x86_64-1.txz: Upgraded.
l/python-idna-3.0-x86_64-1.txz: Upgraded.
n/cifs-utils-6.12-x86_64-1.txz: Upgraded.
n/epic5-2.1.2-x86_64-5.txz: Rebuilt.
Recompiled against ruby-3.0.0.
x/marisa-0.2.6-x86_64-2.txz: Rebuilt.
Recompiled against ruby-3.0.0.
xap/vim-gvim-8.2.2269-x86_64-1.txz: Upgraded.
Add Ruby and Tcl support, make language support dynamic if possible.
a/kernel-firmware-20201230_f580dc2-noarch-1.txz: Upgraded.
a/kernel-generic-5.10.4-x86_64-1.txz: Upgraded.
a/kernel-huge-5.10.4-x86_64-1.txz: Upgraded.
a/kernel-modules-5.10.4-x86_64-1.txz: Upgraded.
d/kernel-headers-5.10.4-x86-1.txz: Upgraded.
k/kernel-source-5.10.4-noarch-1.txz: Upgraded.
xfce/thunar-4.16.1-x86_64-1.txz: Upgraded.
y/nethack-3.6.6-x86_64-1.txz: Added.
Might as well have more than one package in this series. :-)
We'll use similar install paths to the ones used by bsd-games for this.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/pkgtools-15.0-noarch-34.txz: Rebuilt.
installpkg: run doinst.sh in a subshell for NOLOCK packages.
removepkg: run uninstall scripts in a subshell.
This avoids a bug when handling multiple packages where these scripts might
be in the wrong directory when a new file/package is to be processed.
Thanks to Mario Preksavec.
ap/terminus-font-4.49.1-noarch-1.txz: Upgraded.
d/git-2.30.0-x86_64-1.txz: Upgraded.
d/python-setuptools-51.1.1-x86_64-1.txz: Upgraded.
l/libproxy-0.4.17-x86_64-1.txz: Upgraded.
l/netpbm-10.93.00-x86_64-1.txz: Upgraded.
l/openjpeg-2.4.0-x86_64-1.txz: Upgraded.
xap/hexchat-2.14.3-x86_64-5.txz: Rebuilt.
Compile using -Dwith-python=python3-embed instead of -Dwith-python=python3
to ensure that /usr/lib*/hexchat/plugins/python.so is linked with libpython,
otherwise the module will not load properly.
Thanks to Mario Preksavec.
xfce/xfce4-panel-profiles-1.0.12-x86_64-1.txz: Upgraded.
xfce/xfce4-taskmanager-1.4.0-x86_64-1.txz: Upgraded.
And, just a month after Xfce 4.14 appeared in vtown, we have Xfce 4.16 updates
in the main tree. Thanks much to Robby Workman for making it happen. :-)
a/aaa_terminfo-6.2_20201219-x86_64-1.txz: Upgraded.
a/ndctl-71.1-x86_64-2.txz: Rebuilt.
Fix bash-completion file installation (previously it was causing the
completion dir to have mode 0644). Thanks to Robby Workman.
l/harfbuzz-2.7.4-x86_64-1.txz: Upgraded.
l/libarchive-3.5.1-x86_64-1.txz: Upgraded.
l/libgtop-2.40.0-x86_64-1.txz: Added.
This is used by libxfce4ui to provide extra information in the about page.
l/ncurses-6.2_20201219-x86_64-1.txz: Upgraded.
n/wpa_supplicant-2.9-x86_64-4.txz: Rebuilt.
Fix desktop file to not show if kdesu isn't available. Thanks to Hyperion.
x/xterm-363-x86_64-1.txz: Upgraded.
xap/xsnow-3.2.0-x86_64-1.txz: Upgraded.
xfce/Greybird-3.22.13-noarch-2.txz: Rebuilt.
xfce/exo-4.16.0-x86_64-1.txz: Upgraded.
xfce/garcon-0.8.0-x86_64-1.txz: Upgraded.
xfce/libxfce4ui-4.16.0-x86_64-1.txz: Upgraded.
xfce/libxfce4util-4.16.0-x86_64-1.txz: Upgraded.
xfce/mousepad-0.5.1-x86_64-2.txz: Rebuilt.
xfce/thunar-4.16.0-x86_64-1.txz: Upgraded.
xfce/thunar-volman-4.16.0-x86_64-1.txz: Upgraded.
xfce/tumbler-4.16.0-x86_64-1.txz: Upgraded.
xfce/xfce4-appfinder-4.16.0-x86_64-1.txz: Upgraded.
xfce/xfce4-clipman-plugin-1.6.1-x86_64-2.txz: Rebuilt.
xfce/xfce4-dev-tools-4.16.0-x86_64-1.txz: Upgraded.
xfce/xfce4-notifyd-0.6.2-x86_64-2.txz: Rebuilt.
xfce/xfce4-panel-4.16.0-x86_64-1.txz: Upgraded.
xfce/xfce4-panel-profiles-1.0.10-x86_64-2.txz: Rebuilt.
xfce/xfce4-power-manager-4.16.0-x86_64-1.txz: Upgraded.
xfce/xfce4-pulseaudio-plugin-0.4.3-x86_64-2.txz: Rebuilt.
xfce/xfce4-screensaver-0.1.11-x86_64-3.txz: Rebuilt.
xfce/xfce4-screenshooter-1.9.8-x86_64-1.txz: Upgraded.
xfce/xfce4-session-4.16.0-x86_64-1.txz: Upgraded.
xfce/xfce4-settings-4.16.0-x86_64-1.txz: Upgraded.
xfce/xfce4-systemload-plugin-1.2.4-x86_64-2.txz: Rebuilt.
xfce/xfce4-taskmanager-1.2.3-x86_64-2.txz: Rebuilt.
xfce/xfce4-terminal-0.8.10-x86_64-1.txz: Upgraded.
xfce/xfce4-weather-plugin-0.10.2-x86_64-2.txz: Rebuilt.
xfce/xfce4-whiskermenu-plugin-2.5.0-x86_64-1.txz: Upgraded.
xfce/xfconf-4.16.0-x86_64-1.txz: Upgraded.
xfce/xfdesktop-4.16.0-x86_64-1.txz: Upgraded.
xfce/xfwm4-4.16.0-x86_64-1.txz: Upgraded.
a/glibc-zoneinfo-2020e-noarch-1.txz: Upgraded.
This package provides the latest timezone updates.
a/kernel-generic-5.10.3-x86_64-1.txz: Upgraded.
a/kernel-huge-5.10.3-x86_64-1.txz: Upgraded.
a/kernel-modules-5.10.3-x86_64-1.txz: Upgraded.
ap/sysstat-12.5.2-x86_64-1.txz: Upgraded.
d/kernel-headers-5.10.3-x86-1.txz: Upgraded.
k/kernel-source-5.10.3-noarch-1.txz: Upgraded.
SND_PCSP n -> m
SND_SOC_AK5558 n -> m
SND_SOC_INTEL_CML_LP_DA7219_MAX98357A_MACH n -> m
SND_SOC_INTEL_KBL_RT5663_RT5514_MAX98927_MACH n -> m
SND_SOC_INTEL_SKL_HDA_DSP_GENERIC_MACH n -> m
SND_SOC_INTEL_SOF_RT5682_MACH n -> m
+SND_SOC_RT5514 m
+SND_SOC_RT5514_SPI m
Added a few more sound modules. Thanks to Loomx for pointing out that
SND_SOC_INTEL_SKL_HDA_DSP_GENERIC_MACH was missing.
l/imagemagick-7.0.10_53-x86_64-1.txz: Upgraded.
l/libusb-1.0.24-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
l/keyutils-1.6.3-x86_64-1.txz: Upgraded.
l/pulseaudio-14.0-x86_64-3.txz: Rebuilt.
Patched to support detecting elogind at compile time when built with meson.
This restores PulseAudio exiting upon user logout.
Thanks to LuckyCyborg for the bug report and patch.
l/system-config-printer-1.5.13-x86_64-1.txz: Upgraded.
n/mobile-broadband-provider-info-20201225-x86_64-1.txz: Upgraded.
l/harfbuzz-2.7.3-x86_64-2.txz: Rebuilt.
Seems the --enable-introspection option didn't work, so rebuild with meson
since that's probably what most of the developers do. Fixes blueman.
Thanks to marav for the bug report.
Here are some updates to provide a little holiday cheer. The kernels are
rebuilt (yeah, we'll probably have new ones tomorrow but whatever) to build in
HWMON making NVMe temperature monitoring available, and there's also a massive
cleanup of polkit/dbus related packages to move most of the config files out
of /etc and not install them as .new. Local config files that override the
shipped ones may be placed in the directories in /etc to override the ones that
we ship. Thanks to Robby Workman for this!
None of the packages included in Slackware place any files in
/etc/polkit-1/rules.d/ or /etc/dbus-1/system.d/ any more, but there may be
third-party packages that still do. However, since Slackware's packages
originally installed these as .new files, the leftover configs will remain.
You'll probably want to take a look in those directories to clean out any
config files that you haven't modified yourself or that belong to packages that
aren't part of Slackware itself.
Hope everyone has a great day. :-)
a/dbus-1.12.20-x86_64-3.txz: Rebuilt.
Added local config override directory /etc/dbus-1/system.d/ since no other
package provides it now.
a/kernel-generic-5.10.2-x86_64-2.txz: Upgraded.
a/kernel-huge-5.10.2-x86_64-2.txz: Upgraded.
a/kernel-modules-5.10.2-x86_64-2.txz: Upgraded.
a/udisks-1.0.5-x86_64-6.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
a/udisks2-2.9.1-x86_64-2.txz: Rebuilt.
Include 20-plugdev-group-mount-override.rules, installed in the system
location. Thanks to Robby Workman.
ap/cups-2.3.3-x86_64-3.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
ap/hplip-3.20.6-x86_64-4.txz: Rebuilt.
Use --enable-qt5.
Move D-Bus configs from /etc to the system location.
Drop HAL support (LOL!)
Thanks to Robby Workman.
ap/mpg123-1.26.4-x86_64-1.txz: Upgraded.
d/gnucobol-3.1.2-x86_64-1.txz: Upgraded.
d/kernel-headers-5.10.2-x86-2.txz: Upgraded.
k/kernel-source-5.10.2-noarch-2.txz: Upgraded.
HWMON m -> y
+NVME_HWMON y
+POWER_SUPPLY_HWMON y
+THERMAL_HWMON y
Thanks to Daedra.
kde/sddm-0.19.0-x86_64-4.txz: Rebuilt.
Don't include the /etc/dbus-1/system.d/ directory.
l/GConf-3.2.6-x86_64-5.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
l/accountsservice-0.6.55-x86_64-2.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
l/cryptopp-8.3.0-x86_64-1.txz: Upgraded.
l/harfbuzz-2.7.3-x86_64-1.txz: Upgraded.
l/polkit-0.118-x86_64-3.txz: Rebuilt.
Remove D-Bus rules for udisks2 and NetworkManager (moved to those packages).
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
l/pulseaudio-14.0-x86_64-2.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
l/system-config-printer-1.5.12-x86_64-6.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
n/ModemManager-1.14.8-x86_64-2.txz: Rebuilt.
Added elogind support.
Move D-Bus configs from /etc to the system location.
Thanks to Robby Workman.
n/NetworkManager-1.28.0-x86_64-2.txz: Rebuilt.
Include 10-org.freedesktop.NetworkManager.rules, installed in the system
location. Thanks to Robby Workman.
n/bluez-5.55-x86_64-2.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
n/netatalk-3.1.12-x86_64-5.txz: Rebuilt.
Patched to fix failure to build from source with gcc10.
Move D-Bus configs from /etc to the system location.
Thanks to Robby Workman.
n/wpa_supplicant-2.9-x86_64-3.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
x/mesa-20.3.1-x86_64-2.txz: Rebuilt.
[PATCH] vulkan/device_select: Store Vulkan vendorID and deviceID as uint32_t.
Thanks to sasha69 for the link to the upstream discussion/commit.
xap/blueman-2.1.4-x86_64-3.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
xap/xgames-0.3-x86_64-6.txz: Rebuilt.
Fixed spider failing to build from source with gcc10.
Removed the ancient version of xsnow.
xap/xscreensaver-5.45-x86_64-2.txz: Rebuilt.
Make the description of the xscreensaver settings be clearly for xscreensaver
as opposed to a generic "screensaver" settings. Thanks to Robby Workman.
xap/xsnow-3.1.9-x86_64-1.txz: Added.
Merry Christmas / Happy Holidays! :-)
xfce/mousepad-0.5.1-x86_64-1.txz: Upgraded.
xfce/xfce4-screensaver-0.1.11-x86_64-2.txz: Rebuilt.
Make the description of the xfce4-screensaver settings be clearly for
xfce4-screensaver as opposed to a generic "screensaver" settings.
Thanks to Robby Workman.
xfce/xfce4-session-4.14.2-x86_64-2.txz: Rebuilt.
Use xfce4-screensaver by default and don't ship the xscreensaver.desktop
autostart file. Thanks to Robby Workman.
extra/pure-alsa-system/*: Removed.
This served a purpose during the pure ALSA to PulseAudio transition, but
it's time for it to go away. If the latency is an issue for your use case,
a look around should turn up documentation on how to reduce it, or how to
send output directly to ALSA without having to uninstall PulseAudio or
recompile anything that's linked to it. As an example, see this one (which
was mentioned here before):
https://wiki.archlinux.org/index.php/PulseAudio/Examples#PulseAudio_as_a_minimal_unintrusive_dumb_pipe_to_ALSA
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/lilo-24.2-x86_64-10.txz: Rebuilt.
Add -fcommon to fix build with gcc10.
liloconfig:
Don't warn about UMSDOS which is long obsolete.
Detect QEMU and use /dev/vda as the boot device in that case.
Fix a case where /mnt was used instead of the target partition variable.
Thanks to alienBOB.
a/mkinitrd-1.4.11-x86_64-16.txz: Rebuilt.
Blacklist rules.d/73-seat-late.rules. Thanks to Robby Workman.
a/ndctl-71.1-x86_64-1.txz: Upgraded.
a/sysklogd-2.1.2-x86_64-3.txz: Rebuilt.
/etc/logrotate.d/syslog.new: add missingok option. Thanks to sovteq.
l/gdbm-1.19-x86_64-1.txz: Upgraded.
t/fig2dev-3.2.8-x86_64-1.txz: Upgraded.
x/libepoxy-1.5.5-x86_64-1.txz: Upgraded.
Linus didn't think this was a scary kernel and in spite of skipping a few
branches here before getting to this one, I don't either. Not scary enough
to make me think I need to start it out in /testing, anyway. I have a good
feeling about this kernel. Enjoy! :-)
a/bash-5.1.004-x86_64-1.txz: Upgraded.
a/elogind-246.9-x86_64-1.txz: Upgraded.
Don't make 10-enable-session-power.rules a .new file.
Thanks to Robby Workman.
a/kernel-firmware-20201218_646f159-noarch-1.txz: Upgraded.
a/kernel-generic-5.10.1-x86_64-1.txz: Upgraded.
a/kernel-huge-5.10.1-x86_64-1.txz: Upgraded.
a/kernel-modules-5.10.1-x86_64-1.txz: Upgraded.
a/ndctl-71-x86_64-1.txz: Upgraded.
a/sysvinit-scripts-2.1-noarch-37.txz: Rebuilt.
rc.S: don't start cgmanager/cgproxy.
rc.6: don't stop cgmanager/cgproxy.
d/kernel-headers-5.10.1-x86-1.txz: Upgraded.
k/kernel-source-5.10.1-noarch-1.txz: Upgraded.
l/libtiff-4.2.0-x86_64-1.txz: Upgraded.
l/zstd-1.4.8-x86_64-1.txz: Upgraded.
n/ca-certificates-20201219-noarch-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
xap/libnma-1.8.30-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/inih-r52-x86_64-1.txz: Added.
This is required by the latest xfsprogs.
a/sysklogd-2.1.2-x86_64-2.txz: Rebuilt.
rc.syslog: fix lack of <CR> after startup output.
a/xfsprogs-5.10.0-x86_64-1.txz: Upgraded.
ap/vim-8.2.2151-x86_64-1.txz: Upgraded.
l/glib2-2.66.4-x86_64-1.txz: Upgraded.
l/imagemagick-7.0.10_50-x86_64-1.txz: Upgraded.
l/python-requests-2.25.1-x86_64-1.txz: Upgraded.
l/qtkeychain-0.12.0-x86_64-1.txz: Upgraded.
l/zstd-1.4.7-x86_64-1.txz: Upgraded.
n/bind-9.16.10-x86_64-1.txz: Upgraded.
x/libwacom-1.7-x86_64-1.txz: Upgraded.
x/xorg-server-1.20.10-x86_64-2.txz: Rebuilt.
Recompiled to find DRI modules in the new location.
x/xorg-server-xephyr-1.20.10-x86_64-2.txz: Rebuilt.
x/xorg-server-xnest-1.20.10-x86_64-2.txz: Rebuilt.
x/xorg-server-xvfb-1.20.10-x86_64-2.txz: Rebuilt.
x/xorg-server-xwayland-1.20.10-x86_64-2.txz: Rebuilt.
xap/vim-gvim-8.2.2151-x86_64-1.txz: Upgraded.
extra/pure-alsa-system/kde-runtime-4.14.3-x86_64-8_alsa.txz: Removed.
I'm starting to learn towards removing all of these packages as there are
ways to configure PulseAudio to get out of the way. See (for example) this
article mentioned in a blog post by alienBOB:
https://wiki.archlinux.org/index.php/PulseAudio/Examples#PulseAudio_as_a_minimal_unintrusive_dumb_pipe_to_ALSA
I'm still poking at that other kernel, but it shouldn't take too much longer.
a/kernel-generic-5.4.84-x86_64-1.txz: Upgraded.
a/kernel-huge-5.4.84-x86_64-1.txz: Upgraded.
a/kernel-modules-5.4.84-x86_64-1.txz: Upgraded.
ap/rpm-4.16.1.2-x86_64-1.txz: Upgraded.
d/cmake-3.19.2-x86_64-1.txz: Upgraded.
d/kernel-headers-5.4.84-x86-1.txz: Upgraded.
k/kernel-source-5.4.84-noarch-1.txz: Upgraded.
l/utf8proc-2.6.1-x86_64-1.txz: Upgraded.
x/fonttosfnt-1.2.1-x86_64-1.txz: Upgraded.
x/mesa-20.3.1-x86_64-1.txz: Upgraded.
Don't specify dri-drivers-path. Thanks to 414N.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
d/python-pip-20.3.3-x86_64-1.txz: Upgraded.
kde/sddm-0.19.0-x86_64-3.txz: Rebuilt.
In SDDM's Xsession script, don't source $HOME/.xsession as this may launch
the wrong session type or cause dbus-run-session to start twice breaking
logout.
l/orc-0.4.32-x86_64-1.txz: Upgraded.
l/pipewire-0.3.18-x86_64-1.txz: Upgraded.
l/python-chardet-4.0.0-x86_64-1.txz: Upgraded.
l/python-packaging-20.8-x86_64-1.txz: Upgraded.
n/samba-4.13.3-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-78.6.0-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/78.6.0/releasenotes/
xfce/mousepad-0.5.0-x86_64-1.txz: Upgraded.
a/elogind-243.7-x86_64-2.txz: Rebuilt.
Moved default udev rules to /lib/udev/rules.d/. Thanks to Robby Workman.
Added /usr/share/polkit-1/rules.d/10-enable-session-power.rules.
a/glibc-zoneinfo-2020d-noarch-2.txz: Rebuilt.
Make /etc/localtime a symlink pointing into /usr/share/zoneinfo. If you
have /usr on a separate partition, this might cause time problems prior
to /usr being mounted (I recommend *not* making /usr a separate partition).
But if you insist for some reason, you can probably work around it by
adding the pointed-to directory and timezone file to your empty pre-mounted
/usr directory.
a/upower-0.99.11-x86_64-2.txz: Rebuilt.
Added /usr/share/polkit-1/rules.d/10-enable-upower-suspend.rules.
d/autoconf-2.70-noarch-1.txz: Upgraded.
d/gnucobol-3.1.1-x86_64-1.txz: Upgraded.
kde/powerdevil-5.20.4-x86_64-2.txz: Rebuilt.
Moved 10-enable-powerdevil-discrete-gpu.rules.new to
/usr/share/polkit-1/rules.d/. Thanks to Robby Workman.
Moved 10-enable-session-power.rules to the elogind package.
Moved 10-enable-upower-suspend.rules to the upower package.
Thanks to GazL.
l/jasper-2.0.23-x86_64-1.txz: Upgraded.
Fix heap-overflow in cp_create() in jpc_enc.c.
For more information, see:
https://github.com/jasper-software/jasper/issues/252https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27828
(* Security fix *)
l/sbc-1.5-x86_64-1.txz: Upgraded.
n/curl-7.74.0-x86_64-1.txz: Upgraded.
This release includes the following security related bugfixes:
Inferior OCSP verification [93]
FTP wildcard stack overflow [95]
Trusting FTP PASV responses [97]
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
(* Security fix *)
xap/xscreensaver-5.45-x86_64-1.txz: Upgraded.
xfce/Greybird-3.22.13-noarch-1.txz: Upgraded.
a/hwdata-0.342-noarch-1.txz: Upgraded.
a/pam-1.5.1-x86_64-1.txz: Upgraded.
ap/sqlite-3.34.0-x86_64-1.txz: Upgraded.
l/libarchive-3.5.0-x86_64-1.txz: Upgraded.
x/fontconfig-2.13.92-x86_64-1.txz: Upgraded.
I'm pretty sure there was a good reason to switch to 2.13.92 on the devel
release path, but I'm not sure the same can be said about 2.13.93. We'll
stick with this one for now until there's a stable release or another good
reason to bump it.
x/xorg-server-1.20.10-x86_64-1.txz: Upgraded.
x/xorg-server-xephyr-1.20.10-x86_64-1.txz: Upgraded.
x/xorg-server-xnest-1.20.10-x86_64-1.txz: Upgraded.
x/xorg-server-xvfb-1.20.10-x86_64-1.txz: Upgraded.
x/xorg-server-xwayland-1.20.10-x86_64-1.txz: Upgraded.
xap/gnuplot-5.4.1-x86_64-1.txz: Upgraded.
a/kernel-firmware-20201130_7455a36-noarch-1.txz: Upgraded.
ap/sudo-1.9.4-x86_64-1.txz: Upgraded.
d/python-pip-20.3-x86_64-1.txz: Upgraded.
d/rinutils-0.8.0-x86_64-1.txz: Upgraded.
l/imagemagick-7.0.10_45-x86_64-1.txz: Upgraded.
n/cyrus-sasl-2.1.27-x86_64-5.txz: Rebuilt.
rc.saslauthd: start with -a pam -c
Rebuilt with --with-ldap and include LDAP_SASLAUTHD documentation.
Thanks to voegelas.
ap/qpdf-10.0.4-x86_64-1.txz: Upgraded.
d/cmake-3.19.1-x86_64-1.txz: Upgraded.
n/bind-9.16.9-x86_64-1.txz: Upgraded.
This update fixes bugs, including a denial-of-service security issue:
After a Negative Trust Anchor (NTA) is added, BIND performs periodic
checks to see if it is still necessary. If BIND encountered a failure
while creating a query to perform such a check, it attempted to
dereference a NULL pointer, resulting in a crash. [GL #2244]
(* Security fix *)
n/cifs-utils-6.11-x86_64-2.txz: Rebuilt.
Patched to fix mounting CIFS shares when linked with libcap-ng-0.8.1.
Thanks to marrowsuck.
a/util-linux-2.36.1-x86_64-1.txz: Upgraded.
l/imagemagick-7.0.10_38-x86_64-1.txz: Upgraded.
l/lz4-1.9.3-x86_64-1.txz: Upgraded.
l/mozjs78-78.5.0esr-x86_64-1.txz: Upgraded.
n/ModemManager-1.14.8-x86_64-1.txz: Upgraded.
n/mutt-2.0.1-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-78.5.0esr-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/78.5.0/releasenotes/
d/perl-5.32.0-x86_64-3.txz: Rebuilt.
Upgraded: MIME-Base64-3.16, URI-5.05.
Added: Module-Runtime-0.016, Moo-2.004000, Path-Tiny-0.114,
Sub-Quote-2.006006, Template-Toolkit-3.009.
d/rinutils-0.6.0-x86_64-1.txz: Added.
Needed for freecell-solver.
l/freecell-solver-6.2.0-x86_64-1.txz: Added.
Needed for kpat.
l/libunwind-1.5.0-x86_64-1.txz: Upgraded.
l/python-pysol_cards-0.10.1-x86_64-1.txz: Added.
Needed for freecell-solver.
l/python-random2-1.0.1-x86_64-1.txz: Added.
Needed for freecell-solver.
l/python-requests-2.25.0-x86_64-1.txz: Upgraded.
l/python-urllib3-1.26.1-x86_64-1.txz: Upgraded.
x/xterm-362-x86_64-1.txz: Upgraded.
testing/packages/vtown/kde/kpat-20.08.3-x86_64-1_vtown_1.txz: Added.
This seems to be getting a lot of love on LQ, so I'll add it in spite of
(or perhaps because of) the effort required to prop it up.
Digikam is still too big though.
n/mutt-2.0.0-x86_64-1.txz: Upgraded.
n/ntp-4.2.8p15-x86_64-4.txz: Rebuilt.
Make a /usr/bin/ntpdate symlink so that Plasma 5 can find it.
Thanks to alienBOB.
n/postfix-3.5.8-x86_64-1.txz: Upgraded.
d/rust-1.47.0-x86_64-2.txz: Rebuilt.
Switch back to Rust 1.47.0 now that patches are available to fix Firefox
and Thunderbird.
xap/mozilla-thunderbird-78.4.1-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/78.4.1/releasenotes/
a/hwdata-0.341-noarch-1.txz: Upgraded.
a/kernel-generic-5.4.75-x86_64-1.txz: Upgraded.
a/kernel-huge-5.4.75-x86_64-1.txz: Upgraded.
a/kernel-modules-5.4.75-x86_64-1.txz: Upgraded.
d/kernel-headers-5.4.75-x86-1.txz: Upgraded.
k/kernel-source-5.4.75-noarch-1.txz: Upgraded.
l/oniguruma-6.9.6-x86_64-1.txz: Upgraded.
l/openal-soft-1.21.0-x86_64-1.txz: Upgraded.
n/ca-certificates-20201105-noarch-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
x/libwacom-1.6-x86_64-1.txz: Upgraded.
x/xkbcomp-1.4.4-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/vtown/kde/sddm-0.18.1-x86_64-1_vtown_3.txz: Rebuilt.
Fixed man page installation directory. Thanks to chrisretusn.
Xsetup: include comments.
Create /var/lib/sddm at build time.
Generate /etc/sddm.conf at build time.
Do not mess with users/groups in doinst.sh. These are expected to exist.
Do not add MinimumVT=7 to sddm.conf, as it is already included by default.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/libblockdev-2.24-x86_64-1.txz: Added.
This is required by the new version of udisks2.
a/libbytesize-2.4-x86_64-1.txz: Added.
This is required by the new version of udisks2.
a/ndctl-70.1-x86_64-1.txz: Added.
This is required by libblockdev, which in turn is required by the new
version of udisks2.
a/udisks2-2.9.1-x86_64-1.txz: Upgraded.
Thanks to Robby Workman for this update and the deps for it.
a/volume_key-0.3.12-x86_64-1.txz: Added.
This is required by the new version of udisks2.
ap/qpdf-10.0.2-x86_64-1.txz: Upgraded.
n/openvpn-2.5.0-x86_64-1.txz: Upgraded.
n/php-7.4.12-x86_64-1.txz: Upgraded.
l/libbluray-1.2.1-x86_64-1.txz: Upgraded.
n/libassuan-2.5.4-x86_64-1.txz: Upgraded.
n/nfs-utils-2.5.2-x86_64-2.txz: Rebuilt.
Comment out debugging lines from exportfs.c, probably left in by mistake.
Thanks to upnort.
x/libva-2.9.1-x86_64-1.txz: Upgraded.
a/aaa_terminfo-6.2_20201024-x86_64-1.txz: Upgraded.
a/libpwquality-1.4.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
a/util-linux-2.36-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
ap/hplip-3.20.6-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.9.0.
ap/inxi-20201016_e45c6960-noarch-1.txz: Upgraded.
ap/linuxdoc-tools-0.9.73-x86_64-7.txz: Rebuilt.
ap/lxc-2.0.11_fad08f383-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.9.0.
ap/neofetch-20201016_f0b16b6-noarch-1.txz: Upgraded.
ap/rpm-4.16.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
ap/undervolt-20201024_13fa33d-x86_64-1.txz: Upgraded.
Compiled against python3-3.9.0.
d/Cython-0.29.21-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
d/distcc-3.3.3-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.9.0.
d/gdb-10.1-x86_64-1.txz: Upgraded.
Compiled against python3-3.9.0.
d/gyp-20200512_caa60026-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
d/llvm-11.0.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
d/mercurial-5.5.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
d/meson-0.55.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
d/python-pip-20.2.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
d/python-setuptools-50.3.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
d/python3-3.9.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
This update is a bit painful in that it will require most third-party
packages using python3 to be recompiled. But, we needed to get this out
of the way before moving on to bigger and better things. :-)
d/scons-4.0.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
kde/pykde4-4.14.3-x86_64-11.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/M2Crypto-0.36.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/Mako-1.1.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/PyQt-4.12.3-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/PyQt5-5.15.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/QScintilla-2.11.5-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/boost-1.74.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/brotli-1.0.9-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/dbus-python-1.2.16-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/gexiv2-0.12.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/gobject-introspection-1.64.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/libcaca-0.99.beta19-x86_64-7.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/libcap-ng-0.8-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/libimobiledevice-20200615_4791a82-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/libproxy-0.4.15-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/libwebp-1.1.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/libxml2-2.9.10-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/ncurses-6.2_20201024-x86_64-1.txz: Upgraded.
l/newt-0.52.21-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/pycairo-1.20.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/pycups-2.0.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/pycurl-7.43.0.6-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/pygobject-2.28.7-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/pygobject3-3.36.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/pyparsing-2.4.7-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-appdirs-1.4.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-certifi-2020.6.20-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-chardet-3.0.4-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-distro-1.5.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-docutils-0.16-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-future-0.18.2-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-idna-2.10-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-notify2-0.3.1-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-packaging-20.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-pillow-8.0.1-x86_64-1.txz: Upgraded.
Compiled against python3-3.9.0.
l/python-ply-3.11-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-pygments-2.7.2-x86_64-1.txz: Upgraded.
Compiled against python3-3.9.0.
l/python-requests-2.24.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-sane-2.8.3-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-six-1.15.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/python-urllib3-1.25.11-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/sip-4.19.23-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/system-config-printer-1.5.12-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/talloc-2.3.1-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/tdb-1.4.3-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.9.0.
l/tevent-0.10.2-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.9.0.
n/bind-9.16.8-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
n/epic5-2.1.2-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.9.0.
n/fetchmail-6.4.12-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
n/getmail-6.03-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
n/gpgme-1.14.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
n/libgcrypt-1.8.7-x86_64-1.txz: Upgraded.
n/net-snmp-5.9-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.9.0.
n/obexftp-0.24.2-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.9.0.
n/pssh-2.3.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
n/samba-4.13.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.9.0.
x/pyxdg-0.27-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
x/xcb-proto-1.14.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.9.0.
xap/blueman-2.1.3-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.9.0.
xap/hexchat-2.14.3-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.9.0.
a/aaa_elflibs-15.0-x86_64-25.txz: Rebuilt.
Add back libffi.so.6.0.4.
a/less-563-x86_64-1.txz: Upgraded.
a/splitvt-1.6.6-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
a/sysvinit-scripts-2.1-noarch-36.txz: Rebuilt.
rc.M: before starting rc.elogind, also check for /bin/loginctl.
kde/kdelibs-4.14.38-x86_64-8.txz: Rebuilt.
Use a better patch to support OpenSSL 1.1.x. Thanks to ifo.
l/mozilla-nss-3.57-x86_64-1.txz: Upgraded.
This package has not been a security fix since NSS 3.23, so we'll drop it
back to the previous version to work around an SSL handshake failure when
attempting to connect to talk.google.com with pidgin. Once this issue has
been addressed upstream we'll look into bumping the package again.
Thanks to Jefferson for the bug report.
n/bind-9.16.8-x86_64-1.txz: Upgraded.
n/nfs-utils-2.5.2-x86_64-1.txz: Upgraded.
ap/nvme-cli-1.13-x86_64-1.txz: Upgraded.
l/libnice-0.1.18-x86_64-1.txz: Upgraded.
x/fonttosfnt-1.2.0-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-78.4.0-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/78.4.0/releasenotes/
a/aaa_elflibs-15.0-x86_64-24.txz: Rebuilt.
Don't skip this one as it contains the libnsl-2.30.so built by glibc that
it's likely many third-party packages will be linking to for some time.
Upgraded: libcap.so.2.44, libelf-0.181.so, libpopt.so.0.0.1,
libcurl.so.4.7.0, libexpat.so.1.6.12, libglib-2.0.so.0.6600.2,
libgmodule-2.0.so.0.6600.2, libgobject-2.0.so.0.6600.2,
libgthread-2.0.so.0.6600.2, libidn.so.12.6.1, liblber-2.4.so.2.11.2,
libldap-2.4.so.2.11.2, libmpc.so.3.2.0, libmpfr.so.6.1.0, libpsl.so.5.3.3.
Added: libnsl-2.30.so, libnsl.so.2.0.1.
Removed: libdvdread.so.4.2.0, libicudata.so.65.1, libicui18n.so.65.1,
libicuio.so.65.1, libicutest.so.65.1, libicutu.so.65.1, libicuuc.so.65.1.
a/glibc-solibs-2.30-x86_64-2.txz: Rebuilt.
a/pam-1.4.0-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
a/quota-4.05-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
a/xfsprogs-5.9.0-x86_64-1.txz: Upgraded.
ap/linuxdoc-tools-0.9.73-x86_64-6.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
ap/vorbis-tools-1.4.0-x86_64-5.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
d/cvs-1.11.23-x86_64-5.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
d/git-2.29.0-x86_64-1.txz: Upgraded.
d/perl-5.32.0-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
d/python2-2.7.18-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
d/python3-3.8.6-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
d/rcs-5.10.0-x86_64-1.txz: Upgraded.
d/subversion-1.14.0-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
kde/kdelibs-4.14.38-x86_64-7.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
kde/kopete-4.14.3-x86_64-9.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
kde/perlkde-4.14.3-x86_64-10.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
kde/perlqt-4.14.3-x86_64-11.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
l/freetype-2.10.4-x86_64-1.txz: Upgraded.
Fix heap buffer overflow in embedded PNG bitmap handling.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999
(* Security fix *)
l/glibc-2.30-x86_64-2.txz: Rebuilt.
Rebuilt without the --enable-obsolete-nsl and --enable-obsolete-rpc options.
This change has been somewhat overdue, but since glibc was providing these
options we just continued to use them here - however, newer versions of
glibc have dropped this code entirely and it is expected to be provided in
standalone packages. So we'll do that to make things easier moving forward.
Please note that libnss_nisplus has been unmaintained upstream for quite
some time, is considered obsolete, and no longer compiles. As a result it
will no longer be provided... but there are better options these days.
l/glibc-i18n-2.30-x86_64-2.txz: Rebuilt.
l/glibc-profile-2.30-x86_64-2.txz: Rebuilt.
l/gmime-3.2.7-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
l/libasyncns-0.8-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
l/libnsl-1.3.0-x86_64-1.txz: Added.
This provides the standalone libnsl.
Shared library .so-version bump.
l/libnss_nis-3.1-x86_64-1.txz: Added.
l/loudmouth-1.5.3-x86_64-5.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
l/rpcsvc-proto-1.4.2-x86_64-1.txz: Added.
n/autofs-5.1.6-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/epic5-2.1.2-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/irssi-1.2.2-x86_64-4.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/net-snmp-5.9-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/netatalk-3.1.12-x86_64-4.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/ntp-4.2.8p15-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/openldap-2.4.54-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/openssh-8.4p1-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/openvpn-2.4.9-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/postfix-3.5.7-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/ppp-2.4.8-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/procmail-3.22-x86_64-4.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/proftpd-1.3.7a-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/rpcbind-1.2.5-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/samba-4.13.0-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/socat-1.7.3.4-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/stunnel-5.57-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/tcp_wrappers-7.6-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/tftp-hpa-5.2-x86_64-6.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/uucp-1.07-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/vsftpd-3.0.3-x86_64-7.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
n/yptools-4.2.3-x86_64-1.txz: Upgraded.
Compiled against libnsl-1.3.0.
xap/gftp-2.0.19-x86_64-9.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
xap/pidgin-2.14.1-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
xap/rxvt-unicode-9.22-x86_64-9.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
xap/xine-lib-1.2.10-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
xap/xine-ui-0.99.12-x86_64-2.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
extra/pure-alsa-system/xine-lib-1.2.10-x86_64-3_alsa.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
extra/sendmail/sendmail-8.16.1-x86_64-3.txz: Rebuilt.
Recompiled against libnsl-1.3.0.
extra/sendmail/sendmail-cf-8.16.1-noarch-3.txz: Rebuilt.
a/glibc-zoneinfo-2020c-noarch-1.txz: Upgraded.
This package provides the latest timezone updates.
d/ccache-4.0-x86_64-1.txz: Upgraded.
Please note that the default cache directory has been changed to
$HOME/.cache/ccache and the default config file has been changed to
$HOME/.config/ccache/ccache.conf. You'll probably want to move your
existing config file if you've set any options, and then clear out
the old location of $HOME/.ccache to avoid wasting storage space.
d/python-pip-20.2.4-x86_64-1.txz: Upgraded.
d/python-setuptools-50.3.2-x86_64-1.txz: Upgraded.
l/glib2-2.66.2-x86_64-1.txz: Upgraded.
l/mozjs78-78.4.0esr-x86_64-1.txz: Upgraded.
l/python-urllib3-1.25.11-x86_64-1.txz: Upgraded.
x/pyxdg-0.27-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-78.4.0esr-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/78.4.0/releasenotes/
d/rust-1.46.0-x86_64-2.txz: Rebuilt.
Recompiled against llvm-11.0.0.
Dropped back to the previous version of Rust, since the Mozilla things
evidently aren't ready for the latest one.
n/ca-certificates-20201016-noarch-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
n/ethtool-5.9-x86_64-1.txz: Upgraded.
n/iproute2-5.9.0-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-78.3.3-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/78.3.3/releasenotes/
a/glibc-zoneinfo-2020b-noarch-2.txz: Rebuilt.
Default to more bloated (but more compatible) "fat" format with zic.
This was the default prior to tzcode2020b.
ap/gphoto2-2.5.26-x86_64-1.txz: Upgraded.
l/freetype-2.10.3-x86_64-1.txz: Upgraded.
l/imagemagick-7.0.10_34-x86_64-1.txz: Upgraded.
l/libgphoto2-2.5.26-x86_64-1.txz: Upgraded.
l/libmtp-1.1.18-x86_64-1.txz: Upgraded.
n/nmap-7.91-x86_64-1.txz: Upgraded.
n/stunnel-5.57-x86_64-1.txz: Upgraded.
a/libgudev-234-x86_64-1.txz: Upgraded.
ap/htop-3.0.2-x86_64-1.txz: Upgraded.
l/glib2-2.66.0-x86_64-2.txz: Rebuilt.
Build against system gtk-doc and don't bundle a newer version. You'll need
to reinstall the linuxdoc-tools package to restore the correct version of
gtk-doc. Thanks to chrisVV.
l/mozjs68-68.11.0esr-x86_64-2.txz: Removed.
l/mozjs78-78.2.0esr-x86_64-1.txz: Added.
This is needed by the new version of polkit.
l/polkit-0.118-x86_64-1.txz: Upgraded.
This requires the new mozjs78 package.
x/libva-2.9.0-x86_64-1.txz: Upgraded.
x/libva-utils-2.9.0-x86_64-1.txz: Upgraded.
l/gst-plugins-base-1.18.0-x86_64-1.txz: Upgraded.
l/gst-plugins-good-1.18.0-x86_64-1.txz: Upgraded.
l/gst-plugins-libav-1.18.0-x86_64-1.txz: Upgraded.
l/gstreamer-1.18.0-x86_64-1.txz: Upgraded.
l/jasper-2.0.20-x86_64-1.txz: Upgraded.
This update fixes a new varient of CVE-2016-9398 (denial-of-service).
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9398
(* Security fix *)
extra/pure-alsa-system/gst-plugins-good-1.18.0-x86_64-1_alsa.txz: Upgraded.
a/mt-st-1.4-x86_64-1.txz: Upgraded.
n/mutt-1.14.7-x86_64-1.txz: Upgraded.
n/openldap-2.4.52-x86_64-1.txz: Upgraded.
testing/packages/mozilla-thunderbird-78.2.1-x86_64-1.txz: Upgraded.
This version enables OpenPGP by default, disables less secure algorithms,
and fixes some OpenPGP related bugs.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/78.2.1/releasenotes/
x/xorg-server-1.20.9-x86_64-2.txz: Rebuilt.
Move /usr/share/fonts/misc to the head of the default FontPath.
Thanks to EdGr and GazL.
This fixes gv crashing at startup. Thanks to EdGr and gus3 for the bug report.
x/xorg-server-xephyr-1.20.9-x86_64-2.txz: Rebuilt.
x/xorg-server-xnest-1.20.9-x86_64-2.txz: Rebuilt.
x/xorg-server-xvfb-1.20.9-x86_64-2.txz: Rebuilt.
x/xorg-server-xwayland-1.20.9-x86_64-2.txz: Rebuilt.
a/kernel-firmware-20200824_74bd44f-noarch-1.txz: Upgraded.
ap/vim-8.2.1522-x86_64-1.txz: Upgraded.
l/libuv-1.39.0-x86_64-1.txz: Upgraded.
x/libX11-1.6.12-x86_64-1.txz: Upgraded.
x/xorg-server-1.20.9-x86_64-1.txz: Upgraded.
x/xorg-server-xephyr-1.20.9-x86_64-1.txz: Upgraded.
x/xorg-server-xnest-1.20.9-x86_64-1.txz: Upgraded.
x/xorg-server-xvfb-1.20.9-x86_64-1.txz: Upgraded.
x/xorg-server-xwayland-1.20.9-x86_64-1.txz: Upgraded.
xap/vim-gvim-8.2.1522-x86_64-1.txz: Upgraded.
testing/packages/mozilla-thunderbird-78.2.0-x86_64-1.txz: Added.
https://www.mozilla.org/en-US/thunderbird/78.2.0/releasenotes/
I'm putting this into /testing first so that any problems with OpenPGP can
be reported before it goes into the main tree. Here's the current status
from the release notes and Thunderbird:OpenPGP wiki page:
Add-on support: As of version 78.0, Thunderbird only supports MailExtensions.
Your favorite add-ons may not have been updated for compatibility. At this
time, users of the Enigmail Add-on should not update to Thunderbird 78.
OpenPGP in Thunderbird 78.2.0 has reached feature complete state, but it's
still disabled by default, to allow more time for testing, correctness, and
localization. See the wiki for how to enable and help with testing. If you
use OpenPGP for non-critical purposes, then you are welcome to enable it
manually and help with testing. To enable it in Thunderbird 78.0, use the
config editor and change the value of preference mail.openpgp.enable to true,
then restart Thunderbird. If you are running 78.x and have the previous
Enigmail Add-on installed, then Enigmail will update to version 2.2.x, which
is a minimal release that helps you to migrate the keys and settings to
Thunderbird 78. If you haven't used Enigmail previously, you can enable
OpenPGP for an email account in account settings.
See the release notes for more complete information about testing and
reporting bugs.
ap/nano-5.2-x86_64-1.txz: Upgraded.
d/doxygen-1.8.20-x86_64-1.txz: Upgraded.
d/nasm-2.15.03-x86_64-1.txz: Upgraded.
Reverted to previous nasm since the new version has problems with some of
the assembly included in Firefox.
d/parallel-20200822-noarch-1.txz: Upgraded.
l/libcap-ng-0.7.11-x86_64-1.txz: Upgraded.
n/libgpg-error-1.39-x86_64-1.txz: Upgraded.
n/libqmi-1.26.4-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-78.2.0esr-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/78.2.0/releasenotes/
(* Security fix *)
xap/sane-1.0.31-x86_64-1.txz: Upgraded.
ap/hplip-3.20.6-x86_64-2.txz: Rebuilt.
Recompiled against net-snmp-5.9.
ap/pamixer-1.4-x86_64-6.txz: Rebuilt.
Recompiled against boost-1.74.0.
ap/sqlite-3.33.0-x86_64-1.txz: Upgraded.
kde/calligra-2.9.11-x86_64-37.txz: Rebuilt.
Recompiled against boost-1.74.0.
l/akonadi-1.13.0-x86_64-16.txz: Rebuilt.
Recompiled against boost-1.74.0.
l/boost-1.74.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libcroco-0.6.13-x86_64-1.txz: Removed.
n/getmail-6.02-x86_64-1.txz: Upgraded.
This is a new version that uses Python 3. The ChangeLog warns that it "loses
some backward compatibility"... please report any bugs.
n/net-snmp-5.9-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
n/ntp-4.2.8p15-x86_64-2.txz: Rebuilt.
Recompiled against net-snmp-5.9.
n/php-7.4.9-x86_64-2.txz: Rebuilt.
Recompiled against net-snmp-5.9.
xap/sane-1.0.30-x86_64-2.txz: Rebuilt.
Recompiled against net-snmp-5.9.
xap/ssr-0.4.2-x86_64-1.txz: Added.
d/python-setuptools-49.6.0-x86_64-1.txz: Upgraded.
l/harfbuzz-2.7.1-x86_64-1.txz: Upgraded.
l/pango-1.46.0-x86_64-1.txz: Upgraded.
It would appear that there's no chance of upstream bringing back support for
bitmapped fonts, so it's time to stop dragging our feet and just accept this
upgrade. At least they've fixed it to provide readable (though badly spaced)
text for unsupported fonts. If you're using Terminus, I'd suggest switching
to the Hack font as a good replacement.
n/lftp-4.9.2-x86_64-1.txz: Upgraded.
xfce/garcon-0.6.4-x86_64-1.txz: Upgraded.
Switched back to 0.6.4 since that is actually the latest stable release.
xfce/tumbler-0.2.9-x86_64-1.txz: Upgraded.
Switched back to 0.2.9 since that is actually the latest stable release.
a/sysvinit-scripts-2.1-noarch-35.txz: Rebuilt.
rc.6: don't try to turn off swap if none is active. Thanks to stf92.
ap/man-pages-5.08-noarch-1.txz: Upgraded.
d/python-setuptools-49.4.0-x86_64-1.txz: Upgraded.
x/libinput-1.16.1-x86_64-1.txz: Upgraded.
xfce/tumbler-0.3.0-x86_64-1.txz: Upgraded.
ap/vim-8.2.1361-x86_64-1.txz: Upgraded.
d/mercurial-5.5-x86_64-1.txz: Upgraded.
d/python-pip-20.2.1-x86_64-1.txz: Upgraded.
l/gegl-0.4.26-x86_64-1.txz: Upgraded.
n/php-7.4.9-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
Phar: Use of freed hash key in the phar_parse_zipfile function.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7068
(* Security fix *)
xap/vim-gvim-8.2.1361-x86_64-1.txz: Upgraded.
a/cryptsetup-2.3.3-x86_64-2.txz: Rebuilt.
Recompiled against json-c-0.15_20200726.
l/imagemagick-7.0.10_25-x86_64-1.txz: Upgraded.
l/json-c-0.15_20200726-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/urwid-1.0.3-x86_64-5.txz: Removed.
This is an ancient version that was only used by wicd.
n/bind-9.16.5-x86_64-2.txz: Rebuilt.
Recompiled against json-c-0.15_20200726.
x/libmypaint-1.6.1-x86_64-2.txz: Rebuilt.
Recompiled against json-c-0.15_20200726.
xap/gimp-2.10.20-x86_64-2.txz: Rebuilt.
Recompiled against json-c-0.15_20200726.
extra/wicd/wicd-1.7.4-x86_64-3.txz: Removed.
This is unmaintained, possibly insecure, and doesn't work with Python
versions newer than 2.7.18. NetworkManager is a better choice these days.
a/kernel-generic-5.4.54-x86_64-1.txz: Upgraded.
a/kernel-huge-5.4.54-x86_64-1.txz: Upgraded.
a/kernel-modules-5.4.54-x86_64-1.txz: Upgraded.
ap/inxi-20200728_6ce9149b-noarch-1.txz: Added.
A system information script. Not as flashy as neofetch, but with more useful
output options. Thanks to drgibbon for the suggestion.
ap/nano-5.0-x86_64-1.txz: Upgraded.
d/kernel-headers-5.4.54-x86-1.txz: Upgraded.
d/vala-0.48.8-x86_64-1.txz: Upgraded.
k/kernel-source-5.4.54-noarch-1.txz: Upgraded.
l/jasper-2.0.19-x86_64-1.txz: Upgraded.
x/hack-fonts-ttf-3.003-noarch-1.txz: Added.
Thanks to alienBOB.
x/noto-cjk-fonts-ttf-2.001-noarch-1.txz: Added.
Thanks to alienBOB.
x/noto-fonts-ttf-20171024-noarch-1.txz: Added.
Thanks to alienBOB.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
l/boost-1.73.0-x86_64-3.txz: Rebuilt.
Revert a change that broke building krita. Thanks to oneforall2.
l/libcap-2.41-x86_64-1.txz: Upgraded.
n/libqmi-1.26.2-x86_64-1.txz: Upgraded.
a/kernel-firmware-20200721_2b823fc-noarch-1.txz: Upgraded.
d/python3-3.8.5-x86_64-1.txz: Upgraded.
d/re2c-2.0-x86_64-1.txz: Upgraded.
l/farstream-0.2.9-x86_64-1.txz: Added.
Needed by pidgin-2.14.1.
l/libnice-0.1.17-x86_64-1.txz: Added.
Needed by farstream-0.2.9.
n/iptraf-ng-1.2.1-x86_64-1.txz: Upgraded.
n/proftpd-1.3.7a-x86_64-1.txz: Upgraded.
xap/pidgin-2.14.1-x86_64-1.txz: Upgraded.
This update adds support for voice and video via Farstream.
a/kernel-generic-5.4.51-x86_64-1.txz: Upgraded.
+EFI_CUSTOM_SSDT_OVERLAYS y
a/kernel-huge-5.4.51-x86_64-1.txz: Upgraded.
SPEAKUP y -> m
SPEAKUP_SYNTH_ACNTPC y -> m
SPEAKUP_SYNTH_ACNTSA y -> m
SPEAKUP_SYNTH_APOLLO y -> m
SPEAKUP_SYNTH_AUDPTR y -> m
SPEAKUP_SYNTH_BNS y -> m
SPEAKUP_SYNTH_DECEXT y -> m
SPEAKUP_SYNTH_DECTLK y -> m
SPEAKUP_SYNTH_DTLK y -> m
SPEAKUP_SYNTH_DUMMY y -> m
SPEAKUP_SYNTH_KEYPC y -> m
SPEAKUP_SYNTH_LTLK y -> m
SPEAKUP_SYNTH_SOFT y -> m
SPEAKUP_SYNTH_SPKOUT y -> m
SPEAKUP_SYNTH_TXPRT y -> m
+EFI_CUSTOM_SSDT_OVERLAYS y
a/kernel-modules-5.4.51-x86_64-1.txz: Upgraded.
ap/vim-8.2.1167-x86_64-1.txz: Upgraded.
d/Cython-0.29.21-x86_64-1.txz: Upgraded.
d/kernel-headers-5.4.51-x86-1.txz: Upgraded.
k/kernel-source-5.4.51-noarch-1.txz: Upgraded.
+EFI_CUSTOM_SSDT_OVERLAYS y
n/gnupg2-2.2.21-x86_64-1.txz: Upgraded.
x/mesa-20.1.3-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-78.0.2esr-x86_64-1.txz: Upgraded.
This release contains a security fix and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/78.0.2/releasenotes/https://www.mozilla.org/security/advisories/mfsa2020-28/
(* Security fix *)
xap/vim-gvim-8.2.1167-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
Speakup is included as modules which will need to be loaded manually,
for now at least.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
Speakup is included as modules which will need to be loaded manually,
for now at least.
d/mercurial-5.4.2-x86_64-1.txz: Upgraded.
d/nasm-2.15.02-x86_64-1.txz: Upgraded.
l/glib2-2.64.4-x86_64-1.txz: Upgraded.
n/samba-4.12.5-x86_64-1.txz: Upgraded.
x/libXaw3dXft-1.6.2g-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-68.10.0-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/68.10.0/releasenotes/
a/kernel-firmware-20200629_1a0c0c2-noarch-1.txz: Upgraded.
ap/mariadb-10.5.4-x86_64-2.txz: Rebuilt.
rc.mysqld: stop the database by PID to avoid improperly stopping other
instances that were not started by this script. Thanks to denydias.
d/vala-0.48.7-x86_64-1.txz: Upgraded.
l/opusfile-0.12-x86_64-1.txz: Upgraded.
n/ca-certificates-20200630-noarch-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
x/libwacom-1.4.1-x86_64-1.txz: Upgraded.
a/haveged-1.9.13-x86_64-1.txz: Upgraded.
a/util-linux-2.35.2-x86_64-5.txz: Rebuilt.
Also fix chsh when linked with libreadline. Thanks to Karel Zak.
l/gtk+3-3.24.21-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-68.10.0esr-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/68.10.0/releasenotes/
(* Security fix *)
a/sysklogd-2.1.2-x86_64-1.txz: Upgraded.
Make sure to move the .new init script and config into place for this.
ap/undervolt-20200612_07d0c70-x86_64-1.txz: Added.
l/popt-1.18-x86_64-1.txz: Upgraded.
x/libglvnd-1.3.2-x86_64-1.txz: Upgraded.
x/libva-2.8.0-x86_64-1.txz: Upgraded.
x/libva-utils-2.8.0-x86_64-1.txz: Upgraded.
ap/mariadb-10.5.4-x86_64-1.txz: Upgraded.
d/guile-3.0.4-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
Looks like the previous bump was a mistake:
This release fixes the SONAME of libguile-3.0.so, which was erroneously
bumped in 3.0.3 compared to 3.0.2. Distributions are strongly
encouraged to use 3.0.4 instead of 3.0.3.
d/make-4.2.1-x86_64-7.txz: Rebuilt.
Recompiled against guile-3.0.4.
l/libjpeg-turbo-2.0.5-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
Fixed an issue in the PPM reader that caused a buffer overrun in cjpeg,
TJBench, or the `tjLoadImage()` function if one of the values in a binary
PPM/PGM input file exceeded the maximum value defined in the file's header
and that maximum value was less than 255.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13790
(* Security fix *)
n/ModemManager-1.14.0-x86_64-1.txz: Upgraded.
n/curl-7.71.0-x86_64-1.txz: Upgraded.
This update fixes security issues:
curl overwrite local file with -J [111]
Partial password leak over DNS on HTTP redirect [48]
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
(* Security fix *)
n/gnutls-3.6.14-x86_64-3.txz: Rebuilt.
Recompiled against guile-3.0.4.
n/mutt-1.14.5-x86_64-1.txz: Upgraded.
x/libwacom-1.4-x86_64-1.txz: Upgraded.
ap/man-db-2.9.3-x86_64-1.txz: Upgraded.
ap/mariadb-10.4.13-x86_64-3.txz: Rebuilt.
Recompiled to pick up lz4 support. Thanks to Heinz Wiesinger.
ap/squashfs-tools-4.4-x86_64-2.txz: Rebuilt.
Added lz4 support. Thanks to Heinz Wiesinger.
d/ccache-3.7.10-x86_64-1.txz: Upgraded.
d/parallel-20200622-noarch-1.txz: Upgraded.
d/subversion-1.14.0-x86_64-2.txz: Rebuilt.
Use the system lz4 library. Thanks to Heinz Wiesinger.
l/imagemagick-7.0.10_21-x86_64-1.txz: Upgraded.
l/libarchive-3.4.3-x86_64-2.txz: Rebuilt.
Recompiled to pick up lz4 support. Thanks to Heinz Wiesinger.
l/lz4-1.9.2-x86_64-1.txz: Added.
This is a new dependency for dovecot, libarchive, mariadb, rsync,
squashfs-tools, subversion, and zstd. Thanks to Heinz Wiesinger.
l/xxHash-0.7.3-x86_64-1.txz: Added.
This is a new dependency for rsync.
l/zstd-1.4.5-x86_64-2.txz: Rebuilt.
Recompiled to pick up lz4 support. Thanks to Heinz Wiesinger.
n/dovecot-2.3.10.1-x86_64-2.txz: Rebuilt.
Recompiled to pick up lz4 support. Thanks to Heinz Wiesinger.
n/libmbim-1.24.0-x86_64-1.txz: Upgraded.
n/nfs-utils-2.5.1-x86_64-1.txz: Upgraded.
n/ntp-4.2.8p15-x86_64-1.txz: Upgraded.
This release fixes one vulnerability: Associations that use CMAC
authentication between ntpd from versions 4.2.8p11/4.3.97 and
4.2.8p14/4.3.100 will leak a small amount of memory for each packet.
Eventually, ntpd will run out of memory and abort.
(* Security fix *)
n/rsync-3.2.1-x86_64-1.txz: Upgraded.
Please note that this update requires the new packages xxHash and lz4.
t/texlive-2020.200608-x86_64-1.txz: Upgraded.
Thanks to Johannes Schoepfer.
xap/blueman-2.1.3-x86_64-2.txz: Rebuilt.
As a matter of policy and since the rule already exists in
/usr/share/polkit-1/rules.d/, we should not install a rules file in /etc.
Note that since the file was installed as a .new, upgrading the package
will not remove it and it will need to be removed manually. It's harmless
if it remains, though.
Thanks to Robby Workman.
xap/network-manager-applet-1.18.0-x86_64-1.txz: Upgraded.
a/haveged-1.9.12-x86_64-1.txz: Upgraded.
a/kernel-firmware-20200619_3890db3-noarch-1.txz: Upgraded.
a/sysvinit-scripts-2.1-noarch-34.txz: Rebuilt.
rc.M: check for elogind first so that we can ignore a stale CK2 package.
ap/sudo-1.9.1-x86_64-1.txz: Upgraded.
l/alsa-lib-1.2.3.1-x86_64-1.txz: Upgraded.
l/desktop-file-utils-0.26-x86_64-1.txz: Upgraded.
n/mutt-1.14.4-x86_64-1.txz: Upgraded.
x/libinput-1.15.6-x86_64-1.txz: Upgraded.
x/xinit-1.4.1-x86_64-2.txz: Rebuilt.
When using elogind, start the session on the current console.
Thanks to alienBOB.
a/kernel-generic-5.4.47-x86_64-1.txz: Upgraded.
a/kernel-huge-5.4.47-x86_64-1.txz: Upgraded.
a/kernel-modules-5.4.47-x86_64-1.txz: Upgraded.
a/sysvinit-scripts-2.1-noarch-33.txz: Rebuilt.
rc.M: add support for elogind. Thanks to alienBOB.
a/util-linux-2.35.2-x86_64-3.txz: Rebuilt.
/etc/pam.d/login: support pam_elogind.so. Thanks to alienBOB.
ap/sqlite-3.32.3-x86_64-1.txz: Upgraded.
d/kernel-headers-5.4.47-x86-1.txz: Upgraded.
d/rust-1.44.1-x86_64-1.txz: Upgraded.
k/kernel-source-5.4.47-noarch-1.txz: Upgraded.
n/bind-9.16.4-x86_64-1.txz: Upgraded.
This update fixes two security issues:
It was possible to trigger an INSIST when determining whether a record would
fit into a TCP message buffer.
It was possible to trigger an INSIST in lib/dns/rbtdb.c:new_reference() with
a particular zone content and query patterns.
For more information, see:
https://kb.isc.org/docs/cve-2020-8618https://kb.isc.org/docs/cve-2020-8619https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8618https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8619
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/shadow-4.8.1-x86_64-10.txz: Rebuilt.
system-auth: auth required pam_unix.so [...], otherwise the stack exits
before pam_gnome_keyring.so executes. Thanks to pyllyukko.
Get rid of "auth required pam_deny.so" which seems like a mistake.
Still pending: consider GazL's comments on moving stuff out of system-auth.
a/upower-0.9.23-x86_64-5.txz: Rebuilt.
Recompiled against libimobiledevice-20200615_4791a82 and libplist-2.2.0.
The renaming mess initiated by libplist required a rebuild on this one to
keep things consistent for now, but don't worry - we aren't going to be
sticking to this version for long or anything.
ap/hplip-3.20.6-x86_64-1.txz: Upgraded.
ap/usbmuxd-20200615_3daa1e9-x86_64-1.txz: Upgraded.
Compiled against libimobiledevice-20200615_4791a82 and libplist-2.2.0.
d/bison-3.6.4-x86_64-1.txz: Upgraded.
d/meson-0.54.3-x86_64-1.txz: Upgraded.
d/python-setuptools-47.3.0-x86_64-1.txz: Upgraded.
l/ffmpeg-4.3-x86_64-1.txz: Upgraded.
l/gvfs-1.44.1-x86_64-2.txz: Rebuilt.
Recompiled against libimobiledevice-20200615_4791a82 and libplist-2.2.0.
l/libgpod-0.8.3-x86_64-7.txz: Rebuilt.
Recompiled against libimobiledevice-20200615_4791a82 and libplist-2.2.0.
l/libimobiledevice-20200615_4791a82-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libplist-2.2.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libusbmuxd-20200615_c7d7d1a-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
n/fetchmail-6.4.8-x86_64-1.txz: Upgraded.
n/nftables-0.9.6-x86_64-1.txz: Upgraded.
extra/pure-alsa-system/ffmpeg-4.3-x86_64-1_alsa.txz: Upgraded.
a/pam-1.4.0-x86_64-1.txz: Upgraded.
IMPORTANT NOTE: This update removes the pam_cracklib and pam_tally2 modules.
None of our current configuration files in /etc/pam.d/ use either of those,
but if the configuration files on your machine do you'll need to comment out
or remove those lines, otherwise you may experience login failures.
a/shadow-4.8.1-x86_64-9.txz: Rebuilt.
/etc/pam.d/system-auth: prefix lines that call pam_gnome_keyring.so with '-'
to avoid spamming the logs about failures.
a/sysvinit-scripts-2.1-noarch-32.txz: Rebuilt.
rc.S: create /var/run/faillock directory for pam_faillock(8).
a/util-linux-2.35.2-x86_64-2.txz: Rebuilt.
/etc/pam.d/login: change the example for locking an account for too many
failed login attempts to use pam_faillock instead of pam_tally2.
l/imagemagick-7.0.10_19-x86_64-1.txz: Upgraded.
l/libzip-1.7.1-x86_64-1.txz: Upgraded.
n/openssh-8.3p1-x86_64-2.txz: Rebuilt.
/etc/pam.d/sshd: change the example for locking an account for too many
failed login attempts to use pam_faillock instead of pam_tally2.
a/haveged-1.9.10-x86_64-1.txz: Upgraded.
ap/alsa-utils-1.2.3-x86_64-2.txz: Rebuilt.
This version seems good, but we'll recompile it against alsa-lib-1.2.2 just
to be on the safe side.
d/patchelf-0.11-x86_64-1.txz: Upgraded.
l/alsa-lib-1.2.2-x86_64-1.txz: Upgraded.
Revert to this version of alsa-lib due to the pulseaudio daemon crashing in
some cases where multiple audio devices are present.
extra/pure-alsa-system/alsa-lib-1.2.2-x86_64-1_alsa.txz: Upgraded.
Revert to this version of alsa-lib due to the pulseaudio daemon crashing in
some cases where multiple audio devices are present.
a/hwdata-0.336-noarch-1.txz: Upgraded.
ap/man-db-2.9.2-x86_64-1.txz: Upgraded.
d/git-2.27.0-x86_64-1.txz: Upgraded.
d/perl-5.30.3-x86_64-1.txz: Upgraded.
Upgraded to IO-Socket-SSL-2.068.
d/strace-5.7-x86_64-1.txz: Upgraded.
l/libyaml-0.2.5-x86_64-1.txz: Upgraded.
n/ca-certificates-20200602-noarch-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
n/nghttp2-1.41.0-x86_64-1.txz: Upgraded.
This update fixes a security issue where an overly large HTTP/2 SETTINGS
frame payload causes a denial of service.
For more information, see:
https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xrhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11080
(* Security fix *)
n/proftpd-1.3.6d-x86_64-1.txz: Upgraded.
This is a bugfix release:
Fixed issue with FTPS uploads of large files using TLSv1.3 (Issue #959).
x/intel-vaapi-driver-2.4.1-x86_64-1.txz: Upgraded.
ap/mpg123-1.26.0-x86_64-1.txz: Upgraded.
ap/sqlite-3.32.1-x86_64-1.txz: Upgraded.
l/keybinder-0.3.1-x86_64-2.txz: Removed.
l/keybinder3-3.0_0.3.2-x86_64-1.txz: Added.
n/krb5-1.18.2-x86_64-1.txz: Upgraded.
n/mutt-1.14.2-x86_64-1.txz: Upgraded.
xap/gnuplot-5.2.8-x86_64-2.txz: Rebuilt.
Rebuilt with Qt5 (uses anti-aliasing to improve the plot output).
extra/aspell-word-lists/aspell-pt-0.50_2-x86_64-5.txz: Removed.
extra/aspell-word-lists/aspell-pt_PT-20190329_0-x86_64-1.txz: Upgraded.
Thanks to sairum for the link to a better word list.
extra/aspell-word-lists/aspell-pt_PT-preao-20190329_0-x86_64-1.txz: Added.
Thanks to sairum for the link to a better word list.
extra/pure-alsa-system/mpg123-1.26.0-x86_64-1_alsa.txz: Upgraded.
l/libarchive-3.4.3-x86_64-1.txz: Upgraded.
l/python-six-1.15.0-x86_64-1.txz: Upgraded.
l/zstd-1.4.5-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-68.8.1-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/68.8.1/releasenotes/
d/Cython-0.29.19-x86_64-1.txz: Upgraded.
kde/kde-workspace-4.11.22-x86_64-9.txz: Rebuilt.
kde-np: by default, do not restrict passwordless login for UIDs below 1000,
but keep the option to do so in the file commented out.
l/ffmpeg-4.2.3-x86_64-1.txz: Upgraded.
l/iso-codes-4.5.0-noarch-1.txz: Upgraded.
l/v4l-utils-1.20.0-x86_64-1.txz: Upgraded.
extra/pure-alsa-system/ffmpeg-4.2.3-x86_64-1_alsa.txz: Upgraded.
d/Cython-0.29.18-x86_64-1.txz: Upgraded.
kde/kde-workspace-4.11.22-x86_64-8.txz: Rebuilt.
Added /etc/pam.d/kde-np to fix KDM autologin.
Thanks to USUARIONUEVO for the bug report.
l/gnu-efi-3.0.12-x86_64-1.txz: Upgraded.
Greetings! After three months in /testing, the PAM merge into the main tree
is now complete. When updating, be sure to install the new pam, cracklib, and
libpwquality packages or you may find yourself locked out of your machine.
Otherwise, these changes should be completely transparent and you shouldn't
notice any obvious operational differences. Be careful if you make any changes
in /etc/pam.d/ - leaving an extra console logged in while testing PAM config
changes is a recommended standard procedure. Thanks again to Robby Workman,
Vincent Batts, Phantom X, and ivandi for help implementing this. It's not
done yet and there will be more fine-tuning of the config files, but now we
can move on to build some other updates. Enjoy!
a/cracklib-2.9.7-x86_64-1.txz: Added.
a/kernel-firmware-20200517_f8d32e4-noarch-1.txz: Upgraded.
a/libcgroup-0.41-x86_64-7.txz: Rebuilt.
Rebuilt to add PAM support.
a/libpwquality-1.4.2-x86_64-1.txz: Added.
a/lilo-24.2-x86_64-9.txz: Rebuilt.
Enable the "compact" option by default.
liloconfig: correctly set the root partition.
a/pam-1.3.1-x86_64-1.txz: Added.
a/shadow-4.8.1-x86_64-7.txz: Rebuilt.
Rebuilt to add PAM support.
a/utempter-1.2.0-x86_64-1.txz: Upgraded.
a/util-linux-2.35.1-x86_64-6.txz: Rebuilt.
Rebuilt to add PAM support.
a/xfsprogs-5.6.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-67.1.
ap/at-3.2.1-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
ap/cups-2.3.3-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
ap/hplip-3.20.5-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
ap/mariadb-10.4.13-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
ap/screen-4.8.0-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
ap/soma-3.3.0-noarch-1.txz: Upgraded.
Thanks to David Woodfall.
ap/sqlite-3.31.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-67.1.
ap/sudo-1.9.0-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
ap/vim-8.2.0788-x86_64-1.txz: Upgraded.
d/bison-3.6.2-x86_64-1.txz: Upgraded.
d/meson-0.54.2-x86_64-1.txz: Upgraded.
d/python-setuptools-46.4.0-x86_64-1.txz: Upgraded.
d/vala-0.48.6-x86_64-1.txz: Upgraded.
kde/calligra-2.9.11-x86_64-36.txz: Rebuilt.
Recompiled against icu4c-67.1.
kde/kde-workspace-4.11.22-x86_64-7.txz: Rebuilt.
Rebuilt to add PAM support.
l/ConsoleKit2-1.2.1-x86_64-4.txz: Rebuilt.
Rebuilt to add PAM support.
l/boost-1.73.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-67.1.
l/gnome-keyring-3.36.0-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
l/harfbuzz-2.6.6-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-67.1.
l/icu4c-67.1-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/imagemagick-7.0.10_13-x86_64-1.txz: Upgraded.
l/libcap-2.34-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
l/libical-3.0.8-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-67.1.
l/libuv-1.38.0-x86_64-1.txz: Upgraded.
l/libvisio-0.1.7-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-67.1.
l/polkit-0.116-x86_64-3.txz: Rebuilt.
Rebuilt to add PAM support.
l/qt-4.8.7-x86_64-16.txz: Rebuilt.
Recompiled against icu4c-67.1.
l/qt5-5.13.2-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-67.1.
l/qt5-webkit-5.212.0_alpha4-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-67.1.
l/raptor2-2.0.15-x86_64-9.txz: Rebuilt.
Recompiled against icu4c-67.1.
l/system-config-printer-1.5.12-x86_64-4.txz: Rebuilt.
Rebuilt to add PAM support.
l/vte-0.60.2-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-67.1.
n/cifs-utils-6.10-x86_64-4.txz: Rebuilt.
Rebuilt to add PAM support.
n/cyrus-sasl-2.1.27-x86_64-4.txz: Rebuilt.
Rebuilt to add PAM support.
n/dovecot-2.3.10.1-x86_64-1.txz: Upgraded.
Rebuilt to add PAM support.
Compiled against icu4c-67.1.
This update fixes several denial-of-service vulnerabilities.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10957https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10958https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10967
(* Security fix *)
n/mutt-1.14.1-x86_64-1.txz: Upgraded.
n/netatalk-3.1.12-x86_64-3.txz: Rebuilt.
Rebuilt to add PAM support.
n/netkit-rsh-0.17-x86_64-3.txz: Rebuilt.
Rebuilt to add PAM support.
n/nss-pam-ldapd-0.9.11-x86_64-1.txz: Added.
n/openssh-8.2p1-x86_64-3.txz: Rebuilt.
Rebuilt to add PAM support.
n/openvpn-2.4.9-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
n/pam-krb5-4.9-x86_64-1.txz: Added.
n/php-7.4.6-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-67.1.
n/popa3d-1.0.3-x86_64-4.txz: Rebuilt.
Rebuilt to add PAM support.
n/postfix-3.5.2-x86_64-1.txz: Upgraded.
Compiled against icu4c-67.1.
n/ppp-2.4.8-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
n/proftpd-1.3.6c-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
n/samba-4.12.2-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
Recompiled against icu4c-67.1.
n/tin-2.4.4-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-67.1.
n/vsftpd-3.0.3-x86_64-6.txz: Rebuilt.
Rebuilt to add PAM support.
t/texlive-2019.190626-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-67.1.
x/vulkan-sdk-1.2.135.0-x86_64-1.txz: Upgraded.
x/xdm-1.1.11-x86_64-10.txz: Rebuilt.
Rebuilt to add PAM support.
x/xisxwayland-1-x86_64-1.txz: Added.
xap/sane-1.0.30-x86_64-1.txz: Upgraded.
This update fixes several security issues.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12867https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12862https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12863https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12865https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12866https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12861https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12864
(* Security fix *)
xap/vim-gvim-8.2.0788-x86_64-1.txz: Upgraded.
xap/xlockmore-5.63-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
xap/xscreensaver-5.44-x86_64-2.txz: Rebuilt.
Rebuilt to add PAM support.
extra/brltty/brltty-6.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-67.1.
extra/pure-alsa-system/qt5-5.13.2-x86_64-4_alsa.txz: Rebuilt.
Recompiled against icu4c-67.1.
isolinux/initrd.img: Rebuilt.
Added PAM libraries, security modules, and config files.
usb-and-pxe-installers/usbboot.img: Rebuilt.
Added PAM libraries, security modules, and config files.
Hey folks, just a heads-up that PAM is about to be merged into the main tree.
We can't have it blocking other upgrades any longer. The config files could be
improved (adding support for pam_krb5 and pam_ldap, for example), but they'll
do for now. Have a good weekend, and enjoy these updates! :-)
a/aaa_elflibs-15.0-x86_64-23.txz: Rebuilt.
Upgraded: libcap.so.2.34, libelf-0.179.so, liblzma.so.5.2.5,
libglib-2.0.so.0.6400.2, libgmodule-2.0.so.0.6400.2,
libgobject-2.0.so.0.6400.2, libgthread-2.0.so.0.6400.2,
liblber-2.4.so.2.10.13, libldap-2.4.so.2.10.13, libpcre2-8.so.0.10.0.
Added temporarily in preparation for upgrading icu4c: libicudata.so.65.1,
libicui18n.so.65.1, libicuio.so.65.1, libicutest.so.65.1, libicutu.so.65.1,
libicuuc.so.65.1.
a/etc-15.0-x86_64-11.txz: Rebuilt.
/etc/passwd: Added ldap (UID 330).
/etc/group: Added ldap (GID 330).
a/kernel-generic-5.4.41-x86_64-1.txz: Upgraded.
a/kernel-huge-5.4.41-x86_64-1.txz: Upgraded.
a/kernel-modules-5.4.41-x86_64-1.txz: Upgraded.
a/pkgtools-15.0-noarch-33.txz: Rebuilt.
setup.services: added support for rc.openldap and rc.openvpn.
ap/hplip-3.20.5-x86_64-1.txz: Upgraded.
d/kernel-headers-5.4.41-x86-1.txz: Upgraded.
d/python-setuptools-46.3.0-x86_64-1.txz: Upgraded.
d/python3-3.8.3-x86_64-1.txz: Upgraded.
k/kernel-source-5.4.41-noarch-1.txz: Upgraded.
n/openldap-2.4.50-x86_64-1.txz: Added.
This is a complete OpenLDAP package with both client and server support.
Thanks to Giuseppe Di Terlizzi for help with the server parts.
n/openldap-client-2.4.50-x86_64-1.txz: Removed.
x/mesa-20.0.7-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/PAM/hplip-3.20.5-x86_64-1_pam.txz: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/shadow-4.8.1-x86_64-6.txz: Rebuilt.
Include manpages for sulogin(8).
a/util-linux-2.35.1-x86_64-5.txz: Rebuilt.
ap/sysstat-12.3.3-x86_64-1.txz: Upgraded.
d/bison-3.6-x86_64-1.txz: Upgraded.
l/jansson-2.13.1-x86_64-1.txz: Upgraded.
n/NetworkManager-1.24.0-x86_64-1.txz: Upgraded.
n/fetchmail-6.4.5-x86_64-1.txz: Upgraded.
testing/packages/PAM/shadow-4.8.1-x86_64-6_pam.txz: Rebuilt.
Include manpages for sulogin(8).
Use this version of /bin/su.
testing/packages/PAM/util-linux-2.35.1-x86_64-5_pam.txz: Rebuilt.
Don't use this version of /bin/su.
a/kernel-generic-5.4.39-x86_64-1.txz: Upgraded.
a/kernel-huge-5.4.39-x86_64-1.txz: Upgraded.
a/kernel-modules-5.4.39-x86_64-1.txz: Upgraded.
d/kernel-headers-5.4.39-x86-1.txz: Upgraded.
k/kernel-source-5.4.39-noarch-1.txz: Upgraded.
HUGETLBFS n -> y
JUMP_LABEL n -> y
+CGROUP_HUGETLB n
+HUGETLB_PAGE y
+STATIC_KEYS_SELFTEST n
Thanks to camerabambai.
l/libspectre-0.2.9-x86_64-1.txz: Upgraded.
l/pygobject3-3.36.1-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/kernel-firmware-20200421_78c0348-noarch-1.txz: Upgraded.
a/kernel-generic-5.4.34-x86_64-1.txz: Upgraded.
a/kernel-huge-5.4.34-x86_64-1.txz: Upgraded.
a/kernel-modules-5.4.34-x86_64-1.txz: Upgraded.
a/openssl-solibs-1.1.1g-x86_64-1.txz: Upgraded.
d/git-2.26.2-x86_64-1.txz: Upgraded.
This update fixes a security issue:
With a crafted URL that contains a newline or empty host, or lacks
a scheme, the credential helper machinery can be fooled into
providing credential information that is not appropriate for the
protocol in use and host being contacted.
Unlike the vulnerability CVE-2020-5260 fixed in v2.17.4, the
credentials are not for a host of the attacker's choosing; instead,
they are for some unspecified host (based on how the configured
credential helper handles an absent "host" parameter).
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11008
(* Security fix *)
d/kernel-headers-5.4.34-x86-1.txz: Upgraded.
d/vala-0.48.4-x86_64-1.txz: Upgraded.
k/kernel-source-5.4.34-noarch-1.txz: Upgraded.
INFINIBAND_CXGB3 n -> m
INFINIBAND_IPOIB_CM n -> y
INFINIBAND_IPOIB_DEBUG_DATA n -> y
Thanks to Karl Magnus Kolstø.
l/M2Crypto-0.35.2-x86_64-4.txz: Rebuilt.
Don't package typing-3.7.4.1 for python3.
l/netpbm-10.90.01-x86_64-1.txz: Upgraded.
n/openssl-1.1.1g-x86_64-1.txz: Upgraded.
This update fixes a security issue:
Fixed segmentation fault in SSL_check_chain() that could be exploited by a
malicious peer in a Denial of Service attack.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1967
(* Security fix *)
x/libva-2.7.1-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/PAM/openvpn-2.4.9-x86_64-1_pam.txz: Upgraded.
This update fixes a security issue:
Fix illegal client float. Thanks to Lev Stipakov.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11810
(* Security fix *)
usb-and-pxe-installers/usbboot.img: Rebuilt.
d/python-2.7.17-x86_64-2.txz: Removed.
d/python2-2.7.18-x86_64-1.txz: Added.
OK, I know a few people got excited seeing python-2 removed in the previous
entry, but it's just being renamed to python2 for consistency with the
python3 package. It's DOA though, and is the final release of the already EOL
python 2 branch (a "commemorative" release as they say in the announcement).
l/M2Crypto-0.35.2-x86_64-3.txz: Rebuilt.
Added python3 modules. Thanks to sombragris and ponce.
l/harfbuzz-2.6.5-x86_64-1.txz: Upgraded.
l/imagemagick-7.0.10_7-x86_64-1.txz: Upgraded.
l/libuv-1.37.0-x86_64-1.txz: Upgraded.
l/libyaml-0.2.4-x86_64-1.txz: Upgraded.
l/oniguruma-6.9.5-x86_64-1.txz: Upgraded.
x/pixman-0.40.0-x86_64-1.txz: Upgraded.
ap/rpm-4.15.1-x86_64-3.txz: Rebuilt.
Dropped python2 modules.
l/libcaca-0.99.beta19-x86_64-6.txz: Rebuilt.
Dropped python2 modules.
l/libuv-1.36.0-x86_64-1.txz: Upgraded.
l/libwebp-1.1.0-x86_64-2.txz: Rebuilt.
Dropped python2 modules.
l/python-distro-1.4.0-x86_64-2.txz: Rebuilt.
Dropped python2 modules.
l/python-docutils-0.16-x86_64-2.txz: Rebuilt.
Replace /usr/bin scripts with python3 versions.
l/system-config-printer-1.5.12-x86_64-3.txz: Rebuilt.
Dropped python2 modules.
n/openvpn-2.4.9-x86_64-1.txz: Upgraded.
This update fixes a security issue:
Fix illegal client float. Thanks to Lev Stipakov.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11810
(* Security fix *)
extra/xf86-video-nouveau-blacklist/xf86-video-nouveau-blacklist-1.0-noarch-1.txz: Added.
If it is easier for people using slackpkg to leave xf86-video-nouveau
installed and change the name of this package from xf86-video-nouveau to
xf86-video-nouveau-blacklist with a $VERSION of 1.0, then so be it.
extra/xf86-video-nouveau-blacklist/xf86-video-nouveau-blacklist-noarch-1.txz: Removed.
a/xfsprogs-5.6.0-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.18-x86_64-2.txz: Rebuilt.
Fixed the version number embedded in pkg-config files and elsewhere.
Thanks to davjohn for the bug report.
n/bind-9.16.2-x86_64-1.txz: Upgraded.
This update fixes a security issue:
DNS rebinding protection was ineffective when BIND 9 is configured as a
forwarding DNS server. Found and responsibly reported by Tobias Klein.
[GL #1574]
(* Security fix *)
a/gawk-5.1.0-x86_64-1.txz: Upgraded.
a/gettext-0.20.2-x86_64-1.txz: Upgraded.
d/gettext-tools-0.20.2-x86_64-1.txz: Upgraded.
d/git-2.26.1-x86_64-1.txz: Upgraded.
This update fixes a security issue:
With a crafted URL that contains a newline in it, the credential helper
machinery can be fooled to give credential information for a wrong host.
The attack has been made impossible by forbidding a newline character in
any value passed via the credential protocol. Credit for finding the
vulnerability goes to Felix Wilhelm of Google Project Zero.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5260
(* Security fix *)
l/glib-networking-2.64.2-x86_64-1.txz: Upgraded.
l/libsecret-0.20.3-x86_64-1.txz: Upgraded.
n/php-7.4.5-x86_64-1.txz: Upgraded.
x/xorgproto-2020.1-x86_64-1.txz: Upgraded.
xap/audacious-4.0.2-x86_64-1.txz: Upgraded.
xap/audacious-plugins-4.0.2-x86_64-1.txz: Upgraded.
extra/pure-alsa-system/audacious-plugins-4.0.2-x86_64-1_alsa.txz: Upgraded.
d/cmake-3.17.1-x86_64-1.txz: Upgraded.
l/glib2-2.64.2-x86_64-1.txz: Upgraded.
l/libssh-0.9.4-x86_64-1.txz: Upgraded.
Fixed possible DoS in client and server when handling AES-CTR keys
with OpenSSL.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1730
(* Security fix *)
d/bison-3.5.4-x86_64-1.txz: Upgraded.
kde/k3b-2.0.3-x86_64-7.txz: Rebuilt.
Recompiled against libdvdread-6.1.1.
l/gobject-introspection-1.64.1-x86_64-1.txz: Upgraded.
l/imagemagick-7.0.10_4-x86_64-1.txz: Upgraded.
l/libdvdnav-6.1.0-x86_64-2.txz: Rebuilt.
Recompiled against libdvdread-6.1.1.
Who bumps an .soname and only boosts the version number by 0.0.1?
Anyway, sorry to drop the ball a second time. I'll try to avoid this.
Thanks to gmgf for the bug report.
n/fetchmail-6.4.3-x86_64-1.txz: Upgraded.
tcl/tclx-8.4.4-x86_64-1.txz: Upgraded.
xap/MPlayer-20200103-x86_64-2.txz: Rebuilt.
Recompiled against libdvdread-6.1.1.
xap/windowmaker-0.95.9-x86_64-1.txz: Upgraded.
xap/xine-lib-1.2.10-x86_64-2.txz: Rebuilt.
Recompiled against libdvdread-6.1.1.
extra/pure-alsa-system/MPlayer-20200103-x86_64-2_alsa.txz: Rebuilt.
Recompiled against libdvdread-6.1.1.
extra/pure-alsa-system/xine-lib-1.2.10-x86_64-2_alsa.txz: Rebuilt.
Recompiled against libdvdread-6.1.1.
kde/calligra-2.9.11-x86_64-34.txz: Rebuilt.
Recompiled against glew-2.2.0.
The libGLEW.so.2.2 .soname (rather than libGLEW.so.2) gets me every time.
Thanks to marrowsuck for the bug report.
l/libdvdread-6.1.1-x86_64-1.txz: Upgraded.
x/mesa-20.0.4-x86_64-2.txz: Rebuilt.
Recompiled against glew-2.2.0.
ap/lsof-4.93.2-x86_64-2.txz: Rebuilt.
Fixed the manpage. Thanks to kaott.
ap/sc-7.16-x86_64-7.txz: Rebuilt.
Brought back the classic SC. Thanks to dive.
d/Cython-0.29.16-x86_64-1.txz: Upgraded.
d/mercurial-5.3.2-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.17-x86_64-1.txz: Upgraded.
n/dhcpcd-8.1.7-x86_64-1.txz: Upgraded.
n/iproute2-5.6.0-x86_64-1.txz: Upgraded.
x/libdrm-2.4.101-x86_64-1.txz: Upgraded.
x/mesa-20.0.4-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-68.6.1esr-x86_64-1.txz: Upgraded.
This release contains critical security fixes and improvements.
"Under certain conditions, when running the nsDocShell destructor, a race
condition can cause a use-after-free. We are aware of targeted attacks in
the wild abusing this flaw."
"Under certain conditions, when handling a ReadableStream, a race condition
can cause a use-after-free. We are aware of targeted attacks in the wild
abusing this flaw."
For more information, see:
https://www.mozilla.org/en-US/firefox/68.6.1/releasenotes/https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
(* Security fix *)
a/dialog-1.3_20200327-x86_64-1.txz: Upgraded.
a/openssl-solibs-1.1.1f-x86_64-1.txz: Upgraded.
ap/nano-4.9.1-x86_64-1.txz: Upgraded.
l/elfutils-0.179-x86_64-1.txz: Upgraded.
n/gnutls-3.6.13-x86_64-1.txz: Upgraded.
This update fixes a security issue:
libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support),
since 3.6.3. The DTLS client would not contribute any randomness to the
DTLS negotiation, breaking the security guarantees of the DTLS protocol.
[GNUTLS-SA-2020-03-31, CVSS: high]
(* Security fix *)
n/httpd-2.4.43-x86_64-1.txz: Upgraded.
n/openssl-1.1.1f-x86_64-1.txz: Upgraded.
a/lvm2-2.03.09-x86_64-1.txz: Upgraded.
d/guile-3.0.2-x86_64-1.txz: Upgraded.
l/glib-networking-2.64.1-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.16-x86_64-1.txz: Upgraded.
l/gvfs-1.44.1-x86_64-1.txz: Upgraded.
l/librsvg-2.48.1-x86_64-1.txz: Upgraded.
l/vte-0.60.1-x86_64-1.txz: Upgraded.
xap/audacious-4.0-x86_64-3.txz: Rebuilt.
Also support GTK+ interface, including a .desktop file for it.
xap/audacious-plugins-4.0-x86_64-3.txz: Rebuilt.
Rebuilt with --enable-gtk.
extra/pure-alsa-system/audacious-plugins-4.0-x86_64-3_alsa.txz: Rebuilt.
Rebuilt with --enable-gtk.
extra/pure-alsa-system/qt5-5.13.2-x86_64-3_alsa.txz: Added.
n/curl-7.69.1-x86_64-3.txz: Rebuilt.
Removed --with-ca-bundle=/usr/share/curl/ca-bundle.crt and
added --without-ca-bundle. Thanks to drgibbon and Willy Sudiarto Raharjo.
l/glibmm-2.64.2-x86_64-1.txz: Upgraded.
l/imagemagick-7.0.10_2-x86_64-1.txz: Upgraded.
l/libcue-2.2.1-x86_64-1.txz: Added.
The initial use for this is adding CUE support to audacious-plugins.
l/libdvdnav-6.1.0-x86_64-1.txz: Upgraded.
l/libdvdread-6.1.0-x86_64-1.txz: Upgraded.
xap/audacious-4.0-x86_64-1.txz: Upgraded.
xap/audacious-plugins-4.0-x86_64-1.txz: Upgraded.
extra/pure-alsa-system/audacious-plugins-4.0-x86_64-1_alsa.txz: Upgraded.
Don't bother with 5.4.26 folks, just wait for the next one. Trust me.
a/tcsh-6.22.02-x86_64-2.txz: Rebuilt.
Fixed merging history from multiple shells. Thanks to jmccue.
a/xz-5.2.5-x86_64-1.txz: Upgraded.
d/git-2.25.2-x86_64-1.txz: Upgraded.
l/glibmm-2.64.1-x86_64-1.txz: Upgraded.
n/bind-9.16.1-x86_64-1.txz: Upgraded.
n/dovecot-2.3.10-x86_64-2.txz: Rebuilt.
x/libinput-1.15.4-x86_64-1.txz: Upgraded.
x/mesa-20.0.2-x86_64-1.txz: Upgraded.
testing/packages/PAM/dovecot-2.3.10-x86_64-2_pam.txz: Rebuilt.
Recompiled using --with-pam. Thanks to HQuest.
a/aaa_elflibs-15.0-x86_64-22.txz: Rebuilt.
Upgraded: libcap.so.2.33, libncurses.so.6.2, libncursesw.so.6.2,
libpcre.so.1.2.12, libpcreposix.so.0.0.7, libtinfo.so.6.2, libform.so.6.2,
libformw.so.6.2, libglib-2.0.so.0.6400.1, libgmodule-2.0.so.0.6400.1,
libgobject-2.0.so.0.6400.1, libgthread-2.0.so.0.6400.1,
liblber-2.4.so.2.10.12, libldap-2.4.so.2.10.12, libmenu.so.6.2,
libmenuw.so.6.2, libpanel.so.6.2, libpanelw.so.6.2, libstdc++.so.6.0.28.
a/xfsprogs-5.5.0-x86_64-1.txz: Upgraded.
ap/sudo-1.8.31p1-x86_64-1.txz: Upgraded.
This is a bugfix release:
Sudo once again ignores a failure to restore the RLIMIT_CORE resource limit,
as it did prior to version 1.8.29. Linux containers don't allow RLIMIT_CORE
to be set back to RLIM_INFINITY if we set the limit to zero, even for root,
which resulted in a warning from sudo.
d/help2man-1.47.13-x86_64-1.txz: Upgraded.
d/perl-5.30.2-x86_64-1.txz: Upgraded.
Also upgraded to Devel-CheckLib-1.14, DBI-1.643, and IO-Socket-SSL-2.067.
n/ModemManager-1.12.8-x86_64-1.txz: Upgraded.
n/bluez-5.54-x86_64-1.txz: Upgraded.
x/vulkan-sdk-1.2.131.2-x86_64-1.txz: Upgraded.
l/gobject-introspection-1.64.0-x86_64-1.txz: Upgraded.
l/imagemagick-7.0.10_0-x86_64-1.txz: Upgraded.
l/libical-3.0.8-x86_64-1.txz: Upgraded.
l/librsvg-2.48.0-x86_64-1.txz: Upgraded.
l/libsoup-2.70.0-x86_64-1.txz: Upgraded.
l/mozilla-nss-3.51-x86_64-1.txz: Upgraded.
xap/libnma-1.8.28-x86_64-1.txz: Added.
This is the NetworkManager GUI client library, which was previously
provided by network-manager-applet. It's now a standalone project, and
is required by network-manager-applet and other NetworkManager frontends.
xap/network-manager-applet-1.16.0-x86_64-1.txz: Upgraded.
This requires the new libnma package.
a/cryptsetup-2.3.0-x86_64-2.txz: Rebuilt.
Include some additional documentation. Thanks to regdub.
a/sdparm-1.11-x86_64-1.txz: Upgraded.
ap/moc-2.5.2-x86_64-6.txz: Rebuilt.
Fixed docs permissions. Thanks to regdub.
l/glib-networking-2.64.0-x86_64-1.txz: Upgraded.
l/glib2-2.64.0-x86_64-1.txz: Upgraded.
l/gvfs-1.44.0-x86_64-1.txz: Upgraded.
l/libnl-1.1.4-x86_64-3.txz: Rebuilt.
Fixed docs permissions. Thanks to regdub.
l/tdb-1.4.3-x86_64-3.txz: Rebuilt.
Fixed docs permissions. Thanks to regdub.
l/tevent-0.10.2-x86_64-3.txz: Rebuilt.
Fixed docs permissions. Thanks to regdub.
n/bind-9.16.0-x86_64-3.txz: Rebuilt.
Applied upstream patch to fix a discrepancy in the quota code that can
result in a situation where the count is not properly decremented in
some cases.
n/dovecot-2.3.10-x86_64-1.txz: Upgraded.
n/rp-pppoe-3.13-x86_64-2.txz: Rebuilt.
This needed a rebuild for ppp-2.4.8. Thanks to regdub.
x/libinput-1.15.3-x86_64-1.txz: Upgraded.
testing/packages/PAM/dovecot-2.3.10-x86_64-1_pam.txz: Upgraded.
a/sdparm-1.10-x86_64-3.txz: Rebuilt.
Recompiled against sg3_utils-1.45.
a/udisks-1.0.5-x86_64-5.txz: Rebuilt.
Recompiled against sg3_utils-1.45.
d/cmake-3.16.5-x86_64-1.txz: Upgraded.
l/libgpod-0.8.3-x86_64-6.txz: Rebuilt.
Recompiled against sg3_utils-1.45.
n/curl-7.69.0-x86_64-1.txz: Upgraded.
n/cyrus-sasl-2.1.27-x86_64-3.txz: Rebuilt.
Added SQL support via MariaDB. Thanks to niksoggia.
n/ntp-4.2.8p14-x86_64-1.txz: Upgraded.
n/ppp-2.4.8-x86_64-1.txz: Upgraded.
This update fixes a security issue:
By sending an unsolicited EAP packet to a vulnerable ppp client or server,
an unauthenticated remote attacker could cause memory corruption in the
pppd process, which may allow for arbitrary code execution.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8597
(* Security fix *)
testing/packages/PAM/cyrus-sasl-2.1.27-x86_64-3_pam.txz: Rebuilt.
Added SQL support via MariaDB. Thanks to niksoggia.
testing/packages/PAM/ppp-2.4.8-x86_64-1_pam.txz: Upgraded.
This update fixes a security issue:
By sending an unsolicited EAP packet to a vulnerable ppp client or server,
an unauthenticated remote attacker could cause memory corruption in the
pppd process, which may allow for arbitrary code execution.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8597
(* Security fix *)
a/dialog-1.3_20200228-x86_64-1.txz: Upgraded.
l/Mako-1.1.2-x86_64-1.txz: Upgraded.
l/imagemagick-7.0.9_27-x86_64-1.txz: Upgraded.
l/libcap-2.33-x86_64-1.txz: Upgraded.
n/bind-9.16.0-x86_64-2.txz: Rebuilt.
rc.bind: ensure /var/run/named exists before starting named. Thanks to MarcT.
rc.bind: when stopping named, only kill processes in the current namespace.
x/libevdev-1.9.0-x86_64-1.txz: Upgraded.
x/wayland-protocols-1.20-noarch-1.txz: Upgraded.
xap/seamonkey-2.53.1-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.seamonkey-project.org/releases/seamonkey2.53.1
(* Security fix *)
testing/packages/PAM/libcap-2.33-x86_64-1_pam.txz: Upgraded.
a/ed-1.16-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.14-x86_64-3.txz: Rebuilt.
Rebuilt to add wayland backend.
l/libuv-1.34.2-x86_64-1.txz: Added.
This is needed by bind-9.16.0.
l/qt5-5.13.2-x86_64-2.txz: Rebuilt.
Rebuilt to add wayland support.
Use the system ffmpeg, not the bundled one.
n/bind-9.16.0-x86_64-1.txz: Upgraded.
rc.bind: don't change file ownerships in /var/named. Thanks to voegelas.
n/proftpd-1.3.6c-x86_64-1.txz: Upgraded.
No CVEs assigned, but this sure looks like a security issue:
Use-after-free vulnerability in memory pools during data transfer.
(* Security fix *)
x/libinput-1.15.2-x86_64-1.txz: Upgraded.
x/xkbcomp-1.4.3-x86_64-1.txz: Upgraded.
testing/packages/PAM/proftpd-1.3.6c-x86_64-1_pam.txz: Upgraded.
No CVEs assigned, but this sure looks like a security issue:
Use-after-free vulnerability in memory pools during data transfer.
(* Security fix *)
a/gptfdisk-1.0.5-x86_64-1.txz: Upgraded.
a/kernel-firmware-20200219_2277987-noarch-1.txz: Upgraded.
a/kernel-generic-5.4.21-x86_64-1.txz: Upgraded.
a/kernel-huge-5.4.21-x86_64-1.txz: Upgraded.
a/kernel-modules-5.4.21-x86_64-1.txz: Upgraded.
a/shadow-4.8.1-x86_64-5.txz: Rebuilt.
a/util-linux-2.35.1-x86_64-4.txz: Rebuilt.
ap/cdparanoia-III_10.2-x86_64-3.txz: Rebuilt.
Moved man page from /usr/man/jp/man1/ to /usr/man/ja/man1/. Thanks to Xsane.
Don't ship the static libraries.
d/kernel-headers-5.4.21-x86-1.txz: Upgraded.
k/kernel-source-5.4.21-noarch-1.txz: Upgraded.
SND_SOC n -> m
SPI n -> y
VFIO_PCI_VGA n -> y
+ADE7854_SPI m
+ADT7316_SPI m
+BMC150_ACCEL_SPI m
+BMG160_SPI m
+BMP280_SPI m
+FXAS21002C_SPI m
+HTS221_SPI m
+IIO_ST_ACCEL_SPI_3AXIS m
+IIO_ST_GYRO_SPI_3AXIS m
+IIO_ST_MAGN_SPI_3AXIS m
+IIO_ST_PRESS_SPI m
+IIO_ST_SENSORS_SPI m
+INPUT_AD714X_SPI m
+INPUT_ADXL34X_SPI m
+KXSD9_SPI m
+REGMAP_SPI m
+SND_COMPRESS_OFFLOAD m
+SND_DESIGNWARE_I2S m
+SND_DESIGNWARE_PCM y
+SND_DMAENGINE_PCM m
+SND_HDA_EXT_CORE m
+SND_I2S_HI6210_I2S m
+SND_PCM_ELD y
+SND_PCM_IEC958 y
+SND_SIMPLE_CARD m
+SND_SIMPLE_CARD_UTILS m
+SND_SOC_AC97_BUS y
+SND_SOC_AC97_CODEC m
+SND_SOC_ACPI m
+SND_SOC_ACPI_INTEL_MATCH m
+SND_SOC_ADAU1761 m
+SND_SOC_ADAU1761_I2C m
+SND_SOC_ADAU1761_SPI m
+SND_SOC_ADAU17X1 m
+SND_SOC_ADAU7002 m
+SND_SOC_ADAU_UTILS m
+SND_SOC_AMD_ACP m
+SND_SOC_AMD_ACP3x m
+SND_SOC_AMD_CZ_DA7219MX98357_MACH m
+SND_SOC_AMD_CZ_RT5645_MACH m
+SND_SOC_BD28623 m
+SND_SOC_COMPRESS y
+SND_SOC_CROS_EC_CODEC m
+SND_SOC_CS35L34 m
+SND_SOC_CS35L35 m
+SND_SOC_CS35L36 m
+SND_SOC_CS42L42 m
+SND_SOC_CS43130 m
+SND_SOC_CX2072X m
+SND_SOC_DA7213 m
+SND_SOC_DA7219 m
+SND_SOC_DMIC m
+SND_SOC_ES7134 m
+SND_SOC_ES7241 m
+SND_SOC_ES8316 m
+SND_SOC_ES8328 m
+SND_SOC_ES8328_I2C m
+SND_SOC_ES8328_SPI m
+SND_SOC_GENERIC_DMAENGINE_PCM y
+SND_SOC_HDAC_HDA m
+SND_SOC_HDAC_HDMI m
+SND_SOC_HDMI_CODEC m
+SND_SOC_I2C_AND_SPI m
+SND_SOC_INTEL_APL m
+SND_SOC_INTEL_BDW_RT5677_MACH m
+SND_SOC_INTEL_BROADWELL_MACH m
+SND_SOC_INTEL_BXT_DA7219_MAX98357A_MACH m
+SND_SOC_INTEL_BXT_RT298_MACH m
+SND_SOC_INTEL_BYTCR_RT5640_MACH m
+SND_SOC_INTEL_BYTCR_RT5651_MACH m
+SND_SOC_INTEL_BYT_CHT_CX2072X_MACH m
+SND_SOC_INTEL_BYT_CHT_DA7213_MACH m
+SND_SOC_INTEL_BYT_CHT_ES8316_MACH m
+SND_SOC_INTEL_BYT_CHT_NOCODEC_MACH m
+SND_SOC_INTEL_CFL m
+SND_SOC_INTEL_CHT_BSW_MAX98090_TI_MACH m
+SND_SOC_INTEL_CHT_BSW_NAU8824_MACH m
+SND_SOC_INTEL_CHT_BSW_RT5645_MACH m
+SND_SOC_INTEL_CHT_BSW_RT5672_MACH m
+SND_SOC_INTEL_CML_H m
+SND_SOC_INTEL_CML_LP m
+SND_SOC_INTEL_CNL m
+SND_SOC_INTEL_DA7219_MAX98357A_GENERIC m
+SND_SOC_INTEL_GLK m
+SND_SOC_INTEL_GLK_RT5682_MAX98357A_MACH m
+SND_SOC_INTEL_HASWELL m
+SND_SOC_INTEL_HASWELL_MACH m
+SND_SOC_INTEL_KBL m
+SND_SOC_INTEL_KBL_DA7219_MAX98357A_MACH m
+SND_SOC_INTEL_KBL_DA7219_MAX98927_MACH m
+SND_SOC_INTEL_KBL_RT5660_MACH m
+SND_SOC_INTEL_KBL_RT5663_MAX98927_MACH m
+SND_SOC_INTEL_MACH y
+SND_SOC_INTEL_SKL m
+SND_SOC_INTEL_SKL_NAU88L25_MAX98357A_MACH m
+SND_SOC_INTEL_SKL_NAU88L25_SSM4567_MACH m
+SND_SOC_INTEL_SKL_RT286_MACH m
+SND_SOC_INTEL_SKYLAKE m
+SND_SOC_INTEL_SKYLAKE_COMMON m
+SND_SOC_INTEL_SKYLAKE_FAMILY m
+SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC y
+SND_SOC_INTEL_SKYLAKE_SSP_CLK m
+SND_SOC_INTEL_SST m
+SND_SOC_INTEL_SST_ACPI m
+SND_SOC_INTEL_SST_FIRMWARE m
+SND_SOC_INTEL_SST_TOPLEVEL y
+SND_SOC_MAX9759 m
+SND_SOC_MAX98088 m
+SND_SOC_MAX98090 m
+SND_SOC_MAX98357A m
+SND_SOC_MAX98373 m
+SND_SOC_MAX9867 m
+SND_SOC_MAX98927 m
+SND_SOC_NAU8540 m
+SND_SOC_NAU8824 m
+SND_SOC_NAU8825 m
+SND_SOC_PCM1789 m
+SND_SOC_PCM1789_I2C m
+SND_SOC_PCM186X m
+SND_SOC_PCM186X_I2C m
+SND_SOC_PCM186X_SPI m
+SND_SOC_PCM3060 m
+SND_SOC_PCM3060_I2C m
+SND_SOC_PCM3060_SPI m
+SND_SOC_RL6231 m
+SND_SOC_RL6347A m
+SND_SOC_RT286 m
+SND_SOC_RT298 m
+SND_SOC_RT5640 m
+SND_SOC_RT5645 m
+SND_SOC_RT5651 m
+SND_SOC_RT5660 m
+SND_SOC_RT5663 m
+SND_SOC_RT5670 m
+SND_SOC_RT5677 m
+SND_SOC_RT5677_SPI m
+SND_SOC_RT5682 m
+SND_SOC_SIGMADSP m
+SND_SOC_SIGMADSP_REGMAP m
+SND_SOC_SIMPLE_AMPLIFIER m
+SND_SOC_SOF m
+SND_SOC_SOF_ACPI m
+SND_SOC_SOF_APOLLOLAKE m
+SND_SOC_SOF_APOLLOLAKE_SUPPORT y
+SND_SOC_SOF_BAYTRAIL m
+SND_SOC_SOF_BAYTRAIL_SUPPORT y
+SND_SOC_SOF_CANNONLAKE m
+SND_SOC_SOF_CANNONLAKE_SUPPORT y
+SND_SOC_SOF_COFFEELAKE m
+SND_SOC_SOF_COFFEELAKE_SUPPORT y
+SND_SOC_SOF_COMETLAKE_H m
+SND_SOC_SOF_COMETLAKE_H_SUPPORT y
+SND_SOC_SOF_COMETLAKE_LP m
+SND_SOC_SOF_COMETLAKE_LP_SUPPORT y
+SND_SOC_SOF_ELKHARTLAKE m
+SND_SOC_SOF_ELKHARTLAKE_SUPPORT y
+SND_SOC_SOF_GEMINILAKE m
+SND_SOC_SOF_GEMINILAKE_SUPPORT y
+SND_SOC_SOF_HDA m
+SND_SOC_SOF_HDA_AUDIO_CODEC y
+SND_SOC_SOF_HDA_COMMON m
+SND_SOC_SOF_HDA_LINK y
+SND_SOC_SOF_HDA_LINK_BASELINE m
+SND_SOC_SOF_ICELAKE m
+SND_SOC_SOF_ICELAKE_SUPPORT y
+SND_SOC_SOF_INTEL_ACPI m
+SND_SOC_SOF_INTEL_ATOM_HIFI_EP m
+SND_SOC_SOF_INTEL_COMMON m
+SND_SOC_SOF_INTEL_HIFI_EP_IPC m
+SND_SOC_SOF_INTEL_PCI m
+SND_SOC_SOF_INTEL_TOPLEVEL y
+SND_SOC_SOF_MERRIFIELD m
+SND_SOC_SOF_MERRIFIELD_SUPPORT y
+SND_SOC_SOF_OPTIONS m
+SND_SOC_SOF_PCI m
+SND_SOC_SOF_PROBE_WORK_QUEUE y
+SND_SOC_SOF_TIGERLAKE m
+SND_SOC_SOF_TIGERLAKE_SUPPORT y
+SND_SOC_SOF_TOPLEVEL y
+SND_SOC_SOF_XTENSA m
+SND_SOC_SPDIF m
+SND_SOC_SSM4567 m
+SND_SOC_TAS6424 m
+SND_SOC_TDA7419 m
+SND_SOC_TLV320AIC32X4 m
+SND_SOC_TLV320AIC32X4_I2C m
+SND_SOC_TLV320AIC32X4_SPI m
+SND_SOC_TOPOLOGY y
+SND_SOC_TS3A227E m
+SND_SOC_TSCS42XX m
+SND_SOC_WM8524 m
+SND_SPI y
+SND_SST_ATOM_HIFI2_PLATFORM m
+SND_SST_ATOM_HIFI2_PLATFORM_ACPI m
+SND_SST_ATOM_HIFI2_PLATFORM_PCI m
+SND_SST_IPC m
+SND_SST_IPC_ACPI m
+SND_SST_IPC_PCI m
+SPI_MASTER y
+ST_UVIS25_SPI m
l/gegl-0.4.22-x86_64-1.txz: Upgraded.
l/glib2-2.62.5-x86_64-1.txz: Upgraded.
l/python-requests-2.23.0-x86_64-1.txz: Upgraded.
n/NetworkManager-1.22.8-x86_64-1.txz: Upgraded.
n/openssh-8.2p1-x86_64-2.txz: Rebuilt.
n/php-7.4.3-x86_64-1.txz: Upgraded.
This update fixes bugs and security issues:
Phar: Files added to tar with Phar::buildFromIterator have
all-access permissions.
Phar: heap-buffer-overflow in phar_extract_file.
Session: Null Pointer Dereference in PHP Session Upload Progress.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7063https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7061https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7062
(* Security fix *)
x/mesa-20.0.0-x86_64-1.txz: Upgraded.
Added Wayland platform support.
x/wayland-1.18.0-x86_64-1.txz: Added.
x/wayland-protocols-1.18-noarch-1.txz: Added.
x/xorg-server-1.20.7-x86_64-2.txz: Rebuilt.
x/xorg-server-xephyr-1.20.7-x86_64-2.txz: Rebuilt.
x/xorg-server-xnest-1.20.7-x86_64-2.txz: Rebuilt.
x/xorg-server-xvfb-1.20.7-x86_64-2.txz: Rebuilt.
x/xorg-server-xwayland-1.20.7-x86_64-2.txz: Added.
xap/gimp-2.10.16-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/PAM/openssh-8.2p1-x86_64-2_pam.txz: Rebuilt.
/etc/pam.d/sshd: add commented out pam_tally2 example.
testing/packages/PAM/shadow-4.8.1-x86_64-5_pam.txz: Rebuilt.
/etc/pam.d/system-auth: add support for pam_group, remove pam_tally2.
Thanks to ivandi.
/etc/pam.d/*: Don't use tabs.
testing/packages/PAM/util-linux-2.35.1-x86_64-4_pam.txz: Rebuilt.
/etc/pam.d/login: add commented out pam_tally2 example.
/etc/pam.d/*: Don't use tabs.
usb-and-pxe-installers/usbboot.img: Rebuilt.
l/gtk+3-3.24.14-x86_64-2.txz: Rebuilt.
Rebuilt with -DG_ENABLE_DEBUG. Thanks to Bindestreck.
Also built with -DG_DISABLE_CAST_CHECKS and -Dbroadway_backend=true.
l/imagemagick-7.0.9_24-x86_64-1.txz: Upgraded.
n/bind-9.14.10-x86_64-2.txz: Rebuilt.
rc.bind: make sure it works with a non-root user specified in $NAMED_OPTIONS.
Thanks to Luigi Trovato.
n/tin-2.4.4-x86_64-1.txz: Upgraded.
xap/blackbox-0.76-x86_64-1.txz: Upgraded.
testing/packages/PAM/libcap-2.32-x86_64-1_pam.txz: Upgraded.
a/shadow-4.8.1-x86_64-4.txz: Rebuilt.
Recompiled using --with-group-name-max-length=32. Thanks to Bart van der Hall.
ap/cups-filters-1.27.1-x86_64-1.txz: Upgraded.
d/git-2.25.1-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.14-x86_64-1.txz: Upgraded.
l/libcap-2.32-x86_64-1.txz: Upgraded.
l/python-idna-2.9-x86_64-1.txz: Upgraded.
testing/packages/PAM/shadow-4.8.1-x86_64-4_pam.txz: Rebuilt.
Recompiled using --with-group-name-max-length=32. Thanks to Bart van der Hall.
ap/ksh93-20200131_e4fea8c5-x86_64-1.txz: Upgraded.
ap/zsh-5.8-x86_64-1.txz: Upgraded.
l/brotli-1.0.7-x86_64-1.txz: Added.
l/gmime-3.2.6-x86_64-1.txz: Upgraded.
l/hyphen-2.8.8-x86_64-1.txz: Added.
l/openal-soft-1.20.1-x86_64-1.txz: Upgraded.
Thanks to Skaendo and Willy Sudiarto Raharjo.
l/qt5-webkit-5.212.0_alpha3-x86_64-1.txz: Added.
Thanks to alienBOB.
l/woff2-20180531_a0d0ed7-x86_64-1.txz: Added.
n/bluez-5.53-x86_64-1.txz: Upgraded.
n/mutt-1.13.4-x86_64-1.txz: Upgraded.
n/samba-4.11.6-x86_64-3.txz: Rebuilt.
n/socat-1.7.3.4-x86_64-1.txz: Added.
n/whois-5.5.6-x86_64-1.txz: Upgraded.
testing/packages/PAM/samba-4.11.6-x86_64-3_pam.txz: Rebuilt.
Added patches to fix joining a DC when using krb5. Looks like the patches are
already upstreamed in the latest 4.12.0-rc. Thanks to camerabambai.
a/libcgroup-0.41-x86_64-6.txz: Rebuilt.
ap/mariadb-10.4.12-x86_64-2.txz: Rebuilt.
d/Cython-0.29.15-x86_64-1.txz: Upgraded.
d/cmake-3.16.4-x86_64-2.txz: Rebuilt.
Recompiled against qt5-5.13.2.
d/doxygen-1.8.17-x86_64-2.txz: Rebuilt.
Recompiled against qt5-5.13.2.
l/ConsoleKit2-1.2.1-x86_64-3.txz: Rebuilt.
l/gnome-keyring-3.34.0-x86_64-2.txz: Rebuilt.
l/imagemagick-7.0.9_23-x86_64-1.txz: Upgraded.
l/polkit-0.116-x86_64-2.txz: Rebuilt.
l/python-future-0.18.2-x86_64-1.txz: Added.
This is needed by fetchmailconf and will probably see additional use as
projects jump off of the sinking Python 2 ship.
l/v4l-utils-1.18.0-x86_64-2.txz: Rebuilt.
Recompiled against qt5-5.13.2.
n/cifs-utils-6.10-x86_64-3.txz: Rebuilt.
n/fetchmail-6.4.2-x86_64-1.txz: Upgraded.
n/pinentry-1.1.0-x86_64-3.txz: Rebuilt.
Recompiled against qt5-5.13.2.
n/samba-4.11.6-x86_64-2.txz: Rebuilt.
n/wpa_supplicant-2.9-x86_64-2.txz: Rebuilt.
Recompiled against qt5-5.13.2.
xap/xpdf-4.02-x86_64-3.txz: Rebuilt.
Recompiled against qt5-5.13.2.
testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-3_pam.txz: Rebuilt.
Put the pam security modules in /lib${LIBDIRSUFFIX}/security.
Remove .la files in /lib${LIBDIRSUFFIX}/security.
testing/packages/PAM/cifs-utils-6.10-x86_64-3_pam.txz: Rebuilt.
Put the pam security modules in /lib${LIBDIRSUFFIX}/security.
testing/packages/PAM/gnome-keyring-3.34.0-x86_64-2_pam.txz: Rebuilt.
Put the pam security modules in /lib${LIBDIRSUFFIX}/security.
Remove .la files in /lib${LIBDIRSUFFIX}/security.
testing/packages/PAM/libcgroup-0.41-x86_64-6_pam.txz: Rebuilt.
Put the pam security modules in /lib${LIBDIRSUFFIX}/security.
Remove .la files in /lib${LIBDIRSUFFIX}/security.
testing/packages/PAM/libpwquality-1.4.2-x86_64-2_pam.txz: Rebuilt.
Put the pam security modules in /lib${LIBDIRSUFFIX}/security.
Remove .la files in /lib${LIBDIRSUFFIX}/security.
testing/packages/PAM/mariadb-10.4.12-x86_64-2_pam.txz: Rebuilt.
Put the pam security modules in /lib${LIBDIRSUFFIX}/security.
testing/packages/PAM/pam-1.3.1-x86_64-2_pam.txz: Rebuilt.
Put the pam security modules in /lib${LIBDIRSUFFIX}/security to support
multilib. Thanks to GazL.
testing/packages/PAM/polkit-0.116-x86_64-2_pam.txz: Rebuilt.
Rebuilt using --with-pam-module-dir=/lib${LIBDIRSUFFIX}/security.
testing/packages/PAM/samba-4.11.6-x86_64-2_pam.txz: Rebuilt.
Put the pam security modules in /lib${LIBDIRSUFFIX}/security.
a/kernel-generic-5.4.20-x86_64-1.txz: Upgraded.
a/kernel-huge-5.4.20-x86_64-1.txz: Upgraded.
a/kernel-modules-5.4.20-x86_64-1.txz: Upgraded.
a/shadow-4.8.1-x86_64-3.txz: Rebuilt.
a/util-linux-2.35.1-x86_64-3.txz: Rebuilt.
d/kernel-headers-5.4.20-x86-1.txz: Upgraded.
k/kernel-source-5.4.20-noarch-1.txz: Upgraded.
l/ConsoleKit2-1.2.1-x86_64-2.txz: Rebuilt.
l/dconf-editor-3.34.4-x86_64-1.txz: Upgraded.
l/libxkbcommon-0.10.0-x86_64-1.txz: Added.
l/openal-soft-1.19.1-x86_64-1.txz: Added.
l/qt5-5.13.2-x86_64-1.txz: Added.
Thanks to alienBOB.
n/openssh-8.2p1-x86_64-1.txz: Upgraded.
Potentially incompatible changes:
* ssh(1), sshd(8): the removal of "ssh-rsa" from the accepted
CASignatureAlgorithms list.
* ssh(1), sshd(8): this release removes diffie-hellman-group14-sha1
from the default key exchange proposal for both the client and
server.
* ssh-keygen(1): the command-line options related to the generation
and screening of safe prime numbers used by the
diffie-hellman-group-exchange-* key exchange algorithms have
changed. Most options have been folded under the -O flag.
* sshd(8): the sshd listener process title visible to ps(1) has
changed to include information about the number of connections that
are currently attempting authentication and the limits configured
by MaxStartups.
x/mesa-19.3.4-x86_64-2.txz: Rebuilt.
Reverted "[PATCH] swr: Fix GCC 4.9 checks." which makes X fail to start with
an illegal instruction on some hardware.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-2_pam.txz: Rebuilt.
Rebuilt with --disable-libcgmanager to fix setting limits on PAM.
Thanks to gattocarlo.
testing/packages/PAM/openssh-8.2p1-x86_64-1_pam.txz: Upgraded.
testing/packages/PAM/shadow-4.8.1-x86_64-3_pam.txz: Rebuilt.
Moved some of the /etc/pam.d/ file to the util-linux package where they
more properly belong.
testing/packages/PAM/util-linux-2.35.1-x86_64-3_pam.txz: Rebuilt.
Added some /etc/pam.d/ files previously in the shadow package.
Changed /etc/pam.d/{chfn,chsh} and made chfn/chsh setuid root to fix them.
Added /etc/pam.d/{runuser,runuser-l}.
usb-and-pxe-installers/usbboot.img: Rebuilt.
