Commit graph

5 commits

Author SHA1 Message Date
Patrick J Volkerding
767006b5b5 Fri Oct 18 22:51:09 UTC 2024
a/elilo-3.16-x86_64-17.txz:  Rebuilt.
  eliloconfig: adapt to new naming and lack of huge kernel. Thanks to gildbg.
ap/cups-browsed-2.1.0-x86_64-1.txz:  Upgraded.
  Removed support for legacy CUPS browsing and for LDAP
  Legacy CUPS browsing is not needed any more and, our implementation
  accepting any UDP packet on port 631, causes vulnerabilities, and
  our LDAP support is does not comly with RFC 7612 and is therefore
  limited. Fixes CVE-2024-47176 and CVE-2024-47850
  Default `BrowseRemoteProtocols` should not include `cups` protocol
  Works around CVE-2024-47176, the fix is the complete removal of
  legacy CUPS Browsing functionality.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2024-47176
    https://www.cve.org/CVERecord?id=CVE-2024-47850
  (* Security fix *)
l/dav1d-1.5.0-x86_64-1.txz:  Upgraded.
l/gvfs-1.56.1-x86_64-1.txz:  Upgraded.
l/libcupsfilters-2.1.0-x86_64-1.txz:  Upgraded.
  `cfGetPrinterAttributes5()`: Validate response attributes before return
  The IPP print destination which we are querying can be corrupted or
  forged, so validate the response to strenghten security. Fixes
  CVE-2024-47076.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2024-47076
  (* Security fix *)
l/libppd-2.1.0-x86_64-1.txz:  Upgraded.
  Prevent PPD generation based on invalid IPP response
  Overtaken from CUPS 2.x: Validate IPP attributes in PPD generator,
  refactor make-and-model code, PPDize preset and template names,
  quote PPD localized strings. Fixes CVE-2024-47175.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2024-47175
  (* Security fix *)
l/python-MarkupSafe-3.0.2-x86_64-1.txz:  Upgraded.
l/python-psutil-6.1.0-x86_64-1.txz:  Upgraded.
x/fcitx5-qt-5.1.8-x86_64-1.txz:  Upgraded.
2024-10-19 01:29:44 +02:00
Patrick J Volkerding
d61d08c9cb Tue Oct 8 18:39:18 UTC 2024
a/mkinitrd-1.4.11-x86_64-38.txz:  Rebuilt.
  /boot/remove-orphaned-initrds: this script will remove initrds found in /boot
  if there is no matching kernel version found. This can be run manually or
  added as a cron job to prevent unneeded initrds from filling up /boot.
a/pkgtools-15.1-noarch-13.txz:  Rebuilt.
  /boot/kernel-backup: with the huge kernel gone, this script seeks to fill the
  gap by offering an easy way to make a backup kernel that will be picked up
  by update-grub. It does this by creating entries in the pkgtools database
  that protect a kernel, modules, and optionally an initrd from being removed
  when the kernel-generic package is upgraded. See the script for details.
ap/rpm-4.20.0-x86_64-1.txz:  Upgraded.
d/git-2.47.0-x86_64-1.txz:  Upgraded.
l/python-MarkupSafe-3.0.1-x86_64-1.txz:  Upgraded.
l/python-tomli-w-1.1.0-x86_64-1.txz:  Upgraded.
n/cifs-utils-7.1-x86_64-1.txz:  Upgraded.
n/netatalk-4.0.1-x86_64-1.txz:  Upgraded.
2024-10-08 21:00:40 +02:00
Patrick J Volkerding
44183f6ba3 Fri Mar 29 20:39:11 UTC 2024
Everything in this batch besides aaa_libraries, xz, mcelog, and harfbuzz is a
rebuild or upgrade to build against python-3.11.8. Looking at the python
readiness page, it seems like a lot of stuff we use is not certified for
python-3.12 yet (although to be fair, about half as much isn't certified for
python-3.11 either). But 3.11 seems to be the safer choice even though the
final bugfix update is scheduled for Monday. And, if we do decide to move
ahead to 3.12 later on, it'll be a lot easier than this update was.
Enjoy! :-)
a/aaa_libraries-15.1-x86_64-29.txz:  Rebuilt.
  Upgraded: libzstd.so.1.5.6, libexpat.so.1.9.2, libglib-2.0.so.0.8000.0,
  libgmodule-2.0.so.0.8000.0, libgobject-2.0.so.0.8000.0,
  libgthread-2.0.so.0.8000.0.
  Removed: libboost_*.so.1.83.0.
a/libblockdev-2.28-x86_64-3.txz:  Rebuilt.
a/libbytesize-2.8-x86_64-2.txz:  Rebuilt.
a/libpwquality-1.4.5-x86_64-2.txz:  Rebuilt.
a/mcelog-198-x86_64-1.txz:  Upgraded.
a/util-linux-2.40-x86_64-2.txz:  Rebuilt.
a/volume_key-0.3.12-x86_64-8.txz:  Rebuilt.
a/xz-5.6.1-x86_64-2.txz:  Rebuilt.
  Seems like a good idea to build this from a git pull rather than the signed
  release tarballs. :-)
  The liblzma in the previous packages were not found to be vulnerable by the
  detection script, but I'd rather not carry the bad m4 files in our sources.
  Here's a test script for anyone wanting to try it:
  if hexdump -ve '1/1 "%.2x"' /lib*/liblzma.so.5 | grep -q f30f1efa554889f54c89ce5389fb81e7000000804883ec28488954241848894c2410 ; then
    echo probably vulnerable
  else
    echo probably not vulnerable
  fi
ap/hplip-3.23.12-x86_64-3.txz:  Rebuilt.
ap/linuxdoc-tools-0.9.82-x86_64-5.txz:  Rebuilt.
ap/rpm-4.19.1.1-x86_64-2.txz:  Rebuilt.
ap/undervolt-20210815_e39aea1-x86_64-3.txz:  Rebuilt.
ap/vim-9.1.0225-x86_64-1.txz:  Upgraded.
d/Cython-3.0.9-x86_64-2.txz:  Rebuilt.
d/distcc-3.4-x86_64-5.txz:  Rebuilt.
d/gdb-14.2-x86_64-2.txz:  Rebuilt.
d/gyp-20210831_d6c5dd51-x86_64-3.txz:  Rebuilt.
d/llvm-18.1.2-x86_64-2.txz:  Rebuilt.
d/mercurial-6.7.1-x86_64-2.txz:  Rebuilt.
d/meson-1.4.0-x86_64-2.txz:  Rebuilt.
d/python-pip-24.0-x86_64-2.txz:  Rebuilt.
d/python-setuptools-69.2.0-x86_64-2.txz:  Rebuilt.
d/python3-3.11.8-x86_64-1.txz:  Upgraded.
  Shared library .so-version bump.
d/scons-4.7.0-x86_64-2.txz:  Rebuilt.
kde/cantor-23.08.5-x86_64-4.txz:  Rebuilt.
kde/kapidox-5.115.0-x86_64-2.txz:  Rebuilt.
kde/kdev-python-23.08.5-x86_64-2.txz:  Rebuilt.
kde/kig-23.08.5-x86_64-2.txz:  Rebuilt.
kde/kmymoney-5.1.3-x86_64-4.txz:  Rebuilt.
kde/kopeninghours-23.08.5-x86_64-2.txz:  Rebuilt.
kde/krita-5.2.2-x86_64-6.txz:  Rebuilt.
l/M2Crypto-0.41.0-x86_64-2.txz:  Rebuilt.
l/Mako-1.3.2-x86_64-2.txz:  Rebuilt.
l/PyQt-builder-1.15.4-x86_64-2.txz:  Rebuilt.
l/PyQt5-5.15.10-x86_64-2.txz:  Rebuilt.
l/PyQt5_sip-12.13.0-x86_64-2.txz:  Rebuilt.
l/QScintilla-2.14.1-x86_64-3.txz:  Rebuilt.
l/avahi-20240306_709e60f-x86_64-2.txz:  Rebuilt.
l/brotli-1.1.0-x86_64-2.txz:  Rebuilt.
l/dbus-python-1.3.2-x86_64-2.txz:  Rebuilt.
l/gexiv2-0.14.2-x86_64-3.txz:  Rebuilt.
l/gi-docgen-2023.3-x86_64-2.txz:  Rebuilt.
l/glade-3.40.0-x86_64-2.txz:  Rebuilt.
l/gobject-introspection-1.80.0-x86_64-2.txz:  Rebuilt.
l/harfbuzz-8.4.0-x86_64-1.txz:  Upgraded.
l/lensfun-0.3.4-x86_64-2.txz:  Rebuilt.
l/libcaca-0.99.beta20-x86_64-2.txz:  Rebuilt.
l/libcap-ng-0.8.4-x86_64-2.txz:  Rebuilt.
l/libieee1284-0.2.11-x86_64-8.txz:  Rebuilt.
l/libimobiledevice-20231007_04c0233-x86_64-2.txz:  Rebuilt.
l/libnvme-1.8-x86_64-2.txz:  Rebuilt.
l/libplist-2.4.0-x86_64-2.txz:  Rebuilt.
l/libwebp-1.3.2-x86_64-3.txz:  Rebuilt.
l/libxml2-2.12.6-x86_64-3.txz:  Rebuilt.
l/libxslt-1.1.39-x86_64-2.txz:  Rebuilt.
l/newt-0.52.24-x86_64-3.txz:  Rebuilt.
l/protobuf-26.1-x86_64-2.txz:  Rebuilt.
l/pycairo-1.26.0-x86_64-3.txz:  Rebuilt.
l/pycups-2.0.1-x86_64-7.txz:  Rebuilt.
l/pycurl-7.45.3-x86_64-2.txz:  Rebuilt.
l/pygobject3-3.48.1-x86_64-2.txz:  Rebuilt.
l/pyparsing-3.1.2-x86_64-2.txz:  Rebuilt.
l/python-Jinja2-3.1.3-x86_64-2.txz:  Rebuilt.
l/python-MarkupSafe-2.1.5-x86_64-2.txz:  Rebuilt.
l/python-PyYAML-6.0.1-x86_64-3.txz:  Rebuilt.
l/python-alabaster-0.7.16-x86_64-2.txz:  Rebuilt.
l/python-appdirs-1.4.4-x86_64-7.txz:  Rebuilt.
l/python-babel-2.14.0-x86_64-2.txz:  Rebuilt.
l/python-build-1.2.1-x86_64-2.txz:  Rebuilt.
l/python-calver-2022.6.26-x86_64-2.txz:  Rebuilt.
l/python-certifi-2024.2.2-x86_64-2.txz:  Rebuilt.
l/python-cffi-1.16.0-x86_64-2.txz:  Rebuilt.
l/python-chardet-5.2.0-x86_64-2.txz:  Rebuilt.
l/python-charset-normalizer-3.3.2-x86_64-2.txz:  Rebuilt.
l/python-distro-1.9.0-x86_64-2.txz:  Rebuilt.
l/python-dnspython-2.6.1-x86_64-2.txz:  Rebuilt.
l/python-docutils-0.20.1-x86_64-2.txz:  Rebuilt.
l/python-doxypypy-0.8.8.7-x86_64-2.txz:  Rebuilt.
l/python-doxyqml-0.5.3-x86_64-2.txz:  Rebuilt.
l/python-editables-0.5-x86_64-2.txz:  Rebuilt.
l/python-flit-core-3.9.0-x86_64-2.txz:  Rebuilt.
l/python-future-1.0.0-x86_64-2.txz:  Rebuilt.
l/python-glad2-2.0.6-x86_64-2.txz:  Rebuilt.
l/python-hatchling-1.22.4-x86_64-2.txz:  Rebuilt.
l/python-html5lib-1.1-x86_64-2.txz:  Rebuilt.
l/python-idna-3.6-x86_64-2.txz:  Rebuilt.
l/python-imagesize-1.4.1-x86_64-2.txz:  Rebuilt.
l/python-importlib_metadata-7.1.0-x86_64-2.txz:  Rebuilt.
l/python-installer-0.7.0-x86_64-2.txz:  Rebuilt.
l/python-lxml-5.1.1-x86_64-1.txz:  Upgraded.
l/python-markdown-3.6-x86_64-2.txz:  Rebuilt.
l/python-notify2-0.3.1-x86_64-11.txz:  Rebuilt.
l/python-packaging-24.0-x86_64-2.txz:  Rebuilt.
l/python-pathspec-0.12.1-x86_64-2.txz:  Rebuilt.
l/python-pbr-6.0.0-x86_64-2.txz:  Rebuilt.
l/python-pillow-10.2.0-x86_64-2.txz:  Rebuilt.
l/python-pluggy-1.4.0-x86_64-2.txz:  Rebuilt.
l/python-ply-3.11-x86_64-9.txz:  Rebuilt.
l/python-psutil-5.9.8-x86_64-2.txz:  Rebuilt.
l/python-pycparser-2.21-x86_64-2.txz:  Rebuilt.
l/python-pygments-2.17.2-x86_64-2.txz:  Rebuilt.
l/python-pyproject-hooks-1.0.0-x86_64-2.txz:  Rebuilt.
l/python-pysol_cards-0.16.0-x86_64-2.txz:  Rebuilt.
l/python-pytz-2024.1-x86_64-2.txz:  Rebuilt.
l/python-random2-1.0.2-x86_64-2.txz:  Rebuilt.
l/python-requests-2.31.0-x86_64-2.txz:  Rebuilt.
l/python-sane-2.9.1-x86_64-6.txz:  Rebuilt.
l/python-setuptools_scm-8.0.4-x86_64-2.txz:  Rebuilt.
l/python-six-1.16.0-x86_64-4.txz:  Rebuilt.
l/python-smartypants-2.0.1-x86_64-2.txz:  Rebuilt.
l/python-snowballstemmer-2.2.0-x86_64-2.txz:  Rebuilt.
l/python-sphinx-7.2.6-x86_64-2.txz:  Rebuilt.
l/python-sphinx_rtd_theme-2.0.0-x86_64-2.txz:  Rebuilt.
l/python-tomli-2.0.1-x86_64-2.txz:  Rebuilt.
l/python-tomli-w-1.0.0-x86_64-2.txz:  Rebuilt.
l/python-trove-classifiers-2024.3.25-x86_64-2.txz:  Rebuilt.
l/python-typing_extensions-4.10.0-x86_64-2.txz:  Rebuilt.
l/python-typogrify-2.0.7-x86_64-2.txz:  Rebuilt.
l/python-urllib3-2.2.1-x86_64-2.txz:  Rebuilt.
l/python-webencodings-0.5.1-x86_64-2.txz:  Rebuilt.
l/python-wheel-0.43.0-x86_64-2.txz:  Rebuilt.
l/python-zipp-3.18.1-x86_64-2.txz:  Rebuilt.
l/sip-6.8.3-x86_64-2.txz:  Rebuilt.
l/speech-dispatcher-0.11.5-x86_64-2.txz:  Rebuilt.
l/system-config-printer-1.5.18-x86_64-2.txz:  Rebuilt.
l/talloc-2.4.2-x86_64-2.txz:  Rebuilt.
l/tdb-1.4.10-x86_64-2.txz:  Rebuilt.
l/tevent-0.16.1-x86_64-2.txz:  Rebuilt.
n/epic5-2.1.12-x86_64-7.txz:  Rebuilt.
n/fetchmail-6.4.38-x86_64-2.txz:  Rebuilt.
n/getmail-6.18.14-x86_64-2.txz:  Rebuilt.
n/gpgme-1.23.2-x86_64-3.txz:  Rebuilt.
n/net-snmp-5.9.4-x86_64-2.txz:  Rebuilt.
n/nftables-1.0.9-x86_64-2.txz:  Rebuilt.
n/nmap-7.94-x86_64-2.txz:  Rebuilt.
n/nss-pam-ldapd-0.9.12-x86_64-4.txz:  Rebuilt.
n/obexftp-0.24.2-x86_64-12.txz:  Rebuilt.
n/pssh-2.3.5-x86_64-2.txz:  Rebuilt.
n/samba-4.20.0-x86_64-2.txz:  Rebuilt.
x/ibus-1.5.29-x86_64-3.txz:  Rebuilt.
x/ibus-anthy-1.5.16-x86_64-2.txz:  Rebuilt.
x/ibus-hangul-1.5.5-x86_64-2.txz:  Rebuilt.
x/ibus-libpinyin-1.15.7-x86_64-2.txz:  Rebuilt.
x/ibus-table-1.17.4-x86_64-2.txz:  Rebuilt.
x/marisa-0.2.6-x86_64-9.txz:  Rebuilt.
x/pyxdg-0.28-x86_64-2.txz:  Rebuilt.
x/xcb-proto-1.16.0-x86_64-3.txz:  Rebuilt.
xap/blueman-2.3.5-x86_64-2.txz:  Rebuilt.
xap/hexchat-2.16.2-x86_64-2.txz:  Rebuilt.
xap/vim-gvim-9.1.0225-x86_64-1.txz:  Upgraded.
extra/brltty/brltty-6.6-x86_64-3.txz:  Rebuilt.
2024-03-29 22:36:12 +01:00
Patrick J Volkerding
878ab72ee4 Fri Mar 1 22:13:28 UTC 2024
a/kernel-firmware-20240229_5cd471e-noarch-1.txz:  Upgraded.
a/kernel-generic-6.6.19-x86_64-1.txz:  Upgraded.
a/kernel-huge-6.6.19-x86_64-1.txz:  Upgraded.
a/kernel-modules-6.6.19-x86_64-1.txz:  Upgraded.
d/Cython-3.0.8-x86_64-1.txz:  Upgraded.
d/kernel-headers-6.6.19-x86-1.txz:  Upgraded.
d/python-pip-24.0-x86_64-1.txz:  Upgraded.
d/python-setuptools-69.1.1-x86_64-1.txz:  Upgraded.
k/kernel-source-6.6.19-noarch-1.txz:  Upgraded.
kde/fcitx5-configtool-5.1.4-x86_64-1.txz:  Upgraded.
  For now, continuing to build this against qt5.
l/M2Crypto-0.41.0-x86_64-1.txz:  Upgraded.
l/Mako-1.3.2-x86_64-1.txz:  Upgraded.
l/dbus-python-1.3.2-x86_64-1.txz:  Upgraded.
l/expat-2.6.1-x86_64-1.txz:  Upgraded.
  This is a bugfix release.
l/glib-networking-2.78.1-x86_64-1.txz:  Upgraded.
l/pycairo-1.26.0-x86_64-1.txz:  Upgraded.
l/pycurl-7.45.3-x86_64-1.txz:  Upgraded.
l/pygobject3-3.46.0-x86_64-1.txz:  Upgraded.
l/pyparsing-3.1.1-x86_64-1.txz:  Upgraded.
l/python-Jinja2-3.1.3-x86_64-1.txz:  Upgraded.
l/python-MarkupSafe-2.1.5-x86_64-1.txz:  Upgraded.
l/python-PyYAML-6.0.1-x86_64-1.txz:  Upgraded.
l/python-alabaster-0.7.16-x86_64-1.txz:  Upgraded.
l/python-babel-2.14.0-x86_64-1.txz:  Upgraded.
l/python-build-1.0.3-x86_64-1.txz:  Upgraded.
l/python-certifi-2024.2.2-x86_64-1.txz:  Upgraded.
l/python-cffi-1.16.0-x86_64-1.txz:  Upgraded.
l/python-chardet-5.2.0-x86_64-1.txz:  Upgraded.
l/python-charset-normalizer-3.3.2-x86_64-1.txz:  Upgraded.
l/python-distro-1.9.0-x86_64-1.txz:  Upgraded.
l/python-dnspython-2.6.1-x86_64-1.txz:  Upgraded.
l/python-doxypypy-0.8.8.7-x86_64-1.txz:  Upgraded.
l/python-doxyqml-0.5.3-x86_64-1.txz:  Upgraded.
l/python-future-1.0.0-x86_64-1.txz:  Upgraded.
l/python-glad2-2.0.5-x86_64-1.txz:  Upgraded.
l/python-idna-3.6-x86_64-1.txz:  Upgraded.
l/python-imagesize-1.4.1-x86_64-1.txz:  Upgraded.
l/python-importlib_metadata-7.0.1-x86_64-1.txz:  Upgraded.
l/python-lxml-5.1.0-x86_64-1.txz:  Upgraded.
l/python-markdown-3.5.2-x86_64-1.txz:  Upgraded.
l/python-packaging-23.2-x86_64-1.txz:  Upgraded.
l/python-pbr-6.0.0-x86_64-1.txz:  Upgraded.
l/python-pillow-10.2.0-x86_64-1.txz:  Upgraded.
l/python-pysol_cards-0.16.0-x86_64-1.txz:  Upgraded.
l/python-pytz-2024.1-x86_64-1.txz:  Upgraded.
l/python-random2-1.0.2-x86_64-1.txz:  Upgraded.
l/python-setuptools_scm-7.1.0-x86_64-1.txz:  Upgraded.
l/python-tomli-2.0.1-x86_64-1.txz:  Upgraded.
l/python-typing_extensions-4.10.0-x86_64-1.txz:  Added.
  This is a temporary addition, needed by python-setuptools_scm until we get
  a newer version of both that and Python.
l/python-wheel-0.42.0-x86_64-1.txz:  Upgraded.
l/python-zipp-3.17.0-x86_64-1.txz:  Upgraded.
l/wavpack-5.7.0-x86_64-1.txz:  Upgraded.
n/nghttp2-1.60.0-x86_64-1.txz:  Upgraded.
tcl/tcl-8.6.14-x86_64-1.txz:  Upgraded.
tcl/tk-8.6.14-x86_64-1.txz:  Upgraded.
x/fcitx5-5.1.8-x86_64-1.txz:  Upgraded.
x/fcitx5-chinese-addons-5.1.4-x86_64-1.txz:  Upgraded.
  For now, continuing to build this against qt5.
x/fcitx5-gtk-5.1.2-x86_64-1.txz:  Upgraded.
x/fcitx5-hangul-5.1.2-x86_64-1.txz:  Upgraded.
x/fcitx5-kkc-5.1.2-x86_64-1.txz:  Upgraded.
  For now, continuing to build this against qt5.
x/fcitx5-qt-5.1.5-x86_64-1.txz:  Upgraded.
  This is compiled against both qt5 and qt6.
x/fcitx5-table-extra-5.1.4-x86_64-1.txz:  Upgraded.
x/fcitx5-table-other-5.1.1-x86_64-1.txz:  Upgraded.
x/fcitx5-unikey-5.1.3-x86_64-1.txz:  Upgraded.
  For now, continuing to build this against qt5.
x/libime-1.1.6-x86_64-1.txz:  Upgraded.
x/xcb-imdkit-1.0.7-x86_64-1.txz:  Upgraded.
xfce/xfce4-clipman-plugin-1.6.6-x86_64-1.txz:  Upgraded.
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.
2024-03-02 00:36:00 +01:00
Patrick J Volkerding
ef001ab523 Mon Nov 22 19:52:11 UTC 2021
l/imagemagick-7.1.0_16-x86_64-1.txz:  Upgraded.
l/python-Jinja2-3.0.3-x86_64-1.txz:  Added.
  Added missing dependency of kapidox.
l/python-MarkupSafe-2.0.1-x86_64-1.txz:  Added.
  Added missing dependency of Mako.
l/python-PyYAML-6.0-x86_64-1.txz:  Added.
  Added missing dependency of kapidox.
l/python-doxypypy-0.8.8.6-x86_64-1.txz:  Added.
  Added missing dependency of kapidox.
l/python-doxyqml-0.5.1-x86_64-1.txz:  Added.
  Added missing dependency of kapidox.
l/python-pbr-5.8.0-x86_64-1.txz:  Added.
  Added missing dependency of python-pysol_cards.
extra/tigervnc/tigervnc-1.12.0-x86_64-2.txz:  Rebuilt.
  Use the upstream vncserver script, patched to search in some additional
  locations for a startup script: $HOME/.vnc/xstartup, $HOME/.xinitrc, and
  /etc/X11/xinit/xinitrc.
  Add a symlink for vncserver in the old location (/usr/bin/vncserver).
  Thanks to 0XBF.
2021-11-23 08:59:58 +01:00