a/kernel-firmware-20241108_ad74054-noarch-1.txz: Upgraded.
a/kernel-generic-6.11.7-x86_64-1.txz: Upgraded.
Unless disabled in /etc/default/geninitrd, automatically generate an initial
ramdisk upon package installation or upgrade.
a/mkinitrd-1.4.11-x86_64-46.txz: Rebuilt.
geninitrd: also accept /opt/sbin/geninitrd as an override.
Suggested by regdub.
Since the installer sends different args to the setup scripts, we can't use
$1 as the kernel file with setup.01.mkinitrd, so convert it into a variable
in geninitrd instead (if needed).
mkinitrd_command_generator.sh: pvdisplay will complain if there are any file
descriptors besides stdin, stdout, and stderr, which will always be true when
called from a package install script due to file locking. So send stderr from
the two calls to pvdisplay to /dev/null.
d/kernel-headers-6.11.7-x86-1.txz: Upgraded.
k/kernel-source-6.11.7-noarch-1.txz: Upgraded.
l/python-packaging-24.2-x86_64-1.txz: Upgraded.
n/iptables-1.8.11-x86_64-1.txz: Upgraded.
n/lftp-4.9.3-x86_64-1.txz: Upgraded.
x/ibus-m17n-1.4.34-x86_64-1.txz: Upgraded.
x/xbacklight-1.2.4-x86_64-1.txz: Upgraded.
x/xf86-video-nouveau-1.0.18-x86_64-1.txz: Upgraded.
x/xrandr-1.5.3-x86_64-1.txz: Upgraded.
xfce/xfce4-weather-plugin-0.11.3-x86_64-1.txz: Upgraded.
extra/xf86-video-fbdev/xf86-video-fbdev-0.5.1-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/elilo-3.16-x86_64-17.txz: Rebuilt.
eliloconfig: adapt to new naming and lack of huge kernel. Thanks to gildbg.
ap/cups-browsed-2.1.0-x86_64-1.txz: Upgraded.
Removed support for legacy CUPS browsing and for LDAP
Legacy CUPS browsing is not needed any more and, our implementation
accepting any UDP packet on port 631, causes vulnerabilities, and
our LDAP support is does not comly with RFC 7612 and is therefore
limited. Fixes CVE-2024-47176 and CVE-2024-47850
Default `BrowseRemoteProtocols` should not include `cups` protocol
Works around CVE-2024-47176, the fix is the complete removal of
legacy CUPS Browsing functionality.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-47176https://www.cve.org/CVERecord?id=CVE-2024-47850
(* Security fix *)
l/dav1d-1.5.0-x86_64-1.txz: Upgraded.
l/gvfs-1.56.1-x86_64-1.txz: Upgraded.
l/libcupsfilters-2.1.0-x86_64-1.txz: Upgraded.
`cfGetPrinterAttributes5()`: Validate response attributes before return
The IPP print destination which we are querying can be corrupted or
forged, so validate the response to strenghten security. Fixes
CVE-2024-47076.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-47076
(* Security fix *)
l/libppd-2.1.0-x86_64-1.txz: Upgraded.
Prevent PPD generation based on invalid IPP response
Overtaken from CUPS 2.x: Validate IPP attributes in PPD generator,
refactor make-and-model code, PPDize preset and template names,
quote PPD localized strings. Fixes CVE-2024-47175.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-47175
(* Security fix *)
l/python-MarkupSafe-3.0.2-x86_64-1.txz: Upgraded.
l/python-psutil-6.1.0-x86_64-1.txz: Upgraded.
x/fcitx5-qt-5.1.8-x86_64-1.txz: Upgraded.
a/kernel-firmware-20241017_8dbcf94-noarch-1.txz: Upgraded.
a/kernel-generic-6.11.4-x86_64-1.txz: Upgraded.
ap/usbmuxd-20240916_0b1b233-x86_64-1.txz: Upgraded.
Fix USB tethering to an iPhone. Thanks to skubik and marav.
d/autoconf-archive-2024.10.16-noarch-1.txz: Upgraded.
d/kernel-headers-6.11.4-x86-1.txz: Upgraded.
d/rust-1.82.0-x86_64-1.txz: Upgraded.
k/kernel-source-6.11.4-noarch-1.txz: Upgraded.
l/glib2-2.82.2-x86_64-1.txz: Upgraded.
l/libunistring-1.3-x86_64-1.txz: Upgraded.
l/python-trove-classifiers-2024.10.16-x86_64-1.txz: Upgraded.
n/libtirpc-1.3.6-x86_64-1.txz: Upgraded.
x/xinit-1.4.2-x86_64-2.txz: Rebuilt.
startx: Ensure that xserverauthfile is created and given correct permissions
to avoid a startup error message. Thanks to Didier Spaier.
xap/mozilla-thunderbird-128.3.2esr-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/128.3.2esr/releasenotes/
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/hostname-3.24-x86_64-1.txz: Upgraded.
a/kernel-firmware-20241010_c410e4c-noarch-1.txz: Upgraded.
a/kernel-generic-6.10.14-x86_64-1.txz: Upgraded.
a/mkinitrd-1.4.11-x86_64-39.txz: Rebuilt.
Symlink /boot/remove-orphaned-initrds into /usr/sbin to get it in the $PATH.
a/pkgtools-15.1-noarch-14.txz: Rebuilt.
Renamed kernel-backup to make-kernel-backup.
We'll leave it in /boot where it's more likely to be noticed, but also
add a symlink in /usr/sbin so that it's in the $PATH.
Support /etc/default/make-kernel-backup.
Test to see if $KERNEL_FILE is actually a Linux kernel.
d/kernel-headers-6.10.14-x86-1.txz: Upgraded.
k/kernel-source-6.10.14-noarch-1.txz: Upgraded.
l/python-sphinx-8.1.0-x86_64-1.txz: Upgraded.
l/python-sphinx_rtd_theme-3.0.1-x86_64-1.txz: Upgraded.
n/c-ares-1.34.1-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-128.3.1esr-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/128.3.1esr/releasenotes/
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/kernel-generic-6.11.3-x86_64-1.txz: Upgraded.
testing/packages/kernel-headers-6.11.3-x86-1.txz: Upgraded.
testing/packages/kernel-source-6.11.3-noarch-1.txz: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/dracut-104-x86_64-1.txz: Upgraded.
d/cmake-3.30.5-x86_64-1.txz: Upgraded.
d/subversion-1.14.4-x86_64-1.txz: Upgraded.
l/mozjs128-128.3.1esr-x86_64-1.txz: Upgraded.
l/openexr-3.3.1-x86_64-1.txz: Upgraded.
l/python-charset-normalizer-3.4.0-x86_64-1.txz: Upgraded.
x/fcitx5-5.1.11-x86_64-1.txz: Upgraded.
x/fcitx5-anthy-5.1.5-x86_64-1.txz: Upgraded.
x/fcitx5-chinese-addons-5.1.7-x86_64-1.txz: Upgraded.
x/fcitx5-hangul-5.1.5-x86_64-1.txz: Upgraded.
x/fcitx5-kkc-5.1.5-x86_64-1.txz: Upgraded.
x/fcitx5-m17n-5.1.2-x86_64-1.txz: Upgraded.
x/fcitx5-qt-5.1.7-x86_64-1.txz: Upgraded.
x/fcitx5-unikey-5.1.5-x86_64-1.txz: Upgraded.
x/libime-1.1.9-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-128.3.1esr-x86_64-1.txz: Upgraded.
This update contains a critical security fix:
Use-after-free in Animation timeline.
"An attacker was able to achieve code execution in the content process by
exploiting a use-after-free in Animation timelines. We have had reports of
this vulnerability being exploited in the wild."
For more information, see:
https://www.mozilla.org/en-US/firefox/128.3.1/releasenotes/https://www.mozilla.org/security/advisories/mfsa2024-51/https://www.cve.org/CVERecord?id=CVE-2024-9680
(* Security fix *)
Several ELF objects were found to have rpaths pointing into /tmp, a world
writable directory. This could have allowed a local attacker to launch denial
of service attacks or execute arbitrary code when the affected binaries are
run by placing crafted ELF objects in the /tmp rpath location. All rpaths with
an embedded /tmp path have been scrubbed from the binaries, and makepkg has
gained a lint feature to detect these so that they won't creep back in.
a/kernel-firmware-20241001_95bfe08-noarch-1.txz: Upgraded.
a/kernel-generic-6.10.12-x86_64-1.txz: Upgraded.
a/pkgtools-15.1-noarch-12.txz: Rebuilt.
makepkg: when looking for ELF objects with --remove-rpaths or
--remove-tmp-rpaths, avoid false hits on files containing 'ELF' as part
of the directory or filename.
Also warn about /tmp rpaths after the package is built.
ap/cups-2.4.11-x86_64-1.txz: Upgraded.
ap/cups-browsed-2.0.1-x86_64-2.txz: Rebuilt.
Mitigate security issue that could lead to a denial of service or
the execution of arbitrary code.
Rebuilt with --with-browseremoteprotocols=none to disable incoming
connections, since this daemon has been shown to be insecure. If you
actually use cups-browsed, be sure to install the new
/etc/cups/cups-browsed.conf.new containing this line:
BrowseRemoteProtocols none
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-47176
(* Security fix *)
d/kernel-headers-6.10.12-x86-1.txz: Upgraded.
d/llvm-18.1.8-x86_64-3.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
d/luajit-2.1.1727621189-x86_64-1.txz: Upgraded.
d/ruby-3.3.5-x86_64-2.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
k/kernel-source-6.10.12-noarch-1.txz: Upgraded.
kde/kimageformats-5.116.0-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
kde/kio-extras-23.08.5-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
kde/krita-5.2.5-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
kde/libindi-2.1.0-x86_64-1.txz: Upgraded.
l/cryfs-0.10.3-x86_64-13.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
l/espeak-ng-1.51.1-x86_64-2.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
l/ffmpeg-7.1-x86_64-1.txz: Upgraded.
l/gegl-0.4.48-x86_64-3.txz: Rebuilt.
Recompiled against openexr-3.3.0.
l/gst-plugins-bad-free-1.24.8-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
l/imagemagick-7.1.1_38-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
l/libgsf-1.14.53-x86_64-1.txz: Upgraded.
l/librsvg-2.58.5-x86_64-1.txz: Upgraded.
l/libvncserver-0.9.14-x86_64-3.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
l/mozjs128-128.3.0esr-x86_64-1.txz: Upgraded.
l/netpbm-11.08.00-x86_64-1.txz: Upgraded.
l/opencv-4.10.0-x86_64-3.txz: Rebuilt.
Recompiled against openexr-3.3.0.
l/openexr-3.3.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/python-glad2-2.0.8-x86_64-1.txz: Upgraded.
l/python-pyproject-hooks-1.2.0-x86_64-1.txz: Upgraded.
l/spirv-llvm-translator-18.1.4-x86_64-2.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
l/woff2-20231106_0f4d304-x86_64-2.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
n/openobex-1.7.2-x86_64-6.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
x/marisa-0.2.6-x86_64-11.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
xap/gimp-2.10.38-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
xap/mozilla-firefox-128.3.0esr-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/128.3.0/releasenotes/https://www.mozilla.org/security/advisories/mfsa2024-47https://www.cve.org/CVERecord?id=CVE-2024-9392https://www.cve.org/CVERecord?id=CVE-2024-9393https://www.cve.org/CVERecord?id=CVE-2024-9394https://www.cve.org/CVERecord?id=CVE-2024-8900https://www.cve.org/CVERecord?id=CVE-2024-9396https://www.cve.org/CVERecord?id=CVE-2024-9397https://www.cve.org/CVERecord?id=CVE-2024-9398https://www.cve.org/CVERecord?id=CVE-2024-9399https://www.cve.org/CVERecord?id=CVE-2024-9400https://www.cve.org/CVERecord?id=CVE-2024-9401https://www.cve.org/CVERecord?id=CVE-2024-9402
(* Security fix *)
xap/xlockmore-5.80-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/kernel-generic-6.11.1-x86_64-1.txz: Upgraded.
testing/packages/kernel-headers-6.11.1-x86-1.txz: Upgraded.
testing/packages/kernel-source-6.11.1-noarch-1.txz: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
ap/ispell-3.4.06-x86_64-3.txz: Rebuilt.
Get rid of hardcoded temporary path in munchlist.
l/boost-1.86.0-x86_64-2.txz: Rebuilt.
Get rid of hardcoded temporary paths in the cmake files.
Since these paths point to a location that an unprivileged user could
create and populate with files that could be picked up during a build,
it's possible this bug could be used for malicious purposes.
Thanks to jmacloue.
(* Security fix *)
l/fribidi-1.0.16-x86_64-1.txz: Upgraded.
n/php-8.3.12-x86_64-1.txz: Upgraded.
This update fixes security issues:
CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter
Injection Vulnerability).
CGI: Fixed bug GHSA-94p6-54jq-9mwp (cgi.force_redirect configuration is
bypassable due to the environment variable collision).
FPM: Fixed bug GHSA-865w-9rf3-2wh5 (Logs from children may be altered).
SAPI: Fixed bug GHSA-9pqp-7h25-4f32 (Erroneous parsing of multipart form
data).
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-8926https://www.cve.org/CVERecord?id=CVE-2024-8927https://www.cve.org/CVERecord?id=CVE-2024-9026https://www.cve.org/CVERecord?id=CVE-2024-8925
(* Security fix *)
x/vulkan-sdk-1.3.290.0-x86_64-2.txz: Rebuilt.
Get rid of hardcoded temporary path in volkTargets.cmake.
(* Security fix *)
a/btrfs-progs-6.11-x86_64-1.txz: Upgraded.
a/dracut-103-x86_64-1.txz: Added.
This is Red Hat's tool to generate an initramfs (aka initrd). Around here,
we try not to suffer from Not Invented Here Syndrome (some might say the
less we invent, the better ;-). It never hurts to have additional options,
and it even looks like our old friend David Cantrell is on the AUTHORS list.
I've had good luck here with:
dracut --hostonly --force /boot/initrd-6.10.11-generic.img
Thanks to Didier Spaier for convincing me to try it out.
a/gawk-5.3.1-x86_64-1.txz: Upgraded.
a/kernel-generic-6.10.11-x86_64-1.txz: Upgraded.
a/upower-1.90.6-x86_64-1.txz: Upgraded.
d/kernel-headers-6.10.11-x86-1.txz: Upgraded.
k/kernel-source-6.10.11-noarch-1.txz: Upgraded.
l/libtiff-4.7.0-x86_64-1.txz: Upgraded.
n/curl-8.10.1-x86_64-1.txz: Upgraded.
x/mesa-24.2.3-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/kernel-generic-6.10.9-x86_64-1.txz: Upgraded.
a/kernel-huge-6.10.9-x86_64-1.txz: Upgraded.
a/kernel-modules-6.10.9-x86_64-1.txz: Upgraded.
ap/texinfo-7.1.1-x86_64-1.txz: Upgraded.
d/kernel-headers-6.10.9-x86-1.txz: Upgraded.
d/python3-3.11.10-x86_64-1.txz: Upgraded.
This update fixes security issues:
Bundled libexpat was updated to 2.6.3.
Fix quadratic complexity in parsing "-quoted cookie values with backslashes
by http.cookies.
Fixed various false positives and false negatives in IPv4Address.is_private,
IPv4Address.is_global, IPv6Address.is_private, IPv6Address.is_global.
Fix urllib.parse.urlunparse() and urllib.parse.urlunsplit() for URIs with
path starting with multiple slashes and no authority.
Remove backtracking from tarfile header parsing for hdrcharset, PAX, and
GNU sparse headers.
email.utils.getaddresses() and email.utils.parseaddr() now return ('', '')
2-tuples in more situations where invalid email addresses are encountered
instead of potentially inaccurate values. Add optional strict parameter to
these two functions: use strict=False to get the old behavior, accept
malformed inputs. getattr(email.utils, 'supports_strict_parsing', False) can
be used to check if the strict paramater is available.
Sanitize names in zipfile.Path to avoid infinite loops (gh-122905) without
breaking contents using legitimate characters.
Email headers with embedded newlines are now quoted on output. The generator
will now refuse to serialize (write) headers that are unsafely folded or
delimited; see verify_generated_headers.
For more information, see:
https://pythoninsider.blogspot.com/2024/09/python-3130rc2-3126-31110-31015-3920.htmlhttps://www.cve.org/CVERecord?id=CVE-2024-28757https://www.cve.org/CVERecord?id=CVE-2024-45490https://www.cve.org/CVERecord?id=CVE-2024-45491https://www.cve.org/CVERecord?id=CVE-2024-45492https://www.cve.org/CVERecord?id=CVE-2024-7592https://www.cve.org/CVERecord?id=CVE-2024-4032https://www.cve.org/CVERecord?id=CVE-2015-2104https://www.cve.org/CVERecord?id=CVE-2024-6232https://www.cve.org/CVERecord?id=CVE-2023-27043https://www.cve.org/CVERecord?id=CVE-2024-8088https://www.cve.org/CVERecord?id=CVE-2024-6923
(* Security fix *)
k/kernel-source-6.10.9-noarch-1.txz: Upgraded.
TEE n -> m
+AMDTEE m
+AMD_PMF m
+AMD_PMF_DEBUG n
Thanks to nick8325 for the suggestion.
l/qt5-5.15.15_20240903_363456a6-x86_64-1.txz: Upgraded.
x/noto-emoji-2.042-noarch-1.txz: Added.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
l/aom-3.10.0-x86_64-1.txz: Upgraded.
l/libpcap-1.10.5-x86_64-1.txz: Upgraded.
This update fixes security issues:
Clean up sock_initaddress() and its callers to avoid double frees
in some cases.
Fix pcap_findalldevs_ex() not to crash if passed a file:// URL with a
path to a directory that cannot be opened.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-7256https://www.cve.org/CVERecord?id=CVE-2024-8006
(* Security fix *)
l/mozilla-nss-3.104-x86_64-1.txz: Upgraded.
n/tcpdump-4.99.5-x86_64-1.txz: Upgraded.
x/wayland-protocols-1.37-noarch-1.txz: Upgraded.
a/aaa_glibc-solibs-2.40-x86_64-5.txz: Rebuilt.
a/kernel-firmware-20240828_335a1de-noarch-1.txz: Upgraded.
a/kernel-generic-6.10.7-x86_64-1.txz: Upgraded.
a/kernel-huge-6.10.7-x86_64-1.txz: Upgraded.
a/kernel-modules-6.10.7-x86_64-1.txz: Upgraded.
a/userspace-rcu-0.14.1-x86_64-1.txz: Upgraded.
ap/man-db-2.13.0-x86_64-1.txz: Upgraded.
ap/screen-5.0.0-x86_64-1.txz: Upgraded.
ap/vim-9.1.0702-x86_64-1.txz: Upgraded.
d/cmake-3.30.3-x86_64-1.txz: Upgraded.
d/gcc-14.2.0-x86_64-2.txz: Rebuilt.
Merge in parts of alienBOB's multilib build script, generalize the script
to work with both --enable-multilib and --disable-multilib, and otherwise
clean things up. Go ahead and build it multilib on 64-bit, because why not?
It's worth the bit of bloat to no longer have this package need to be
maintained separately and kept in sync. Thanks to alienBOB.
d/gcc-g++-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-gdc-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-gfortran-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-gm2-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-gnat-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-go-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-objc-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-rust-14.2.0-x86_64-2.txz: Rebuilt.
d/kernel-headers-6.10.7-x86-1.txz: Upgraded.
d/python-setuptools-73.0.1-x86_64-1.txz: Rebuilt.
Reverted due to regression: breaks g-ir-scanner
k/kernel-source-6.10.7-noarch-1.txz: Upgraded.
l/glibc-2.40-x86_64-5.txz: Rebuilt.
Enable multilib on 64-bit. Thanks to alienBOB.
Note that Slackware 64-bit can now run a 32-bit "Hello World!" but there
are no immediate plans to add additional multilib support by default.
Maybe down the road when bare metal 32-bit support goes away.
l/glibc-i18n-2.40-x86_64-5.txz: Rebuilt.
l/glibc-profile-2.40-x86_64-5.txz: Rebuilt.
l/gtk4-4.15.6-x86_64-1.txz: Upgraded.
l/libssh-0.11.1-x86_64-1.txz: Upgraded.
l/protobuf-28.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/python-certifi-2024.8.30-x86_64-1.txz: Upgraded.
l/qt6-6.7.2_20240610_3f005f1e-x86_64-6.txz: Rebuilt.
Recompiled against protobuf-28.0.
n/ca-certificates-20240830-noarch-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
n/mosh-1.4.0-x86_64-4.txz: Rebuilt.
Recompiled against protobuf-28.0.
n/php-8.3.11-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.3.11
x/mesa-24.2.1-x86_64-1.txz: Upgraded.
Thanks to lucabon for the rust-bindgen patch.
xap/vim-gvim-9.1.0702-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
d/python-setuptools-73.0.1-x86_64-1.txz: Upgraded.
d/rust-bindgen-0.70.1-x86_64-1.txz: Upgraded.
n/ModemManager-1.22.0-x86_64-1.txz: Upgraded.
n/dhcpcd-10.0.10-x86_64-1.txz: Upgraded.
n/epic5-2.4-x86_64-1.txz: Upgraded.
n/libqmi-1.34.0-x86_64-2.txz: Rebuilt.
Build against libqrtr-glib with -Dqrtr=true.
n/libqrtr-glib-1.2.2-x86_64-1.txz: Added.
ModemManager-1.22.0 needs libqmi to be linked with this.
x/xorg-server-21.1.13-x86_64-3.txz: Rebuilt.
Patched changing a type from unsigned long to unsigned long long which fixes
the black screen seen on 32-bit with the modesetting driver. Seems fine on
64-bit as well, so the patch is applied for all builds. The patch to default
to modesetting for Intel graphics is restored (and the one for nouveau is kept
as well).
Thanks to Lenard Spencer for reporting that nouveau was also hitting this.
Thanks to Petri Kaukasoina for the patch.
x/xorg-server-xephyr-21.1.13-x86_64-3.txz: Rebuilt.
x/xorg-server-xnest-21.1.13-x86_64-3.txz: Rebuilt.
x/xorg-server-xvfb-21.1.13-x86_64-3.txz: Rebuilt.
a/libbytesize-2.11-x86_64-1.txz: Upgraded.
d/python-setuptools-73.0.0-x86_64-1.txz: Upgraded.
l/python-importlib_metadata-8.4.0-x86_64-1.txz: Upgraded.
n/epic5-2.2-x86_64-1.txz: Upgraded.
n/netatalk-3.2.7-x86_64-1.txz: Upgraded.
x/xorg-server-21.1.13-x86_64-2.txz: Rebuilt.
On 32-bit, using the modesetting driver with Intel graphics is resulting in
a black screen (observed here with CoffeeLake-H GT2), so on 32-bit only let's
stop applying the patch that was making xorg-server use modesetting by
default. Thanks to LuckyCyborg and Petri Kaukasoina.
Fix build with gcc-14.2.
x/xorg-server-xephyr-21.1.13-x86_64-2.txz: Rebuilt.
x/xorg-server-xnest-21.1.13-x86_64-2.txz: Rebuilt.
x/xorg-server-xvfb-21.1.13-x86_64-2.txz: Rebuilt.
xfce/xfce4-screenshooter-1.11.1-x86_64-1.txz: Upgraded.
a/eudev-3.2.14-x86_64-2.txz: Rebuilt.
Add a few more modules to /lib/modprobe.d/watchdog.conf.
a/kmod-33-x86_64-1.txz: Upgraded.
ap/sc-im-0.8.4-x86_64-1.txz: Upgraded.
ap/scdoc-1.11.3-x86_64-1.txz: Added.
This is needed to build kmod-33.
d/luajit-2.1.1723675123-x86_64-1.txz: Upgraded.
d/rust-bindgen-0.70.0-x86_64-1.txz: Upgraded.
l/librsvg-2.58.3-x86_64-1.txz: Upgraded.
x/mesa-24.2.0-x86_64-2.txz: Rebuilt.
Updated the subprojects and recompiled.
a/aaa_glibc-solibs-2.40-x86_64-4.txz: Rebuilt.
a/sysvinit-scripts-15.1-noarch-21.txz: Rebuilt.
rc.S: fix_errors when mounting a bcachefs filesystem. Thanks to 0XBF.
l/glibc-2.40-x86_64-4.txz: Rebuilt.
On 32-bit, add these compile flags:
-mstackrealign
This is needed for compatibility with old binaries, thanks to iive.
-fno-omit-frame-pointer -mno-omit-leaf-frame-pointer
Without these, both nouveau and the nvidia driver are prone to crashes and
hangs. Thanks to UnrelatedMicrowave.
On both 32-bit and 64-bit, add --enable-multi-arch. This will enable
optimized assembly code within glibc, depending on the CPU detected.
Thanks to iive.
With -mstackrealign and --enable-multi-arch on 32-bit, I believe that
-march= could be set to any x86 arch -- it's merely a decoration.
l/glibc-i18n-2.40-x86_64-4.txz: Rebuilt.
l/glibc-profile-2.40-x86_64-4.txz: Rebuilt.
l/gtk4-4.14.5-x86_64-1.txz: Upgraded.
l/python-markdown-3.7-x86_64-1.txz: Upgraded.
x/libglvnd-1.7.0-x86_64-2.txz: Rebuilt.
Use the new compiler flags. On 32-bit, add -mstackrealign just in case.
xfce/xfce4-notifyd-0.9.6-x86_64-1.txz: Upgraded.
a/kernel-generic-6.10.5-x86_64-1.txz: Upgraded.
a/kernel-huge-6.10.5-x86_64-1.txz: Upgraded.
a/kernel-modules-6.10.5-x86_64-1.txz: Upgraded.
d/kernel-headers-6.10.5-x86-1.txz: Upgraded.
d/python-setuptools-72.2.0-x86_64-1.txz: Upgraded.
k/kernel-source-6.10.5-noarch-1.txz: Upgraded.
kde/okteta-0.26.16-x86_64-1.txz: Upgraded.
n/dovecot-2.3.21.1-x86_64-1.txz: Upgraded.
This update fixes security issues:
A large number of address headers in email resulted in excessive CPU usage.
Abnormally large email headers are now truncated or discarded, with a limit
of 10MB on a single header and 50MB for all the headers of all the parts of
an email.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-23184https://www.cve.org/CVERecord?id=CVE-2024-23185
(* Security fix *)
n/lynx-2.9.2-x86_64-1.txz: Upgraded.
x/mesa-24.2.0-x86_64-1.txz: Upgraded.
xfce/xfce4-notifyd-0.9.5-x86_64-1.txz: Upgraded.
extra/tigervnc/tigervnc-1.14.0-x86_64-3.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
Thanks to Petri Kaukasoina.
extra/xv/xv-6.0.0-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
ap/moc-2.6_alpha3-x86_64-4.txz: Rebuilt.
The ffmpeg7 patch isn't 100% there, so rebuild without the ffmpeg plugin.
ap/sqlite-3.46.1-x86_64-1.txz: Upgraded.
kde/digikam-8.4.0-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
kde/ffmpegthumbs-23.08.5-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
kde/k3b-23.08.5-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
kde/kfilemetadata-5.116.0-x86_64-6.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
kde/kpipewire-5.27.11-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
l/alsa-plugins-1.2.12-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
l/ffmpeg-7.0.2-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
Compiled against vulkan-sdk-1.3.290.0.
l/freetype-2.13.3-x86_64-1.txz: Upgraded.
l/gegl-0.4.48-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
l/gst-plugins-bad-free-1.24.6-x86_64-2.txz: Rebuilt.
Recompiled against vulkan-sdk-1.3.290.0.
l/gst-plugins-libav-1.24.6-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
l/gtk4-4.14.4-x86_64-2.txz: Rebuilt.
Recompiled against vulkan-sdk-1.3.290.0.
l/libplacebo-7.349.0-x86_64-2.txz: Rebuilt.
Recompiled against vulkan-sdk-1.3.290.0.
l/mlt-7.24.0-x86_64-3.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
l/opencv-4.10.0-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
l/pipewire-1.2.2-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
Recompiled against vulkan-sdk-1.3.290.0.
l/qt5-5.15.14_20240716_ae0c8451-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
l/qt6-6.7.2_20240610_3f005f1e-x86_64-5.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
l/spirv-llvm-translator-18.1.3-x86_64-2.txz: Rebuilt.
Recompiled against vulkan-sdk-1.3.290.0.
x/fcitx5-gtk-5.1.3-x86_64-2.txz: Rebuilt.
Recompiled against vulkan-sdk-1.3.290.0.
x/ibus-1.5.30-x86_64-2.txz: Rebuilt.
Recompiled against vulkan-sdk-1.3.290.0.
x/mesa-24.1.5-x86_64-2.txz: Rebuilt.
Recompiled against vulkan-sdk-1.3.290.0.
x/vulkan-sdk-1.3.290.0-x86_64-1.txz: Upgraded.
xap/MPlayer-20240812-x86_64-1.txz: Upgraded.
Recompiled against ffmpeg-7.0.2.
xap/audacious-plugins-4.4-x86_64-3.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
xap/ffmpegthumbnailer-2.2.2-x86_64-6.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
xap/freerdp-2.11.7-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
xap/mpv-0.38.0-x86_64-5.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
Recompiled against vulkan-sdk-1.3.290.0.
xap/ssr-0.4.4-x86_64-3.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
xap/xine-lib-1.2.13-x86_64-8.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
xap/xscreensaver-6.09-x86_64-2.txz: Rebuilt.
Recompiled against ffmpeg-7.0.2.
ap/mariadb-10.11.9-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://mariadb.com/kb/en/mariadb-10-11-9-release-notes/
d/rust-1.80.1-x86_64-1.txz: Upgraded.
l/polkit-125-x86_64-1.txz: Upgraded.
l/python-babel-2.16.0-x86_64-1.txz: Upgraded.
l/vte-0.76.4-x86_64-1.txz: Upgraded.
n/NetworkManager-1.48.8-x86_64-1.txz: Upgraded.
x/OpenCC-1.1.9-x86_64-1.txz: Upgraded.
a/grub-2.12-x86_64-15.txz: Rebuilt.
In /etc/default/grub, eliminate the GRUB_DISABLE_KERNEL_SYMLINKS="true"
option, replacing it with GRUB_DISPLAY_KERNEL_FILETYPES=both. This may
be set to "symlinks" (only show kernel symlinks in the menu), "files"
(only show kernel files in the menu), or "both" to show both.
Thanks to 0XBF.
In /etc/default/grub, add a new option GRUB_INITRD_FALLBACK_NAME=initrd.gz.
This defines the name of an initrd that will match to any kernel if a
better match wasn't found first. This option will be commented out by
default.
When the defaults in /etc/default/grub are left alone, the behavior of the
10_linux script is identical to the unmodified one.
ap/vim-9.1.0645-x86_64-1.txz: Upgraded.
l/protobuf-27.3-x86_64-1.txz: Upgraded.
n/curl-8.9.1-x86_64-1.txz: Upgraded.
This update fixes a security issue:
ASN.1 date parser overread.
For more information, see:
https://curl.se/docs/CVE-2024-7264.htmlhttps://www.cve.org/CVERecord?id=CVE-2024-7264
(* Security fix *)
x/mesa-24.1.5-x86_64-1.txz: Upgraded.
xap/vim-gvim-9.1.0645-x86_64-1.txz: Upgraded.
xfce/thunar-4.18.11-x86_64-1.txz: Upgraded.
extra/tigervnc/tigervnc-1.14.0-x86_64-2.txz: Rebuilt.
Use the old build script, which worked with a couple of added slashes.
Xvnc restored, and /usr/local directories gone.
d/meson-1.5.1-x86_64-1.txz: Upgraded.
l/imagemagick-7.1.1_36-x86_64-1.txz: Upgraded.
l/python-alabaster-1.0.0-x86_64-1.txz: Upgraded.
n/wpa_supplicant-2.11-x86_64-2.txz: Rebuilt.
[PATCH] nl80211: add extra-ies only if allowed by driver.
This fixes using broadcom-wl based adapters.
Thanks to Stuart Winter.
x/OpenCC-1.1.8-x86_64-1.txz: Upgraded.
x/xfs-1.2.2-x86_64-1.txz: Upgraded.
Hey folks, we got a new glibc and are beginning the process of baking the new
default compile flags into the toolchain, the graphics stack, and whatever else
happens along. Enjoy! :-)
a/aaa_glibc-solibs-2.40-x86_64-1.txz: Upgraded.
a/libblockdev-3.1.1_1-x86_64-2.txz: Rebuilt.
Fix build against recent ext2fs.h. Thanks to shipujin.
a/xfsprogs-6.9.0-x86_64-1.txz: Upgraded.
ap/rpm-4.19.1.1-x86_64-3.txz: Rebuilt.
ap/slackpkg-15.0.10-noarch-4.txz: Rebuilt.
Prefer gpg1 again. Going with the modern gpg with more dependencies was
a mistake in this case. (now we know why gnupg-1 is still around :-)
Thanks to Petri Kaukasoina.
d/binutils-2.42-x86_64-3.txz: Rebuilt.
d/cargo-vendor-filterer-0.5.14-x86_64-2.txz: Rebuilt.
d/cbindgen-0.26.0-x86_64-2.txz: Rebuilt.
d/ccache-4.10.2-x86_64-1.txz: Upgraded.
d/cmake-3.30.1-x86_64-2.txz: Rebuilt.
d/gcc-14.1.0-x86_64-2.txz: Rebuilt.
d/gcc-g++-14.1.0-x86_64-2.txz: Rebuilt.
d/gcc-gdc-14.1.0-x86_64-2.txz: Rebuilt.
d/gcc-gfortran-14.1.0-x86_64-2.txz: Rebuilt.
d/gcc-gm2-14.1.0-x86_64-2.txz: Rebuilt.
d/gcc-gnat-14.1.0-x86_64-2.txz: Rebuilt.
d/gcc-go-14.1.0-x86_64-2.txz: Rebuilt.
d/gcc-objc-14.1.0-x86_64-2.txz: Rebuilt.
d/libgccjit-14.1.0-x86_64-2.txz: Rebuilt.
d/libtool-2.4.7-x86_64-8.txz: Rebuilt.
d/parallel-20240722-noarch-1.txz: Upgraded.
d/pkg-config-0.29.2-x86_64-5.txz: Rebuilt.
d/python-setuptools-71.1.0-x86_64-1.txz: Upgraded.
d/ruby-3.3.4-x86_64-2.txz: Rebuilt.
d/rust-bindgen-0.69.4-x86_64-2.txz: Rebuilt.
d/strace-6.10-x86_64-1.txz: Upgraded.
d/subversion-1.14.3-x86_64-3.txz: Rebuilt.
e/emacs-29.4-x86_64-2.txz: Rebuilt.
l/PyQt-builder-1.16.4-x86_64-2.txz: Rebuilt.
l/PyQt5-5.15.11-x86_64-1.txz: Upgraded.
l/PyQt5_sip-12.15.0-x86_64-2.txz: Rebuilt.
l/argon2-20190702-x86_64-6.txz: Rebuilt.
l/ffmpeg-6.1.1-x86_64-5.txz: Rebuilt.
l/glibc-2.40-x86_64-1.txz: Upgraded.
This update fixes security issues:
nscd: Stack-based buffer overflow in netgroup cache.
nscd: Null pointer crash after notfound response.
nscd: netgroup cache may terminate daemon on memory allocation failure.
nscd: netgroup cache assumes NSS callback uses in-buffer strings.
These vulnerabilities were only present in the nscd binary.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-33599https://www.cve.org/CVERecord?id=CVE-2024-33600https://www.cve.org/CVERecord?id=CVE-2024-33601https://www.cve.org/CVERecord?id=CVE-2024-33602
(* Security fix *)
l/glibc-i18n-2.40-x86_64-1.txz: Upgraded.
l/glibc-profile-2.40-x86_64-1.txz: Upgraded.
l/gst-plugins-good-1.24.5-x86_64-2.txz: Rebuilt.
l/libcdio-paranoia-10.2+2.0.2-x86_64-1.txz: Upgraded.
l/libclc-18.1.8-x86_64-3.txz: Rebuilt.
l/libproxy-0.5.8-x86_64-1.txz: Upgraded.
l/lz4-1.10.0-x86_64-1.txz: Upgraded.
l/poppler-24.07.0-x86_64-2.txz: Rebuilt.
l/python-importlib_metadata-8.1.0-x86_64-1.txz: Upgraded.
l/python-sphinx-7.4.7-x86_64-1.txz: Upgraded.
l/qt5-5.15.14_20240716_ae0c8451-x86_64-1.txz: Upgraded.
l/qt5-webkit-5.212.0_alpha4-x86_64-13.txz: Rebuilt.
l/qt6-6.7.2_20240610_3f005f1e-x86_64-3.txz: Rebuilt.
l/sip-6.8.6-x86_64-2.txz: Rebuilt.
l/spirv-llvm-translator-18.1.2-x86_64-2.txz: Rebuilt.
l/v4l-utils-1.28.0-x86_64-1.txz: Upgraded.
n/bind-9.18.28-x86_64-1.txz: Upgraded.
This update fixes security issues:
Remove SIG(0) support from named as a countermeasure for CVE-2024-1975.
qctx-zversion was not being cleared when it should have been leading to
an assertion failure if it needed to be reused.
An excessively large number of rrtypes per owner can slow down database query
processing, so a limit has been placed on the number of rrtypes that can be
stored per owner (node) in a cache or zone database. This is configured with
the new "max-rrtypes-per-name" option, and defaults to 100.
Excessively large rdatasets can slow down database query processing, so a
limit has been placed on the number of records that can be stored per
rdataset in a cache or zone database. This is configured with the new
"max-records-per-type" option, and defaults to 100.
Malicious DNS client that sends many queries over TCP but never reads
responses can cause server to respond slowly or not respond at all for other
clients.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-1975https://www.cve.org/CVERecord?id=CVE-2024-4076https://www.cve.org/CVERecord?id=CVE-2024-1737https://www.cve.org/CVERecord?id=CVE-2024-0760
(* Security fix *)
n/fetchmail-6.4.39-x86_64-1.txz: Upgraded.
n/obexftp-0.24.2-x86_64-13.txz: Rebuilt.
n/pinentry-1.3.1-x86_64-2.txz: Rebuilt.
n/wpa_supplicant-2.11-x86_64-1.txz: Upgraded.
x/fcitx5-qt-5.1.6-x86_64-3.txz: Rebuilt.
x/ibus-m17n-1.4.30-x86_64-1.txz: Upgraded.
x/libdrm-2.4.122-x86_64-2.txz: Rebuilt.
x/marisa-0.2.6-x86_64-10.txz: Rebuilt.
x/mesa-24.1.4-x86_64-2.txz: Rebuilt.
x/vulkan-sdk-1.3.275.0-x86_64-3.txz: Rebuilt.
xap/audacious-4.4-x86_64-2.txz: Rebuilt.
xap/audacious-plugins-4.4-x86_64-2.txz: Rebuilt.
xap/mozilla-thunderbird-128.0.1esr-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/128.0.1esr/releasenotes/
xap/xaos-4.3.2-x86_64-2.txz: Rebuilt.
extra/emacs-regular-build/emacs-29.4-x86_64-2_regular.txz: Rebuilt.
a/aaa_libraries-15.1-x86_64-32.txz: Rebuilt.
Added: libgpg-error.so.0.37.0.
Upgraded: libcap.so.2.70, liblzma.so.5.6.2, libpcre2-8.so.0.13.0,
libglib-2.0.so.0.8000.4, libgmodule-2.0.so.0.8000.4,
libgobject-2.0.so.0.8000.4, libgthread-2.0.so.0.8000.4,
libstdc++.so.6.0.33, libunwind.so.8.1.0.
Removed: libboost_*.so.1.84.0
The addition of libgpg-error to this package should work around the issue
upgrading from 15.0 to -current using slackpkg. Thanks to Stuart Winter.
d/llvm-18.1.8-x86_64-2.txz: Rebuilt.
Add WebAssembly target. Thanks to Heinz Wiesinger.
Adjust compiler flags to what will likely be our new standard.
Qt6 requires newer opcodes than -march=i586, and enough things have begun
to include SSE2 instructions (without providing configure flags to opt-out)
that trying to retain compatibility with CPUs from the 1990s just isn't
going to work any more. My apologies if this causes your antique computer
to get illegal instruction errors, but the solution will have to be sourcing
an antique operating system for it.
On 64-bit we will make the compiler flags for -march and -mtune explicit.
l/libnl3-3.10.0-x86_64-1.txz: Upgraded.
l/orc-0.4.39-x86_64-1.txz: Upgraded.
x/egl-wayland-1.1.14-x86_64-1.txz: Upgraded.
a/sysvinit-scripts-15.1-noarch-20.txz: Rebuilt.
rc.M: fix typo when starting local LDAP name service daemon.
Thanks to tcanich.
ap/lxc-6.0.1-x86_64-2.txz: Rebuilt.
Update the ca-certificates as part of lxc-create.
l/gvfs-1.54.2-x86_64-1.txz: Upgraded.
l/wireplumber-0.5.5-x86_64-1.txz: Upgraded.
n/s-nail-14.9.25-x86_64-1.txz: Upgraded.
x/ibus-table-1.17.6-x86_64-1.txz: Upgraded.
a/btrfs-progs-6.9.2-x86_64-1.txz: Upgraded.
a/grub-2.12-x86_64-10.txz: Rebuilt.
Fix initrd path when including microcode.
Hopefully we're about out of corner cases now.
Thanks to kaott, with honorable mention to gwhl.
a/kernel-firmware-20240622_cea56a5-noarch-1.txz: Upgraded.
a/kernel-generic-6.9.7-x86_64-1.txz: Upgraded.
a/kernel-huge-6.9.7-x86_64-1.txz: Upgraded.
a/kernel-modules-6.9.7-x86_64-1.txz: Upgraded.
ap/lxc-6.0.1-x86_64-1.txz: Upgraded.
Add a few more packages to the lxc-slackware.in template:
ca-certificates, glibc-zoneinfo, libksba, openssl, perl.
Thanks to Ricardson Williams.
d/kernel-headers-6.9.7-x86-1.txz: Upgraded.
d/python-pip-24.1.1-x86_64-1.txz: Upgraded.
k/kernel-source-6.9.7-noarch-1.txz: Upgraded.
kde/krita-5.2.3-x86_64-1.txz: Upgraded.
l/harfbuzz-9.0.0-x86_64-1.txz: Upgraded.
l/pipewire-1.2.0-x86_64-1.txz: Upgraded.
n/krb5-1.21.3-x86_64-1.txz: Upgraded.
This update fixes security issues:
Fix vulnerabilities in GSS message token handling.
Fix a potential bad pointer free in krb5_cccol_have_contents().
Fix a memory leak in the macOS ccache type.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-37370https://www.cve.org/CVERecord?id=CVE-2024-37371
(* Security fix *)
x/libinput-1.26.1-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
l/qt6-6.7.1_20240516_6977d02f-x86_64-3.txz: Rebuilt.
Fixed config option: -DINSTALL_MKSPECSDIR=lib${LIBDIRSUFFIX}/qt6/mkspecs
Thanks to USUARIONUEVO.
x/fcitx5-qt-5.1.6-x86_64-2.txz: Rebuilt.
Recompiled against qt6-6.7.1_20240516_6977d02f to fix segfaults.
Thanks to rinza.
x/mesa-24.1.1-x86_64-3.txz: Rebuilt.
Don't allow amber drivers to overwrite modern ones. Thanks to LuckyCyborg.
Bundle the subprojects instead of allowing them to download.
xfce/xfce4-settings-4.18.5-x86_64-1.txz: Upgraded.