a/btrfs-progs-6.12-x86_64-1.txz: Upgraded.
a/pkgtools-15.1-noarch-19.txz: Rebuilt.
make-kernel-backup: report the creation of symlinks. Thanks to Mechanikx.
ap/mariadb-11.4.4-x86_64-5.txz: Rebuilt.
Since /etc/default/mariadb skips SSL (--skip-ssl) by default, the client side
needs to do this by default also. So we've added /etc/my.cnf.d/skip-ssl.cnf
to configure this, and have added comments in both files about what to change
in order to enable SSL for both the client and server.
Thanks to TJ09.
l/alsa-lib-1.2.13-x86_64-2.txz: Rebuilt.
[PATCH] UCM2: Intel: sof-hda-dsp: Fix handling of empty sys_vendor.
Thanks to fulalas.
l/mozjs128-128.5.1esr-x86_64-1.txz: Upgraded.
l/pulseaudio-17.0-x86_64-5.txz: Rebuilt.
In the X11/Wayland startup files, test the configuration better to make sure
that we actually wanted autospawn before assuming we should start pulseaudio
manually because autospawn wasn't working.
Thanks to crtlaltca for the bug report.
xap/mozilla-firefox-128.5.1esr-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/128.5.1/releasenotes/
Happy Thanksgiving to everyone celebrating, and happy Thursday to everyone
else. I've been looking at this new fontconfig (and have run into some of the
terrible looking pages I remembered from previous attempts to upgrade). The
solution is certainly *not* to disable bitmap fonts. I need those in my
terminal emulator, and have never seen a vector font that looks correct. What
I've done this time is make the defaults for fontconfig sane and user
configurable, and then converted the two bitmap fonts that are causing the
problems to OTB format and changing the family name from "name" to "name (OTB)"
which prevents them from being picked up by default.
Hope this looks better! Cheers! :-)
a/file-5.46-x86_64-1.txz: Upgraded.
a/mkinitrd-1.4.11-x86_64-52.txz: Rebuilt.
geninitrd: since we're sourcing /etc/default/geninitrd, we might as well test
the AUTO_REMOVE_ORPHANED_INITRDS variable directly instead of grepping for it
in the defaults file. Thanks to Mechanikx.
a/pkgtools-15.1-noarch-18.txz: Rebuilt.
make-kernel-backup: account for "file" changing 80386 to i386.
l/libqalculate-5.4.0.1-x86_64-1.txz: Upgraded.
l/openal-soft-1.24.1-x86_64-1.txz: Upgraded.
l/pipewire-1.2.7-x86_64-1.txz: Upgraded.
x/font-adobe-100dpi-1.0.4-noarch-2.txz: Rebuilt.
Install these fonts as OTB rather than PCF.
x/font-adobe-75dpi-1.0.4-noarch-2.txz: Rebuilt.
Install these fonts as OTB rather than PCF.
x/fontconfig-2.15.0-x86_64-3.txz: Rebuilt.
Let's not link any hinting, subpixel, or lcdfilter conf files by default.
That way the user can choose what to link (if anything) without future
fontconfig updates stomping on those choices.
x/mesa-24.2.8-x86_64-1.txz: Upgraded.
a/tcsh-6.24.14-x86_64-1.txz: Upgraded.
ap/sudo-1.9.16p2-x86_64-1.txz: Upgraded.
n/netatalk-4.0.7-x86_64-2.txz: Rebuilt.
Fixed config file handling. Thanks to marav.
n/openldap-2.6.9-x86_64-1.txz: Upgraded.
t/texlive-2024.240409-x86_64-3.txz: Rebuilt.
Move files from /etc/fonts/conf.avail to /usr/share/fontconfig/fonts.avail.
x/dejavu-fonts-ttf-2.37-noarch-7.txz: Rebuilt.
Move files from /etc/fonts/conf.avail to /usr/share/fontconfig/fonts.avail.
x/font-bh-ttf-1.0.4-noarch-2.txz: Rebuilt.
Move files from /etc/fonts/conf.avail to /usr/share/fontconfig/fonts.avail.
x/fontconfig-2.15.0-x86_64-1.txz: Upgraded.
Thanks to Didier Spaier for the updated patches and meson build script!
x/liberation-fonts-ttf-2.1.5-noarch-2.txz: Rebuilt.
Move files from /etc/fonts/conf.avail to /usr/share/fontconfig/fonts.avail.
x/noto-cjk-fonts-ttf-2.001-noarch-4.txz: Rebuilt.
Move files from /etc/fonts/conf.avail to /usr/share/fontconfig/fonts.avail.
x/ttf-indic-fonts-0.5.14-noarch-6.txz: Rebuilt.
Move files from /etc/fonts/conf.avail to /usr/share/fontconfig/fonts.avail.
x/ttf-tlwg-0.7.3-noarch-2.txz: Rebuilt.
Move files from /etc/fonts/conf.avail to /usr/share/fontconfig/fonts.avail.
x/wqy-zenhei-font-ttf-0.8.38_1-noarch-10.txz: Rebuilt.
Move files from /etc/fonts/conf.avail to /usr/share/fontconfig/fonts.avail.
xap/xlockmore-5.81-x86_64-1.txz: Upgraded.
testing/packages/mesa-24.3.0-x86_64-1.txz: Added.
a/mkinitrd-1.4.11-x86_64-50.txz: Rebuilt.
geninitrd: If the kernel to use was provided on the command line or with
a predefined KERNEL variable, make sure that the KERNEL variable is set to
that value before handing off control to a custom script.
Thanks to LuckyCyborg for the bug report.
d/git-2.47.1-x86_64-1.txz: Upgraded.
d/re2c-4.0.1-x86_64-1.txz: Upgraded.
l/libqalculate-5.4.0-x86_64-1.txz: Upgraded.
l/netpbm-11.08.02-x86_64-1.txz: Upgraded.
n/gnupg2-2.4.7-x86_64-1.txz: Upgraded.
n/wget2-2.2.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
extra/bash-completion/bash-completion-2.15.0-noarch-1.txz: Upgraded.
a/mkinitrd-1.4.11-x86_64-49.txz: Rebuilt.
setup.01.mkinitrd: removed KERNEL_SYMLINK option.
If a kernel is provided to geninitrd on the command line ($1), this will
always be the kernel used.
Thanks to Mechanikx.
Removed GENINITRD_SILENT option.
init: cap the size of /run to 25% of the system RAM since the previous
default of 32M is way too small for many purposes. I have seen other Linux
systems cap this at half the system RAM, but that seems to me a bit much.
/etc/default/geninitrd:
Added GENINITRD_OVERRIDE_SCRIPT which can be set to anything you like.
Support for hardcoded {/usr/local/sbin,/opt/sbin}/geninitrd was removed.
Added GENINITRD_DIALOG (do we want the dialog --infobox output?)
Added GENINITRD_COMMAND_OUTPUT (do we want to see command output?)
a/sysvinit-scripts-15.1-noarch-23.txz: Rebuilt.
rc.S: cap the size of /run to 25% of the system RAM.
l/gtk4-4.16.7-x86_64-1.txz: Upgraded.
l/vte-0.78.2-x86_64-2.txz: Rebuilt.
n/traceroute-2.1.6-x86_64-1.txz: Upgraded.
xfce/xfce4-xkb-plugin-0.8.3-x86_64-1.txz: Added.
Thanks to vladimir_vist for the suggestion,
and Robby Workman for the build script.
a/kernel-firmware-20241122_3ed524d-noarch-1.txz: Upgraded.
a/kernel-generic-6.12.1-x86_64-1.txz: Upgraded.
a/libblockdev-3.2.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
a/libbytesize-2.11-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
a/libpwquality-1.4.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
a/mkinitrd-1.4.11-x86_64-48.txz: Rebuilt.
remove-orphaned-initrds: fixed output path when removing dangling symlinks.
Thanks to Mechanikx.
a/nut-2.8.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
a/util-linux-2.40.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
a/volume_key-0.3.12-x86_64-9.txz: Rebuilt.
Recompiled against python3-3.12.7.
ap/hplip-3.24.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
ap/linuxdoc-tools-0.9.83-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
ap/rpm-4.20.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
ap/undervolt-0.4.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/Cython-3.0.11-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/cmake-3.31.1-x86_64-1.txz: Upgraded.
d/distcc-3.4-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/gdb-15.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/gyp-20210831_d6c5dd51-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/kernel-headers-6.12.1-x86-1.txz: Upgraded.
d/libtool-2.5.4-x86_64-1.txz: Upgraded.
d/llvm-19.1.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/mercurial-6.9-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/meson-1.6.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/python-pip-24.3.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/python-setuptools-75.6.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/python3-3.12.7-x86_64-1.txz: Upgraded.
Python 3.12 has been aging for more than a year, so it's time to take it.
Shared library .so-version bump.
d/scons-4.8.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
d/slacktrack-2.24-x86_64-1.txz: Upgraded.
When touching the filesystem, use xargs -P $(nproc) for a nice speedup.
k/kernel-source-6.12.1-noarch-1.txz: Upgraded.
kde/cantor-23.08.5-x86_64-13.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/kapidox-5.116.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/kdev-python-23.08.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/kig-23.08.5-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/kmymoney-5.1.3-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/kopeninghours-23.08.5-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.12.7.
kde/krita-5.2.6-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/Mako-1.3.5-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/PyQt-builder-1.16.4-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/PyQt5-5.15.11-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/PyQt5_sip-12.15.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/QScintilla-2.14.1-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/avahi-20240306_709e60f-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/boost-1.86.0-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/brotli-1.1.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/dbus-python-1.3.2-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/gexiv2-0.14.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/gi-docgen-2024.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/glade-3.40.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/gobject-introspection-1.82.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/gtk4-4.16.6-x86_64-1.txz: Upgraded.
l/lensfun-0.3.4-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libcaca-0.99.beta20-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libcap-ng-0.8.5-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libmtp-1.1.22-x86_64-1.txz: Upgraded.
l/libnvme-1.11.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libplist-2.6.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libwebp-1.4.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libxml2-2.13.5-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/libxslt-1.1.42-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/mozilla-nss-3.107-x86_64-1.txz: Upgraded.
l/newt-0.52.24-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/protobuf-28.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/pycairo-1.27.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/pycups-2.0.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/pycurl-7.45.3-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/pygobject3-3.50.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/pyparsing-3.1.2-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-Jinja2-3.1.4-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-MarkupSafe-3.0.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-PyYAML-6.0.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-alabaster-1.0.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-appdirs-1.4.4-x86_64-8.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-babel-2.16.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-build-1.2.2.post1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-calver-2022.6.26-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-certifi-2024.8.30-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-cffi-1.17.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-chardet-5.2.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-charset-normalizer-3.4.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-distro-1.9.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-dnspython-2.7.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-docutils-0.21.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-doxypypy-0.8.8.7-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-doxyqml-0.5.3-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-editables-0.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-flit-core-3.10.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-future-1.0.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-glad2-2.0.8-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-hatch-vcs-0.4.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-hatchling-1.26.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-html5lib-1.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-idna-3.10-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-imagesize-1.4.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-importlib_metadata-8.5.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-installer-0.7.0-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-lxml-5.3.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-markdown-3.7-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-notify2-0.3.1-x86_64-12.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-packaging-24.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pathspec-0.12.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pbr-6.1.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pillow-11.0.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pluggy-1.5.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-ply-3.11-x86_64-10.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-psutil-6.1.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pycparser-2.22-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pygments-2.18.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pyproject-hooks-1.2.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-pysol_cards-0.18.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-random2-1.0.2-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-requests-2.32.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-sane-2.9.1-x86_64-7.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-setuptools_scm-8.1.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-six-1.16.0-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-smartypants-2.0.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-snowballstemmer-2.2.0-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-sphinx-8.1.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-sphinx_rtd_theme-3.0.2-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-tomli-w-1.1.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-trove-classifiers-2024.10.21.16-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-typogrify-2.0.7-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-urllib3-2.2.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-webencodings-0.5.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-wheel-0.45.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/python-zipp-3.21.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/sip-6.8.6-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/speech-dispatcher-0.11.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/system-config-printer-1.5.18-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/talloc-2.4.2-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/tdb-1.4.12-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
l/tevent-0.16.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/epic5-3.0.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/fetchmail-6.5.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/getmail-6.19.05-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/gpgme-1.24.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/iptraf-ng-1.2.2-x86_64-1.txz: Upgraded.
n/net-snmp-5.9.4-x86_64-6.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/nftables-1.1.1-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/nmap-7.95-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/nss-pam-ldapd-0.9.12-x86_64-5.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/obexftp-0.24.2-x86_64-14.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/php-8.3.14-x86_64-1.txz: Upgraded.
This update fixes security issues:
LDAP: Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape).
(CVE-2024-8932)
MySQLnd: Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap
through heap buffer over-read). (CVE-2024-8929)
PDO DBLIB: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib
quoter causing OOB writes). (CVE-2024-11236)
PDO Firebird: Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the
firebird quoter causing OOB writes). (CVE-2024-11236)
Streams: Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream
context might allow for CRLF injection in URIs). (CVE-2024-11234)
Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with
convert.quoted-printable-decode filter). (CVE-2024-11233)
For more information, see:
https://www.php.net/ChangeLog-8.php#8.3.14https://www.cve.org/CVERecord?id=CVE-2024-8932https://www.cve.org/CVERecord?id=CVE-2024-8929https://www.cve.org/CVERecord?id=CVE-2024-11236https://www.cve.org/CVERecord?id=CVE-2024-11234https://www.cve.org/CVERecord?id=CVE-2024-11233
(* Security fix *)
n/pssh-2.3.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
n/samba-4.21.1-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/ibus-1.5.31-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/ibus-anthy-1.5.16-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/ibus-hangul-1.5.5-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/ibus-libpinyin-1.15.8-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/ibus-table-1.17.8-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/marisa-0.2.6-x86_64-12.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/pyxdg-0.28-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
x/xcb-proto-1.17.0-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
xap/blueman-2.4.3-x86_64-2.txz: Rebuilt.
Recompiled against python3-3.12.7.
xap/hexchat-2.16.2-x86_64-4.txz: Rebuilt.
Recompiled against python3-3.12.7.
extra/brltty/brltty-6.7-x86_64-3.txz: Rebuilt.
Recompiled against python3-3.12.7.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/kernel-firmware-20241108_ad74054-noarch-1.txz: Upgraded.
a/kernel-generic-6.11.7-x86_64-1.txz: Upgraded.
Unless disabled in /etc/default/geninitrd, automatically generate an initial
ramdisk upon package installation or upgrade.
a/mkinitrd-1.4.11-x86_64-46.txz: Rebuilt.
geninitrd: also accept /opt/sbin/geninitrd as an override.
Suggested by regdub.
Since the installer sends different args to the setup scripts, we can't use
$1 as the kernel file with setup.01.mkinitrd, so convert it into a variable
in geninitrd instead (if needed).
mkinitrd_command_generator.sh: pvdisplay will complain if there are any file
descriptors besides stdin, stdout, and stderr, which will always be true when
called from a package install script due to file locking. So send stderr from
the two calls to pvdisplay to /dev/null.
d/kernel-headers-6.11.7-x86-1.txz: Upgraded.
k/kernel-source-6.11.7-noarch-1.txz: Upgraded.
l/python-packaging-24.2-x86_64-1.txz: Upgraded.
n/iptables-1.8.11-x86_64-1.txz: Upgraded.
n/lftp-4.9.3-x86_64-1.txz: Upgraded.
x/ibus-m17n-1.4.34-x86_64-1.txz: Upgraded.
x/xbacklight-1.2.4-x86_64-1.txz: Upgraded.
x/xf86-video-nouveau-1.0.18-x86_64-1.txz: Upgraded.
x/xrandr-1.5.3-x86_64-1.txz: Upgraded.
xfce/xfce4-weather-plugin-0.11.3-x86_64-1.txz: Upgraded.
extra/xf86-video-fbdev/xf86-video-fbdev-0.5.1-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/libblockdev-3.2.1-x86_64-1.txz: Upgraded.
a/mkinitrd-1.4.11-x86_64-45.txz: Rebuilt.
/etc/default/geninitrd: Add AUTOGENERATE_INITRD variable for disabling
automatically generating the initrd when the kernel package is upgraded.
The hook to trigger this will be in the next kernel-generic package.
setup.01.mkinitrd: skip generating an initrd if we're called from the
kernel doinst.sh and AUTOGENERATE_INITRD=false.
geninitrd: Look for an override script called /usr/local/sbin/geninitrd,
not /usr/local/bin/geninitrd-custom. Thanks to GazL.
ap/mariadb-11.4.4-x86_64-2.txz: Rebuilt.
rc.mysqld: use mariadbd-safe, not mysqld_safe. Thanks to teoberi.
d/cmake-3.31.0-x86_64-1.txz: Upgraded.
l/expat-2.6.4-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
Fix crash within function XML_ResumeParser from a NULL pointer dereference
by disallowing function XML_StopParser to (stop or) suspend an unstarted
parser. A new error code XML_ERROR_NOT_STARTED was introduced to properly
communicate this situation.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-50602
(* Security fix *)
n/gpgme-1.24.0-x86_64-1.txz: Upgraded.
Added libqgpgmeqt6.
xap/ffmpegthumbnailer-2.2.3-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-128.4.2esr-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/128.4.2esr/releasenotes/
a/mkinitrd-1.4.11-x86_64-44.txz: Rebuilt.
geninitrd: run /usr/local/bin/geninitrd-custom instead, if it exists.
setup.01.mkinitrd: exit with an error if the GENERATOR doesn't exist.
ap/mariadb-11.4.4-x86_64-1.txz: Upgraded.
Upgraded to the latest stable long-term series.
For release information, see:
https://mariadb.com/kb/en/mariadb-11-4-4-release-notes/
For upgrade information, see:
https://mariadb.com/kb/en/upgrading-from-mariadb-10-11-to-mariadb-11-4/
n/curl-8.11.0-x86_64-1.txz: Upgraded.
x/libXcursor-1.2.3-x86_64-1.txz: Upgraded.
x/pixman-0.44.0-x86_64-1.txz: Upgraded.
a/mkinitrd-1.4.11-x86_64-43.txz: Rebuilt.
geninitrd: allow specifying the kernel to use with $1.
This can now work with mkinitrd_command_generator.sh, or mkinitrd with a
/etc/mkinitrd.conf config file, or with dracut.
a/pkgtools-15.1-noarch-17.txz: Rebuilt.
make-kernel-backup: make the comments accurate.
Allow specifying the kernel to back up with $1.
ap/mpg123-1.32.9-x86_64-1.txz: Upgraded.
l/python-flit-core-3.10.1-x86_64-1.txz: Upgraded.
a/kernel-firmware-20241101_376de1f-noarch-1.txz: Upgraded.
a/kernel-generic-6.11.6-x86_64-1.txz: Upgraded.
a/mkinitrd-1.4.11-x86_64-42.txz: Rebuilt.
geninitrd: you can still point this at a kernel symlink, but by default it
will make initrd-${KERNEL_VERSION}.img for the newest kernel it finds in
the /boot directory.
a/pkgtools-15.1-noarch-16.txz: Rebuilt.
make-kernel-backup: don't make copies of any of the files, nor include an
initrd in the package. The only added "files" will be two symlinks,
vmlinuz-backup, and initrd-backup.img (if symlinks are enabled).
d/kernel-headers-6.11.6-x86-1.txz: Upgraded.
d/valgrind-3.24.0-x86_64-1.txz: Upgraded.
k/kernel-source-6.11.6-noarch-1.txz: Upgraded.
l/fluidsynth-2.4.0-x86_64-1.txz: Upgraded.
l/gtk4-4.16.4-x86_64-1.txz: Upgraded.
l/libzip-1.11.2-x86_64-1.txz: Upgraded.
Fix performance regression in zip_stat introduced in 1.11.
l/spirv-llvm-translator-19.1.1-x86_64-1.txz: Upgraded.
n/uucp-1.07-x86_64-7.txz: Rebuilt.
Add some documentation. Thanks to jayjwa.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/aaa_libraries-15.1-x86_64-34.txz: Rebuilt.
Upgraded: libcap.so.2.71, libelf-0.192.so, liblzma.so.5.6.3,
libcares.so.2.19.1, libexpat.so.1.9.3, libglib-2.0.so.0.8200.2,
libgmodule-2.0.so.0.8200.2, libgobject-2.0.so.0.8200.2,
libgthread-2.0.so.0.8200.2, libisl.so.23.4.0, libjson-c.so.5.4.0,
libpng16.so.16.44.0, libtiff.so.6.1.0, libtiffxx.so.6.1.0,
libunistring.so.5.2.0.
Removed: libboost_*.so.1.85.0.
Added (temporarily): libicudata.so.74.2, libicui18n.so.74.2,
libicuio.so.74.2, libicutest.so.74.2, libicutu.so.74.2,
libicuuc.so.74.2.
a/mkinitrd-1.4.11-x86_64-41.txz: Rebuilt.
remove-orphaned-initrds: simplify matching - initrd-${FOO}.img is considered
orphaned if there is no vmlinuz-${FOO} (the contents of $FOO are arbitrary).
a/pkgtools-15.1-noarch-15.txz: Rebuilt.
make-kernel-backup: if we are backing up vmlinuz-${FOO}, then also back up
initrd-${FOO}.img if it exists. Don't try to match specific fields.
a/xfsprogs-6.11.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
ap/mpg123-1.32.8-x86_64-1.txz: Upgraded.
ap/sqlite-3.46.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
d/mercurial-6.8.2-x86_64-1.txz: Upgraded.
d/python-pip-24.3.1-x86_64-1.txz: Upgraded.
kde/kdeplasma-addons-5.27.11-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
kde/kdewebkit-5.116.0-x86_64-1.txz: Removed.
Mothing uses this. Obsolete.
kde/konsole-23.08.5-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
kde/plasma-workspace-5.27.11.1-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/M2Crypto-0.42.0-x86_64-1.txz: Removed.
Nothing in Slackware has needed this since crda was removed, and very little
elsewhere does. Thanks to lucabon.
l/babl-0.1.110-x86_64-1.txz: Upgraded.
l/boost-1.86.0-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/desktop-file-utils-0.28-x86_64-1.txz: Upgraded.
l/gspell-1.14.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/harfbuzz-10.0.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/icu4c-76.1-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libcap-2.71-x86_64-1.txz: Upgraded.
l/libical-3.0.18-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/libqalculate-5.3.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/liburing-2.8-x86_64-1.txz: Upgraded.
l/libvisio-0.1.8-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/mozjs128-128.3.1esr-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/nodejs-20.18.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/qt5-5.15.15_20241016_9f395e3b-x86_64-1.txz: Upgraded.
Compiled against icu4c-76.1.
l/qt5-webkit-5.212.0_alpha4-x86_64-13.txz: Removed.
Nothing uses this except kdewebkit, and nothing uses that.
Plus it is unmaintained, obsolete, and likely full of holes.
l/qt6-6.7.3_20240920_90e86aee-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-76.1.
l/vte-0.78.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
n/dovecot-2.3.21.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
n/netatalk-4.0.3-x86_64-1.txz: Upgraded.
n/php-8.3.13-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
n/postfix-3.9.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
n/samba-4.21.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
n/tin-2.6.3-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
t/texlive-2024.240409-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
extra/brltty/brltty-6.7-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
extra/sendmail/sendmail-8.18.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
extra/sendmail/sendmail-cf-8.18.1-noarch-2.txz: Rebuilt.
Recompiled against icu4c-76.1.
a/elilo-3.16-x86_64-18.txz: Rebuilt.
eliloconfig: if we don't find initrd-generic.img, try to fall back on
/boot/initrd.gz. Thanks to rworkman.
a/kernel-firmware-20241022_e1d9577-noarch-1.txz: Upgraded.
a/kernel-generic-6.11.5-x86_64-1.txz: Upgraded.
a/less-668-x86_64-1.txz: Upgraded.
a/openssl11-solibs-1.1.1zb-x86_64-1.txz: Upgraded.
a/sysvinit-3.11-x86_64-1.txz: Upgraded.
a/usbutils-018-x86_64-1.txz: Upgraded.
d/kernel-headers-6.11.5-x86-1.txz: Upgraded.
d/parallel-20241022-noarch-1.txz: Upgraded.
d/swig-4.3.0-x86_64-1.txz: Upgraded.
k/kernel-source-6.11.5-noarch-1.txz: Upgraded.
l/libvisio-0.1.8-x86_64-1.txz: Upgraded.
l/python-trove-classifiers-2024.10.21.16-x86_64-1.txz: Upgraded.
n/openssl11-1.1.1zb-x86_64-1.txz: Upgraded.
Apply patch to fix a security issue:
Harden BN_GF2m_poly2arr against misuse.
This CVE was fixed by the 1.1.1zb release that is only available to
subscribers to OpenSSL's premium extended support. The patch was prepared
by backporting from the OpenSSL-3.0 repo. The reported version number has
been updated so that vulnerability scanners calm down.
Thanks to Ken Zalewski for the patch!
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-9143
(* Security fix *)
xap/gucharmap-16.0.2-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-128.3.3esr-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/128.3.3esr/releasenotes/
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/elilo-3.16-x86_64-17.txz: Rebuilt.
eliloconfig: adapt to new naming and lack of huge kernel. Thanks to gildbg.
ap/cups-browsed-2.1.0-x86_64-1.txz: Upgraded.
Removed support for legacy CUPS browsing and for LDAP
Legacy CUPS browsing is not needed any more and, our implementation
accepting any UDP packet on port 631, causes vulnerabilities, and
our LDAP support is does not comly with RFC 7612 and is therefore
limited. Fixes CVE-2024-47176 and CVE-2024-47850
Default `BrowseRemoteProtocols` should not include `cups` protocol
Works around CVE-2024-47176, the fix is the complete removal of
legacy CUPS Browsing functionality.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-47176https://www.cve.org/CVERecord?id=CVE-2024-47850
(* Security fix *)
l/dav1d-1.5.0-x86_64-1.txz: Upgraded.
l/gvfs-1.56.1-x86_64-1.txz: Upgraded.
l/libcupsfilters-2.1.0-x86_64-1.txz: Upgraded.
`cfGetPrinterAttributes5()`: Validate response attributes before return
The IPP print destination which we are querying can be corrupted or
forged, so validate the response to strenghten security. Fixes
CVE-2024-47076.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-47076
(* Security fix *)
l/libppd-2.1.0-x86_64-1.txz: Upgraded.
Prevent PPD generation based on invalid IPP response
Overtaken from CUPS 2.x: Validate IPP attributes in PPD generator,
refactor make-and-model code, PPDize preset and template names,
quote PPD localized strings. Fixes CVE-2024-47175.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-47175
(* Security fix *)
l/python-MarkupSafe-3.0.2-x86_64-1.txz: Upgraded.
l/python-psutil-6.1.0-x86_64-1.txz: Upgraded.
x/fcitx5-qt-5.1.8-x86_64-1.txz: Upgraded.
a/os-prober-1.83-x86_64-3.txz: Rebuilt.
Fix the generated path to elilo.efi. Thanks to yancek and chris.willing.
l/python-sphinx-8.1.3-x86_64-1.txz: Upgraded.
l/qt6-6.7.3_20240920_90e86aee-x86_64-2.txz: Rebuilt.
[PATCH] ListView: fix countChanged not being emitted in certain cases.
n/samba-4.21.1-x86_64-1.txz: Upgraded.
a/dracut-105-x86_64-1.txz: Upgraded.
a/sysvinit-scripts-15.1-noarch-22.txz: Rebuilt.
rc.6: add a hash -r after unmounting local partitions in case any directories
in the $PATH have gone away. Thanks to yars.
l/libarchive-3.7.7-x86_64-1.txz: Upgraded.
This update fixes bug and the following security issues:
gzip: prevent a hang when processing a malformed gzip inside a gzip.
tar: don't crash on truncated tar archives.
tar: fix two leaks in tar header parsing.
(* Security fix *)
l/python-sphinx-8.1.2-x86_64-1.txz: Upgraded.
l/python-trove-classifiers-2024.10.13-x86_64-1.txz: Upgraded.
x/bdftopcf-1.1.2-x86_64-1.txz: Upgraded.
x/fonttosfnt-1.2.4-x86_64-1.txz: Upgraded.
x/xcmsdb-1.0.7-x86_64-1.txz: Upgraded.
x/xf86-video-mach64-6.10.0-x86_64-1.txz: Upgraded.
x/xf86-video-mga-2.1.0-x86_64-1.txz: Upgraded.
x/xf86-video-r128-6.13.0-x86_64-1.txz: Upgraded.
x/xkbprint-1.0.7-x86_64-1.txz: Upgraded.
x/xmag-1.0.8-x86_64-1.txz: Upgraded.
x/xtrans-1.5.1-noarch-1.txz: Upgraded.
x/xwud-1.0.7-x86_64-1.txz: Upgraded.
a/kernel-firmware-20241010_d553152-noarch-1.txz: Upgraded.
Hey folks, sorry about the missing firmware. I've made some changes to the
build script to prevent any future occurrences.
isolinux/initrd.img: Rebuilt.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/hostname-3.24-x86_64-1.txz: Upgraded.
a/kernel-firmware-20241010_c410e4c-noarch-1.txz: Upgraded.
a/kernel-generic-6.10.14-x86_64-1.txz: Upgraded.
a/mkinitrd-1.4.11-x86_64-39.txz: Rebuilt.
Symlink /boot/remove-orphaned-initrds into /usr/sbin to get it in the $PATH.
a/pkgtools-15.1-noarch-14.txz: Rebuilt.
Renamed kernel-backup to make-kernel-backup.
We'll leave it in /boot where it's more likely to be noticed, but also
add a symlink in /usr/sbin so that it's in the $PATH.
Support /etc/default/make-kernel-backup.
Test to see if $KERNEL_FILE is actually a Linux kernel.
d/kernel-headers-6.10.14-x86-1.txz: Upgraded.
k/kernel-source-6.10.14-noarch-1.txz: Upgraded.
l/python-sphinx-8.1.0-x86_64-1.txz: Upgraded.
l/python-sphinx_rtd_theme-3.0.1-x86_64-1.txz: Upgraded.
n/c-ares-1.34.1-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-128.3.1esr-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/128.3.1esr/releasenotes/
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/kernel-generic-6.11.3-x86_64-1.txz: Upgraded.
testing/packages/kernel-headers-6.11.3-x86-1.txz: Upgraded.
testing/packages/kernel-source-6.11.3-noarch-1.txz: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/dracut-104-x86_64-1.txz: Upgraded.
d/cmake-3.30.5-x86_64-1.txz: Upgraded.
d/subversion-1.14.4-x86_64-1.txz: Upgraded.
l/mozjs128-128.3.1esr-x86_64-1.txz: Upgraded.
l/openexr-3.3.1-x86_64-1.txz: Upgraded.
l/python-charset-normalizer-3.4.0-x86_64-1.txz: Upgraded.
x/fcitx5-5.1.11-x86_64-1.txz: Upgraded.
x/fcitx5-anthy-5.1.5-x86_64-1.txz: Upgraded.
x/fcitx5-chinese-addons-5.1.7-x86_64-1.txz: Upgraded.
x/fcitx5-hangul-5.1.5-x86_64-1.txz: Upgraded.
x/fcitx5-kkc-5.1.5-x86_64-1.txz: Upgraded.
x/fcitx5-m17n-5.1.2-x86_64-1.txz: Upgraded.
x/fcitx5-qt-5.1.7-x86_64-1.txz: Upgraded.
x/fcitx5-unikey-5.1.5-x86_64-1.txz: Upgraded.
x/libime-1.1.9-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-128.3.1esr-x86_64-1.txz: Upgraded.
This update contains a critical security fix:
Use-after-free in Animation timeline.
"An attacker was able to achieve code execution in the content process by
exploiting a use-after-free in Animation timelines. We have had reports of
this vulnerability being exploited in the wild."
For more information, see:
https://www.mozilla.org/en-US/firefox/128.3.1/releasenotes/https://www.mozilla.org/security/advisories/mfsa2024-51/https://www.cve.org/CVERecord?id=CVE-2024-9680
(* Security fix *)
a/mkinitrd-1.4.11-x86_64-38.txz: Rebuilt.
/boot/remove-orphaned-initrds: this script will remove initrds found in /boot
if there is no matching kernel version found. This can be run manually or
added as a cron job to prevent unneeded initrds from filling up /boot.
a/pkgtools-15.1-noarch-13.txz: Rebuilt.
/boot/kernel-backup: with the huge kernel gone, this script seeks to fill the
gap by offering an easy way to make a backup kernel that will be picked up
by update-grub. It does this by creating entries in the pkgtools database
that protect a kernel, modules, and optionally an initrd from being removed
when the kernel-generic package is upgraded. See the script for details.
ap/rpm-4.20.0-x86_64-1.txz: Upgraded.
d/git-2.47.0-x86_64-1.txz: Upgraded.
l/python-MarkupSafe-3.0.1-x86_64-1.txz: Upgraded.
l/python-tomli-w-1.1.0-x86_64-1.txz: Upgraded.
n/cifs-utils-7.1-x86_64-1.txz: Upgraded.
n/netatalk-4.0.1-x86_64-1.txz: Upgraded.
Several ELF objects were found to have rpaths pointing into /tmp, a world
writable directory. This could have allowed a local attacker to launch denial
of service attacks or execute arbitrary code when the affected binaries are
run by placing crafted ELF objects in the /tmp rpath location. All rpaths with
an embedded /tmp path have been scrubbed from the binaries, and makepkg has
gained a lint feature to detect these so that they won't creep back in.
a/kernel-firmware-20241001_95bfe08-noarch-1.txz: Upgraded.
a/kernel-generic-6.10.12-x86_64-1.txz: Upgraded.
a/pkgtools-15.1-noarch-12.txz: Rebuilt.
makepkg: when looking for ELF objects with --remove-rpaths or
--remove-tmp-rpaths, avoid false hits on files containing 'ELF' as part
of the directory or filename.
Also warn about /tmp rpaths after the package is built.
ap/cups-2.4.11-x86_64-1.txz: Upgraded.
ap/cups-browsed-2.0.1-x86_64-2.txz: Rebuilt.
Mitigate security issue that could lead to a denial of service or
the execution of arbitrary code.
Rebuilt with --with-browseremoteprotocols=none to disable incoming
connections, since this daemon has been shown to be insecure. If you
actually use cups-browsed, be sure to install the new
/etc/cups/cups-browsed.conf.new containing this line:
BrowseRemoteProtocols none
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-47176
(* Security fix *)
d/kernel-headers-6.10.12-x86-1.txz: Upgraded.
d/llvm-18.1.8-x86_64-3.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
d/luajit-2.1.1727621189-x86_64-1.txz: Upgraded.
d/ruby-3.3.5-x86_64-2.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
k/kernel-source-6.10.12-noarch-1.txz: Upgraded.
kde/kimageformats-5.116.0-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
kde/kio-extras-23.08.5-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
kde/krita-5.2.5-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
kde/libindi-2.1.0-x86_64-1.txz: Upgraded.
l/cryfs-0.10.3-x86_64-13.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
l/espeak-ng-1.51.1-x86_64-2.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
l/ffmpeg-7.1-x86_64-1.txz: Upgraded.
l/gegl-0.4.48-x86_64-3.txz: Rebuilt.
Recompiled against openexr-3.3.0.
l/gst-plugins-bad-free-1.24.8-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
l/imagemagick-7.1.1_38-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
l/libgsf-1.14.53-x86_64-1.txz: Upgraded.
l/librsvg-2.58.5-x86_64-1.txz: Upgraded.
l/libvncserver-0.9.14-x86_64-3.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
l/mozjs128-128.3.0esr-x86_64-1.txz: Upgraded.
l/netpbm-11.08.00-x86_64-1.txz: Upgraded.
l/opencv-4.10.0-x86_64-3.txz: Rebuilt.
Recompiled against openexr-3.3.0.
l/openexr-3.3.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/python-glad2-2.0.8-x86_64-1.txz: Upgraded.
l/python-pyproject-hooks-1.2.0-x86_64-1.txz: Upgraded.
l/spirv-llvm-translator-18.1.4-x86_64-2.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
l/woff2-20231106_0f4d304-x86_64-2.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
n/openobex-1.7.2-x86_64-6.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
x/marisa-0.2.6-x86_64-11.txz: Rebuilt.
Remove rpaths from binaries.
(* Security fix *)
xap/gimp-2.10.38-x86_64-2.txz: Rebuilt.
Recompiled against openexr-3.3.0.
xap/mozilla-firefox-128.3.0esr-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/128.3.0/releasenotes/https://www.mozilla.org/security/advisories/mfsa2024-47https://www.cve.org/CVERecord?id=CVE-2024-9392https://www.cve.org/CVERecord?id=CVE-2024-9393https://www.cve.org/CVERecord?id=CVE-2024-9394https://www.cve.org/CVERecord?id=CVE-2024-8900https://www.cve.org/CVERecord?id=CVE-2024-9396https://www.cve.org/CVERecord?id=CVE-2024-9397https://www.cve.org/CVERecord?id=CVE-2024-9398https://www.cve.org/CVERecord?id=CVE-2024-9399https://www.cve.org/CVERecord?id=CVE-2024-9400https://www.cve.org/CVERecord?id=CVE-2024-9401https://www.cve.org/CVERecord?id=CVE-2024-9402
(* Security fix *)
xap/xlockmore-5.80-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/kernel-generic-6.11.1-x86_64-1.txz: Upgraded.
testing/packages/kernel-headers-6.11.1-x86-1.txz: Upgraded.
testing/packages/kernel-source-6.11.1-noarch-1.txz: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/dracut-103-x86_64-2.txz: Rebuilt.
Include /etc/dracut.conf.d/elogind.conf to handle uaccess rules correctly.
Thanks to LuckyCyborg.
l/cairo-1.18.2-x86_64-2.txz: Rebuilt.
[PATCH] cff: Don't fail if no local subs.
Fixes printing PDFs with CUPS. Thanks to pee_bee and reddog83.
l/glib2-2.82.1-x86_64-1.txz: Upgraded.
l/pipewire-1.2.4-x86_64-1.txz: Upgraded.
n/NetworkManager-1.48.10-x86_64-2.txz: Rebuilt.
Rebuilt to pick up the new plugin directory for ppp-2.5.1.
n/bind-9.20.2-x86_64-1.txz: Upgraded.
n/openssh-9.9p1-x86_64-1.txz: Upgraded.
Future deprecation notice: OpenSSH plans to remove support for the DSA
signature algorithm in early 2025. For now, this package retains DSA
support, but plan accordingly.
n/ppp-2.5.1-x86_64-1.txz: Upgraded.
n/rp-pppoe-4.0-x86_64-1.txz: Upgraded.
Upstream has removed "ancient crufty scripts," so see HOW-TO-CONNECT in the
documentation if you were using those to connect previously.
a/btrfs-progs-6.11-x86_64-1.txz: Upgraded.
a/dracut-103-x86_64-1.txz: Added.
This is Red Hat's tool to generate an initramfs (aka initrd). Around here,
we try not to suffer from Not Invented Here Syndrome (some might say the
less we invent, the better ;-). It never hurts to have additional options,
and it even looks like our old friend David Cantrell is on the AUTHORS list.
I've had good luck here with:
dracut --hostonly --force /boot/initrd-6.10.11-generic.img
Thanks to Didier Spaier for convincing me to try it out.
a/gawk-5.3.1-x86_64-1.txz: Upgraded.
a/kernel-generic-6.10.11-x86_64-1.txz: Upgraded.
a/upower-1.90.6-x86_64-1.txz: Upgraded.
d/kernel-headers-6.10.11-x86-1.txz: Upgraded.
k/kernel-source-6.10.11-noarch-1.txz: Upgraded.
l/libtiff-4.7.0-x86_64-1.txz: Upgraded.
n/curl-8.10.1-x86_64-1.txz: Upgraded.
x/mesa-24.2.3-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/kernel-firmware-20240913_6c88d9b-noarch-1.txz: Upgraded.
a/os-prober-1.83-x86_64-2.txz: Rebuilt.
I have seen the reports that os-prober can take an excessive amount of time,
but haven't had it take more than a minute and a half here on my most
populated (and fairly slow) machine. But I've found and applied a patch that
might help... let's see if this speeds things up on affected machines.
d/git-2.46.1-x86_64-1.txz: Upgraded.
d/python-setuptools-75.0.0-x86_64-1.txz: Upgraded.
l/at-spi2-core-2.54.0-x86_64-1.txz: Upgraded.
l/gsettings-desktop-schemas-47-x86_64-1.txz: Upgraded.
l/libjpeg-turbo-3.0.4-x86_64-1.txz: Upgraded.
l/python-pysol_cards-0.18.0-x86_64-1.txz: Upgraded.
l/vte-0.78.0-x86_64-1.txz: Upgraded.
testing/packages/kernel-generic-6.11.0-x86_64-1.txz: Added.
testing/packages/kernel-headers-6.11.0-x86-1.txz: Added.
testing/packages/kernel-source-6.11.0-noarch-1.txz: Added.
a/kernel-firmware-20240912_b9daf8c-noarch-1.txz: Upgraded.
a/kernel-generic-6.10.10-x86_64-1.txz: Upgraded.
The kernel modules are now bundled into this package.
a/kernel-huge-6.10.9-x86_64-1.txz: Removed.
So long, we won't miss you.
If you were actually using kernel-huge with one of the SCSI/SAS drivers that
were built in, you'll need to use kernel-generic and an initrd that contains
the needed drivers. Otherwise, just switch to kernel-generic. It'll be fine.
If unsure, make an initrd with geninitrd and have your bootloader use it.
a/kernel-modules-6.10.9-x86_64-1.txz: Removed.
Kernel modules are now bundled with the kernel-generic package.
a/libblockdev-3.2.0-x86_64-1.txz: Upgraded.
d/kernel-headers-6.10.10-x86-1.txz: Upgraded.
k/kernel-source-6.10.10-noarch-1.txz: Upgraded.
l/librsvg-2.58.4-x86_64-1.txz: Upgraded.
l/protobuf-28.1-x86_64-1.txz: Upgraded.
l/pygobject3-3.50.0-x86_64-1.txz: Upgraded.
l/python-trove-classifiers-2024.9.12-x86_64-1.txz: Upgraded.
n/nghttp3-1.5.0-x86_64-2.txz: Rebuilt.
Make sure the cmake files are installed to the correct location.
Thanks to fulalas.
x/ibus-table-1.17.8-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/efibootmgr-18-x86_64-1.txz: Upgraded.
a/grub-2.12-x86_64-16.txz: Rebuilt.
Long ago, we began giving all the scripts in /etc/grub.d/ the .new treatment
to prevent local customizations from being overwritten with a package
upgrade. But, this no longer appears to be a good idea, especially if we're
ever going to offer the possibility to automate grub-install and grub-update.
So, we are no longer going to preserve the contents of these files when the
grub package is upgraded. We *will* however preserve the existing
permissions, so you'll be able to turn off scripts that you don't want
running, and you'll be able to make new scripts, or make edited and renamed
copies of the scripts shipped in this package, so there's no real loss of
functionality here.
It looks like 40_custom is intended to be locally edited, so we make an
exception and do not overwrite that one.
d/python-setuptools-74.1.2-x86_64-1.txz: Upgraded.
kde/okteta-0.26.17-x86_64-1.txz: Upgraded.
l/gobject-introspection-1.80.1-x86_64-2.txz: Rebuilt.
Fix running against python-setuptools-74.1.2:
[PATCH] giscanner: remove dependency on distutils.msvccompiler.
l/python-importlib_metadata-8.5.0-x86_64-1.txz: Upgraded.
n/curl-8.10.0-x86_64-1.txz: Upgraded.
a/aaa_glibc-solibs-2.40-x86_64-5.txz: Rebuilt.
a/kernel-firmware-20240828_335a1de-noarch-1.txz: Upgraded.
a/kernel-generic-6.10.7-x86_64-1.txz: Upgraded.
a/kernel-huge-6.10.7-x86_64-1.txz: Upgraded.
a/kernel-modules-6.10.7-x86_64-1.txz: Upgraded.
a/userspace-rcu-0.14.1-x86_64-1.txz: Upgraded.
ap/man-db-2.13.0-x86_64-1.txz: Upgraded.
ap/screen-5.0.0-x86_64-1.txz: Upgraded.
ap/vim-9.1.0702-x86_64-1.txz: Upgraded.
d/cmake-3.30.3-x86_64-1.txz: Upgraded.
d/gcc-14.2.0-x86_64-2.txz: Rebuilt.
Merge in parts of alienBOB's multilib build script, generalize the script
to work with both --enable-multilib and --disable-multilib, and otherwise
clean things up. Go ahead and build it multilib on 64-bit, because why not?
It's worth the bit of bloat to no longer have this package need to be
maintained separately and kept in sync. Thanks to alienBOB.
d/gcc-g++-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-gdc-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-gfortran-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-gm2-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-gnat-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-go-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-objc-14.2.0-x86_64-2.txz: Rebuilt.
d/gcc-rust-14.2.0-x86_64-2.txz: Rebuilt.
d/kernel-headers-6.10.7-x86-1.txz: Upgraded.
d/python-setuptools-73.0.1-x86_64-1.txz: Rebuilt.
Reverted due to regression: breaks g-ir-scanner
k/kernel-source-6.10.7-noarch-1.txz: Upgraded.
l/glibc-2.40-x86_64-5.txz: Rebuilt.
Enable multilib on 64-bit. Thanks to alienBOB.
Note that Slackware 64-bit can now run a 32-bit "Hello World!" but there
are no immediate plans to add additional multilib support by default.
Maybe down the road when bare metal 32-bit support goes away.
l/glibc-i18n-2.40-x86_64-5.txz: Rebuilt.
l/glibc-profile-2.40-x86_64-5.txz: Rebuilt.
l/gtk4-4.15.6-x86_64-1.txz: Upgraded.
l/libssh-0.11.1-x86_64-1.txz: Upgraded.
l/protobuf-28.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/python-certifi-2024.8.30-x86_64-1.txz: Upgraded.
l/qt6-6.7.2_20240610_3f005f1e-x86_64-6.txz: Rebuilt.
Recompiled against protobuf-28.0.
n/ca-certificates-20240830-noarch-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
n/mosh-1.4.0-x86_64-4.txz: Rebuilt.
Recompiled against protobuf-28.0.
n/php-8.3.11-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.3.11
x/mesa-24.2.1-x86_64-1.txz: Upgraded.
Thanks to lucabon for the rust-bindgen patch.
xap/vim-gvim-9.1.0702-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/libbytesize-2.11-x86_64-1.txz: Upgraded.
d/python-setuptools-73.0.0-x86_64-1.txz: Upgraded.
l/python-importlib_metadata-8.4.0-x86_64-1.txz: Upgraded.
n/epic5-2.2-x86_64-1.txz: Upgraded.
n/netatalk-3.2.7-x86_64-1.txz: Upgraded.
x/xorg-server-21.1.13-x86_64-2.txz: Rebuilt.
On 32-bit, using the modesetting driver with Intel graphics is resulting in
a black screen (observed here with CoffeeLake-H GT2), so on 32-bit only let's
stop applying the patch that was making xorg-server use modesetting by
default. Thanks to LuckyCyborg and Petri Kaukasoina.
Fix build with gcc-14.2.
x/xorg-server-xephyr-21.1.13-x86_64-2.txz: Rebuilt.
x/xorg-server-xnest-21.1.13-x86_64-2.txz: Rebuilt.
x/xorg-server-xvfb-21.1.13-x86_64-2.txz: Rebuilt.
xfce/xfce4-screenshooter-1.11.1-x86_64-1.txz: Upgraded.
a/eudev-3.2.14-x86_64-2.txz: Rebuilt.
Add a few more modules to /lib/modprobe.d/watchdog.conf.
a/kmod-33-x86_64-1.txz: Upgraded.
ap/sc-im-0.8.4-x86_64-1.txz: Upgraded.
ap/scdoc-1.11.3-x86_64-1.txz: Added.
This is needed to build kmod-33.
d/luajit-2.1.1723675123-x86_64-1.txz: Upgraded.
d/rust-bindgen-0.70.0-x86_64-1.txz: Upgraded.
l/librsvg-2.58.3-x86_64-1.txz: Upgraded.
x/mesa-24.2.0-x86_64-2.txz: Rebuilt.
Updated the subprojects and recompiled.
a/aaa_glibc-solibs-2.40-x86_64-4.txz: Rebuilt.
a/sysvinit-scripts-15.1-noarch-21.txz: Rebuilt.
rc.S: fix_errors when mounting a bcachefs filesystem. Thanks to 0XBF.
l/glibc-2.40-x86_64-4.txz: Rebuilt.
On 32-bit, add these compile flags:
-mstackrealign
This is needed for compatibility with old binaries, thanks to iive.
-fno-omit-frame-pointer -mno-omit-leaf-frame-pointer
Without these, both nouveau and the nvidia driver are prone to crashes and
hangs. Thanks to UnrelatedMicrowave.
On both 32-bit and 64-bit, add --enable-multi-arch. This will enable
optimized assembly code within glibc, depending on the CPU detected.
Thanks to iive.
With -mstackrealign and --enable-multi-arch on 32-bit, I believe that
-march= could be set to any x86 arch -- it's merely a decoration.
l/glibc-i18n-2.40-x86_64-4.txz: Rebuilt.
l/glibc-profile-2.40-x86_64-4.txz: Rebuilt.
l/gtk4-4.14.5-x86_64-1.txz: Upgraded.
l/python-markdown-3.7-x86_64-1.txz: Upgraded.
x/libglvnd-1.7.0-x86_64-2.txz: Rebuilt.
Use the new compiler flags. On 32-bit, add -mstackrealign just in case.
xfce/xfce4-notifyd-0.9.6-x86_64-1.txz: Upgraded.
d/cbindgen-0.26.0-x86_64-3.txz: Rebuilt.
Revert this until FF/TB are patched. Thanks to Lenard Spencer.
l/M2Crypto-0.42.0-x86_64-1.txz: Upgraded.
l/libedit-20240808_3.1-x86_64-1.txz: Upgraded.
l/python-lxml-5.3.0-x86_64-1.txz: Upgraded.
l/python-zipp-3.20.0-x86_64-1.txz: Upgraded.
xap/ddd-3.4.1-x86_64-1.txz: Upgraded.
xap/pan-0.160-x86_64-1.txz: Upgraded.
testing/packages/aaa_glibc-solibs-2.40-x86_64-2.txz: Added.
testing/packages/glibc-2.40-x86_64-2.txz: Added.
Let's test building with -fno-omit-frame-pointer and
-mno-omit-leaf-frame-pointer added to the CFLAGS (thanks alienBOB),
and --enable-multi-arch added to the configure options as suggested
by iive. Hopefully they will test and report if these changes fix
the reported stability issues when running Steam.
testing/packages/glibc-i18n-2.40-x86_64-2.txz: Added.
testing/packages/glibc-profile-2.40-x86_64-2.txz: Added.
