mirror of
git://slackware.nl/current.git
synced 2024-12-27 09:59:16 +01:00
770 commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Patrick J Volkerding
|
a8030b9def |
Mon Apr 17 19:20:47 UTC 2023
d/poke-3.1-x86_64-1.txz: Upgraded.
l/apr-1.7.4-x86_64-1.txz: Upgraded.
l/imagemagick-7.1.1_7-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-112.0.1-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/112.0.1/releasenotes/
xap/network-manager-applet-1.32.0-x86_64-1.txz: Upgraded.
xfce/tumbler-4.18.1-x86_64-1.txz: Upgraded.
xfce/xfconf-4.18.1-x86_64-1.txz: Upgraded.
|
||
|
Patrick J Volkerding
|
e03738f60b |
Sat Apr 15 03:23:22 UTC 2023
a/aaa_libraries-15.1-x86_64-20.txz: Rebuilt. Upgraded: libcap.so.2.68, liblzma.so.5.4.2, libzstd.so.1.5.5, libglib-2.0.so.0.7600.1, libgmodule-2.0.so.0.7600.1, libgobject-2.0.so.0.7600.1, libgthread-2.0.so.0.7600.1, libisl.so.23.3.0. Added (temporarily, for about one month): libboost_*.so.1.81.0, libicu*.so.72.1. a/tcsh-6.24.10-x86_64-1.txz: Upgraded. a/xfsprogs-5.13.0-x86_64-5.txz: Rebuilt. Recompiled against icu4c-73.1. ap/pamixer-1.5-x86_64-6.txz: Rebuilt. Recompiled against boost-1.82.0. ap/sqlite-3.41.2-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. kde/kdeplasma-addons-5.27.4-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. kde/kig-22.12.3-x86_64-2.txz: Rebuilt. Recompiled against boost-1.82.0. kde/konsole-22.12.3-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. kde/kopeninghours-22.12.3-x86_64-2.txz: Rebuilt. Recompiled against boost-1.82.0. kde/krita-5.1.5-x86_64-6.txz: Rebuilt. Recompiled against boost-1.82.0. kde/plasma-workspace-5.27.4.1-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. l/boost-1.82.0-x86_64-1.txz: Upgraded. Shared library .so-version bump. Compiled against icu4c-73.1. l/cryfs-0.10.3-x86_64-8.txz: Rebuilt. Recompiled against boost-1.82.0. l/harfbuzz-7.1.0-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. l/icu4c-73.1-x86_64-1.txz: Upgraded. Shared library .so-version bump. l/libical-3.0.16-x86_64-3.txz: Rebuilt. Recompiled against icu4c-73.1. l/libqalculate-4.6.0-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. l/libvisio-0.1.7-x86_64-11.txz: Rebuilt. Recompiled against icu4c-73.1. l/mozjs102-102.10.0esr-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. l/nodejs-19.9.0-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. l/qt5-5.15.9_20230412_abff5c39-x86_64-1.txz: Upgraded. Compiled against icu4c-73.1. l/qt5-webkit-5.212.0_alpha4-x86_64-11.txz: Rebuilt. Recompiled against icu4c-73.1. l/vte-0.72.0-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. n/dovecot-2.3.20-x86_64-3.txz: Rebuilt. Recompiled against icu4c-73.1. n/openresolv-3.13.0-noarch-1.txz: Upgraded. n/php-8.2.5-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. n/postfix-3.7.4-x86_64-5.txz: Rebuilt. Recompiled against icu4c-73.1. n/samba-4.18.1-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. n/tin-2.6.2-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. t/texlive-2023.230322-x86_64-2.txz: Rebuilt. Recompiled against icu4c-73.1. x/fcitx5-chinese-addons-5.0.17-x86_64-2.txz: Rebuilt. Recompiled against boost-1.82.0. x/libime-1.0.17-x86_64-2.txz: Rebuilt. Recompiled against boost-1.82.0. |
||
|
Patrick J Volkerding
|
888029128e |
Thu Apr 13 22:25:18 UTC 2023
a/kernel-generic-6.1.24-x86_64-1.txz: Upgraded.
a/kernel-huge-6.1.24-x86_64-1.txz: Upgraded.
a/kernel-modules-6.1.24-x86_64-1.txz: Upgraded.
a/tcsh-6.24.09-x86_64-1.txz: Upgraded.
ap/vim-9.0.1450-x86_64-1.txz: Upgraded.
d/kernel-headers-6.1.24-x86-1.txz: Upgraded.
d/mercurial-6.4.1-x86_64-1.txz: Upgraded.
d/rust-bindgen-0.65.1-x86_64-1.txz: Upgraded.
k/kernel-source-6.1.24-noarch-1.txz: Upgraded.
kde/digikam-8.0.0-x86_64-1.txz: Upgraded.
l/gobject-introspection-1.76.1-x86_64-1.txz: Upgraded.
l/pipewire-0.3.69-x86_64-1.txz: Upgraded.
When enabled, use wireplumber rather than the deprecated media-session.
Thanks to saxa for the help. :-)
n/openvpn-2.6.3-x86_64-1.txz: Upgraded.
n/php-8.2.5-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.2.5
xap/vim-gvim-9.0.1450-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|
||
|
Patrick J Volkerding
|
701cf3165a |
Thu Apr 13 01:10:11 UTC 2023
a/f2fs-tools-1.16.0-x86_64-1.txz: Upgraded.
a/upower-1.90.0-x86_64-1.txz: Upgraded.
kde/breeze-gtk-5.27.4-x86_64-3.txz: Rebuilt.
[PATCH] gtk3: restore old icon size for titlebutton
Thanks to marav.
kde/kwin-5.27.4.1-x86_64-1.txz: Upgraded.
l/at-spi2-core-2.48.0-x86_64-1.txz: Upgraded.
l/gjs-1.76.0-x86_64-1.txz: Upgraded.
l/glib-networking-2.76.0-x86_64-1.txz: Upgraded.
l/glib2-2.76.1-x86_64-1.txz: Upgraded.
l/gst-plugins-bad-free-1.22.2-x86_64-1.txz: Upgraded.
l/gst-plugins-base-1.22.2-x86_64-1.txz: Upgraded.
l/gst-plugins-good-1.22.2-x86_64-1.txz: Upgraded.
l/gst-plugins-libav-1.22.2-x86_64-1.txz: Upgraded.
l/gstreamer-1.22.2-x86_64-1.txz: Upgraded.
l/librsvg-2.56.0-x86_64-1.txz: Upgraded.
l/libsoup3-3.4.0-x86_64-1.txz: Upgraded.
l/libwnck3-43.0-x86_64-1.txz: Upgraded.
l/openal-soft-1.23.1-x86_64-1.txz: Upgraded.
l/pygobject3-3.44.1-x86_64-1.txz: Upgraded.
l/vte-0.72.0-x86_64-1.txz: Upgraded.
n/dhcpcd-9.5.0-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-102.10.0-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/102.10.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/#MFSA-TMP-2023-0001
https://www.cve.org/CVERecord?id=CVE-2023-29531
https://www.cve.org/CVERecord?id=CVE-2023-29532
https://www.cve.org/CVERecord?id=CVE-2023-29533
https://www.cve.org/CVERecord?id=CVE-2023-29535
https://www.cve.org/CVERecord?id=CVE-2023-29536
https://www.cve.org/CVERecord?id=CVE-2023-0547
https://www.cve.org/CVERecord?id=CVE-2023-29479
https://www.cve.org/CVERecord?id=CVE-2023-29539
https://www.cve.org/CVERecord?id=CVE-2023-29541
https://www.cve.org/CVERecord?id=CVE-2023-29542
https://www.cve.org/CVERecord?id=CVE-2023-29545
https://www.cve.org/CVERecord?id=CVE-2023-1945
https://www.cve.org/CVERecord?id=CVE-2023-29548
https://www.cve.org/CVERecord?id=CVE-2023-29550
(* Security fix *)
|
||
|
Patrick J Volkerding
|
25dc9a625c |
Fri Apr 7 00:51:44 UTC 2023
a/kernel-firmware-20230406_86da2ac-noarch-1.txz: Upgraded. a/kernel-generic-6.1.23-x86_64-1.txz: Upgraded. a/kernel-huge-6.1.23-x86_64-1.txz: Upgraded. a/kernel-modules-6.1.23-x86_64-1.txz: Upgraded. d/kernel-headers-6.1.23-x86-1.txz: Upgraded. d/llvm-16.0.1-x86_64-1.txz: Upgraded. k/kernel-source-6.1.23-noarch-1.txz: Upgraded. l/SDL2-2.26.5-x86_64-1.txz: Upgraded. l/imagemagick-7.1.1_6-x86_64-1.txz: Upgraded. l/isl-0.26-x86_64-1.txz: Upgraded. l/spirv-llvm-translator-16.0.0-x86_64-2.txz: Rebuilt. Looks like this is working now after some linking adjustments. Thanks very much to lucabon! x/mesa-23.0.1-x86_64-3.txz: Rebuilt. x/xf86-input-wacom-1.2.0-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt. |
||
|
Patrick J Volkerding
|
9c04f746e5 |
Sun Apr 2 18:33:01 UTC 2023
kde/krusader-2.8.0-x86_64-2.txz: Rebuilt. [PATCH 1/2] Add workaround for icon size in HiDPI environment. [PATCH 2/2] Don't set QStyle::State_None for brief view. Thanks to Heinz Wiesinger. l/apr-1.7.3-x86_64-1.txz: Upgraded. n/irssi-1.4.4-x86_64-1.txz: Upgraded. Do not crash Irssi when one line is printed as the result of another line being printed. Also solve a memory leak while printing unformatted lines. (* Security fix *) xap/xsnow-3.7.4-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
b689ecb882 |
Fri Mar 31 18:01:09 UTC 2023
a/kernel-generic-6.1.22-x86_64-1.txz: Upgraded.
a/kernel-huge-6.1.22-x86_64-1.txz: Upgraded.
a/kernel-modules-6.1.22-x86_64-1.txz: Upgraded.
a/mkinitrd-1.4.11-x86_64-32.txz: Rebuilt.
Add /lib/firmware directory to _initrd-tree.tar.gz. Thanks to walecha.
d/cmake-3.26.2-x86_64-1.txz: Upgraded.
d/kernel-headers-6.1.22-x86-1.txz: Upgraded.
d/llvm-16.0.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
Thanks to Heinz Wiesinger for the assistance.
Compiled with -DLLVM_BUILD_LLVM_DYLIB=ON -DLLVM_LINK_LLVM_DYLIB=ON
-DCLANG_LINK_CLANG_DYLIB=ON.
I think we'll get 16.0.1 next week if we need to make any adjustments.
d/ruby-3.2.2-x86_64-1.txz: Upgraded.
This update fixes security issues:
ReDoS vulnerability in URI.
ReDoS vulnerability in Time.
For more information, see:
https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/
https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/
https://www.cve.org/CVERecord?id=CVE-2023-28755
https://www.cve.org/CVERecord?id=CVE-2023-28756
(* Security fix *)
k/kernel-source-6.1.22-noarch-1.txz: Upgraded.
kde/kdevelop-22.12.3-x86_64-2.txz: Rebuilt.
Recompiled against llvm-16.0.0.
l/openexr-3.1.7-x86_64-1.txz: Upgraded.
l/qt5-5.15.8_20230325_c1a3e988-x86_64-1.txz: Upgraded.
Compiled against llvm-16.0.0.
l/spirv-llvm-translator-16.0.0-x86_64-1.txz: Upgraded.
Compiled against llvm-16.0.0.
Thanks to Heinz Wiesinger for finding the fix for -DBUILD_SHARED_LIBS=ON.
n/pssh-2.3.5-x86_64-1.txz: Upgraded.
n/samba-4.18.1-x86_64-1.txz: Upgraded.
This update fixes security issues:
An incomplete access check on dnsHostName allows authenticated but otherwise
unprivileged users to delete this attribute from any object in the directory.
The Samba AD DC administration tool, when operating against a remote LDAP
server, will by default send new or reset passwords over a signed-only
connection.
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential
attribute disclosure via LDAP filters was insufficient and an attacker may
be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
Installations with such secrets in their Samba AD should assume they have
been obtained and need replacing.
For more information, see:
https://www.samba.org/samba/security/CVE-2023-0225.html
https://www.samba.org/samba/security/CVE-2023-0922.html
https://www.samba.org/samba/security/CVE-2023-0614.html
https://www.cve.org/CVERecord?id=CVE-2023-0225
https://www.cve.org/CVERecord?id=CVE-2023-0922
https://www.cve.org/CVERecord?id=CVE-2023-0614
(* Security fix *)
x/mesa-23.0.1-x86_64-2.txz: Rebuilt.
Recompiled against llvm-16.0.0 and spirv-llvm-translator-16.0.0.
xap/seamonkey-2.53.16-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.seamonkey-project.org/releases/seamonkey2.53.16
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/rust-1.68.2-x86_64-2.txz: Rebuilt.
Use the bundled LLVM rather than the system LLVM.
This version of Rust actually does compile with llvm-16.0.0, but since it
bundles LLVM 15 let's let it use that for now.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|
||
|
Patrick J Volkerding
|
cb533ae89c |
Wed Mar 15 18:07:44 UTC 2023
ap/dmidecode-3.5-x86_64-1.txz: Upgraded. kde/kImageAnnotator-0.6.1-x86_64-1.txz: Upgraded. l/nodejs-19.8.1-x86_64-1.txz: Upgraded. n/daemon-0.8.1-x86_64-1.txz: Upgraded. x/mesa-23.0.0-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
52e0d46f00 |
Mon Mar 13 03:01:54 UTC 2023
kde/digikam-7.10.0-x86_64-1.txz: Upgraded. l/serf-1.3.9-x86_64-9.txz: Rebuilt. Applied a patch from LFS to fix a build error in Subversion caused by serf using internal OpenSSL API functions for its own use. Also fixes a crash bug that happens due to a return value being invalid. Thanks to lucabon. x/xcb-imdkit-1.0.5-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
6b281ff5ba |
Fri Mar 10 20:32:48 UTC 2023
a/kernel-firmware-20230310_588dd07-noarch-1.txz: Upgraded. a/kernel-generic-6.1.16-x86_64-1.txz: Upgraded. a/kernel-huge-6.1.16-x86_64-1.txz: Upgraded. a/kernel-modules-6.1.16-x86_64-1.txz: Upgraded. d/kernel-headers-6.1.16-x86-1.txz: Upgraded. k/kernel-source-6.1.16-noarch-1.txz: Upgraded. +SND_HDA_CTL_DEV_ID n l/imagemagick-7.1.1_2-x86_64-1.txz: Upgraded. l/mozilla-nss-3.89-x86_64-1.txz: Upgraded. l/openexr-3.1.6-x86_64-1.txz: Upgraded. n/libnftnl-1.2.5-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt. |
||
|
Patrick J Volkerding
|
821601d7cb |
Thu Mar 9 20:28:23 UTC 2023
a/openssl-solibs-3.0.8-x86_64-2.txz: Rebuilt. ap/dc3dd-7.3.0-x86_64-1.txz: Upgraded. ap/mariadb-10.11.2-x86_64-1.txz: Upgraded. d/cmake-3.25.3-x86_64-1.txz: Upgraded. l/imagemagick-7.1.1_1-x86_64-1.txz: Upgraded. l/libieee1284-0.2.11-x86_64-7.txz: Rebuilt. Rebuilt for python3. Thanks to Heinz Wiesinger. l/libplist-2.2.0-x86_64-4.txz: Rebuilt. Rebuilt for python3. Thanks to Heinz Wiesinger. l/pipewire-0.3.67-x86_64-1.txz: Upgraded. n/ModemManager-1.20.6-x86_64-1.txz: Upgraded. n/NetworkManager-1.42.4-x86_64-1.txz: Upgraded. n/openssl-3.0.8-x86_64-2.txz: Rebuilt. Fixed man pages. Thanks to marav. Add example for enabling the legacy algorithms to /etc/ssl/openssl.cnf. Thanks to ctrlaltca. n/openvpn-2.6.1-x86_64-1.txz: Upgraded. x/ibus-libpinyin-1.15.2-x86_64-1.txz: Upgraded. x/mesa-22.3.7-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
a240312484 |
Wed Mar 8 20:26:54 UTC 2023
Hey folks, just some more updates on the road to an eventual beta. :-)
At this point nothing remains linked with openssl-1.1.1 except for python2 and
modules, and vsftpd. I think nobody cares about trying to force python2 to use
openssl3... it's EOL but still a zombie, unfortunately. I have seen some
patches for vsftpd and intend to take a look at them. We've bumped PHP to 8.2
and just gone ahead and killed 8.0 and 8.1. Like 7.4, 8.0 is not compatible
with openssl3 and it doesn't seem worthwhile to try to patch it. And with 8.2
already out for several revisions, 8.1 does not seem particularly valuable.
If you make use of PHP you should be used to it being a moving target by now.
Enjoy, and let me know if anything isn't working right. Cheers!
a/aaa_libraries-15.1-x86_64-19.txz: Rebuilt.
Recompiled against openssl-3.0.8: libcups.so.2, libcurl.so.4.8.0,
libldap.so.2.0.200, libssh2.so.1.0.1.
a/cryptsetup-2.6.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
a/kmod-30-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
a/openssl-solibs-3.0.8-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
a/openssl11-solibs-1.1.1t-x86_64-1.txz: Added.
ap/cups-2.4.2-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
ap/hplip-3.20.5-x86_64-7.txz: Rebuilt.
Recompiled against openssl-3.0.8.
ap/lxc-4.0.12-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
ap/mariadb-10.6.12-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
ap/qpdf-11.3.0-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
ap/sudo-1.9.13p3-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/cargo-vendor-filterer-0.5.7-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/cvs-1.11.23-x86_64-9.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/git-2.39.2-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/perl-5.36.0-x86_64-5.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/python3-3.9.16-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/ruby-3.2.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/rust-1.66.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
d/scons-4.5.1-x86_64-1.txz: Upgraded.
kde/falkon-22.12.3-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
kde/kitinerary-22.12.3-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/M2Crypto-0.38.0-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/SDL2-2.26.4-x86_64-1.txz: Upgraded.
l/gst-plugins-bad-free-1.22.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/libarchive-3.6.2-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/libevent-2.1.12-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/libimobiledevice-20211124_2c6121d-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/libssh2-1.10.0-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/libvncserver-0.9.14-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/mlt-7.14.0-x86_64-1.txz: Upgraded.
l/neon-0.32.5-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/nodejs-19.7.0-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/opusfile-0.12-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/pipewire-0.3.66-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/pulseaudio-16.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/pycurl-7.44.1-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/qca-2.3.5-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
l/qt5-5.15.8_20230304_d8b881f0-x86_64-1.txz: Upgraded.
Compiled against openssl-3.0.8.
l/serf-1.3.9-x86_64-8.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/alpine-2.26-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/bind-9.18.12-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/curl-7.88.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/cyrus-sasl-2.1.28-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/dovecot-2.3.20-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/epic5-2.1.12-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/fetchmail-6.4.37-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/htdig-3.2.0b6-x86_64-9.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/httpd-2.4.56-x86_64-1.txz: Upgraded.
This update fixes two security issues:
HTTP Response Smuggling vulnerability via mod_proxy_uwsgi.
HTTP Request Smuggling attack via mod_rewrite and mod_proxy.
For more information, see:
https://downloads.apache.org/httpd/CHANGES_2.4.56
https://www.cve.org/CVERecord?id=CVE-2023-27522
https://www.cve.org/CVERecord?id=CVE-2023-25690
(* Security fix *)
NOTE: This package is compiled against openssl-3.0.8.
n/irssi-1.4.3-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/krb5-1.20.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/lftp-4.9.2-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/links-2.28-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/lynx-2.9.0dev.10-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/mutt-2.2.9-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/net-snmp-5.9.3-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/netatalk-3.1.14-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/nmap-7.93-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/ntp-4.2.8p15-x86_64-12.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/openldap-2.6.4-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/openssh-9.2p1-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/openssl-3.0.8-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
n/openssl11-1.1.1t-x86_64-1.txz: Added.
n/openvpn-2.6.0-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/php-8.2.3-x86_64-1.txz: Upgraded.
Compiled against openssl-3.0.8.
n/pidentd-3.0.19-x86_64-7.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/popa3d-1.0.3-x86_64-7.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/postfix-3.7.4-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/ppp-2.4.9-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/proftpd-1.3.8-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/rsync-3.2.7-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/s-nail-14.9.24-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/samba-4.18.0-x86_64-1.txz: Upgraded.
Build with the bundled Heimdal instead of the system MIT Kerberos.
Thanks again to rpenny.
n/slrn-1.0.3a-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/snownews-1.9-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/socat-1.7.4.4-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/stunnel-5.69-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/tcpdump-4.99.3-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/wget-1.21.3-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
n/wpa_supplicant-2.10-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/freerdp-2.10.0-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/gftp-2.9.1b-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/gkrellm-2.3.11-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/hexchat-2.16.1-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/sane-1.0.32-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/x3270-4.0ga14-x86_64-3.txz: Rebuilt.
Recompiled against openssl-3.0.8.
xap/xine-lib-1.2.13-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
y/bsd-games-2.17-x86_64-4.txz: Rebuilt.
Recompiled against openssl-3.0.8.
extra/php80/php80-8.0.28-x86_64-1.txz: Removed.
extra/php81/php81-8.1.16-x86_64-1.txz: Removed.
extra/rust-for-mozilla/rust-1.60.0-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
extra/sendmail/sendmail-8.17.1-x86_64-7.txz: Rebuilt.
Recompiled against openssl-3.0.8.
extra/sendmail/sendmail-cf-8.17.1-noarch-7.txz: Rebuilt.
testing/packages/rust-1.67.1-x86_64-2.txz: Rebuilt.
Recompiled against openssl-3.0.8.
testing/packages/samba-4.17.5-x86_64-2.txz: Removed.
|
||
|
Patrick J Volkerding
|
b0d01a9435 |
Mon Mar 6 02:21:57 UTC 2023
a/aaa_libraries-15.1-x86_64-18.txz: Rebuilt. Upgraded: libcap.so.2.67, libelf-0.189.so, libzstd.so.1.5.4, libcares.so.2.6.0, libglib-2.0.so.0.7400.6, libgmodule-2.0.so.0.7400.6, libgobject-2.0.so.0.7400.6, libgthread-2.0.so.0.7400.6, libtdb.so.1.4.8. Removed: libnsl-2.36.so, libboost*.so.1.80.0. Added: libnsl.so.3.0.0. a/grep-3.9-x86_64-1.txz: Upgraded. a/pam-1.5.2-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. a/quota-4.09-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. ap/linuxdoc-tools-0.9.82-x86_64-4.txz: Rebuilt. Recompiled against libnsl-2.0.0. ap/vorbis-tools-1.4.2-x86_64-4.txz: Rebuilt. Recompiled against libnsl-2.0.0. d/cvs-1.11.23-x86_64-8.txz: Rebuilt. Recompiled against libnsl-2.0.0. d/perl-5.36.0-x86_64-4.txz: Rebuilt. Recompiled against libnsl-2.0.0. d/python2-2.7.18-x86_64-6.txz: Rebuilt. Recompiled against libnsl-2.0.0. d/python3-3.9.16-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. d/subversion-1.14.2-x86_64-4.txz: Rebuilt. Recompiled against libnsl-2.0.0. kde/kio-5.103.0-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. kde/kopete-22.12.3-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. l/libasyncns-0.8-x86_64-6.txz: Rebuilt. Recompiled against libnsl-2.0.0. l/libnsl-2.0.0-x86_64-1.txz: Upgraded. Deprecated NIS+ code has been removed. Sorry for so many rebuilds due to (of all things) an NIS support library, but we had to get this out of the way eventually. Shared library .so-version bump. l/libnss_nis-3.1-x86_64-4.txz: Rebuilt. Recompiled against libnsl-2.0.0. l/loudmouth-1.5.4-x86_64-3.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/autofs-5.1.8-x86_64-3.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/epic5-2.1.12-x86_64-3.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/irssi-1.4.3-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/net-snmp-5.9.3-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/netatalk-3.1.14-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/ntp-4.2.8p15-x86_64-11.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/openldap-2.6.4-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/openssh-9.2p1-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/openvpn-2.6.0-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/postfix-3.7.4-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/ppp-2.4.9-x86_64-3.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/procmail-3.24-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/proftpd-1.3.8-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/rpcbind-1.2.6-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/socat-1.7.4.4-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/stunnel-5.69-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/tcp_wrappers-7.6-x86_64-7.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/tftp-hpa-5.2-x86_64-9.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/uucp-1.07-x86_64-6.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/vsftpd-3.0.5-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. n/yptools-4.2.3-x86_64-6.txz: Rebuilt. Recompiled against libnsl-2.0.0. Upgraded to ypserv-4.2. xap/gftp-2.9.1b-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. xap/pidgin-2.14.12-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. xap/rxvt-unicode-9.26-x86_64-5.txz: Rebuilt. Recompiled against libnsl-2.0.0. xap/xine-lib-1.2.13-x86_64-3.txz: Rebuilt. Recompiled against libnsl-2.0.0. xap/xine-ui-0.99.14-x86_64-2.txz: Rebuilt. Recompiled against libnsl-2.0.0. xap/xscreensaver-6.06-x86_64-2.txz: Rebuilt. |
||
|
Patrick J Volkerding
|
9019619a64 |
Sat Mar 4 19:55:53 UTC 2023
a/btrfs-progs-6.2.1-x86_64-1.txz: Upgraded. l/gst-plugins-bad-free-1.22.1-x86_64-1.txz: Upgraded. l/gst-plugins-base-1.22.1-x86_64-1.txz: Upgraded. l/gst-plugins-good-1.22.1-x86_64-1.txz: Upgraded. l/gst-plugins-libav-1.22.1-x86_64-1.txz: Upgraded. l/gstreamer-1.22.1-x86_64-1.txz: Upgraded. l/libhandy-1.8.2-x86_64-1.txz: Upgraded. n/stunnel-5.69-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
62185b52aa |
Sat Mar 4 02:33:58 UTC 2023
a/kernel-firmware-20230227_60971a6-noarch-1.txz: Upgraded. a/kernel-generic-6.1.15-x86_64-1.txz: Upgraded. a/kernel-huge-6.1.15-x86_64-1.txz: Upgraded. a/kernel-modules-6.1.15-x86_64-1.txz: Upgraded. ap/dash-0.5.12-x86_64-1.txz: Upgraded. d/kernel-headers-6.1.15-x86-1.txz: Upgraded. k/kernel-source-6.1.15-noarch-1.txz: Upgraded. kde/calligra-3.2.1-x86_64-25.txz: Rebuilt. Recompiled against Imath-3.1.7. kde/kimageformats-5.103.0-x86_64-2.txz: Rebuilt. Recompiled against Imath-3.1.7. kde/krita-5.1.5-x86_64-4.txz: Rebuilt. Recompiled against Imath-3.1.7. l/elfutils-0.189-x86_64-1.txz: Upgraded. l/gst-plugins-bad-free-1.22.0-x86_64-2.txz: Rebuilt. Recompiled against Imath-3.1.7. l/gtk+3-3.24.37-x86_64-1.txz: Upgraded. l/harfbuzz-7.1.0-x86_64-1.txz: Upgraded. l/imagemagick-7.1.0_62-x86_64-2.txz: Rebuilt. Recompiled against Imath-3.1.7. l/lcms2-2.15-x86_64-1.txz: Upgraded. l/libdiscid-0.6.4-x86_64-1.txz: Upgraded. l/openexr-3.1.5-x86_64-3.txz: Rebuilt. Recompiled against Imath-3.1.7. l/pango-1.50.14-x86_64-1.txz: Upgraded. n/libmbim-1.28.4-x86_64-1.txz: Upgraded. n/libqmi-1.32.4-x86_64-1.txz: Upgraded. xap/gimp-2.10.34-x86_64-2.txz: Rebuilt. Recompiled against Imath-3.1.7. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt. |
||
|
Patrick J Volkerding
|
69a7a568e1 |
Wed Mar 1 20:18:13 UTC 2023
a/btrfs-progs-6.2-x86_64-1.txz: Upgraded. l/libdiscid-0.6.3-x86_64-1.txz: Upgraded. xap/xsnow-3.7.1-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
8308cbb403 |
Sat Feb 25 20:33:03 UTC 2023
a/kernel-generic-6.1.14-x86_64-1.txz: Upgraded. a/kernel-huge-6.1.14-x86_64-1.txz: Upgraded. a/kernel-modules-6.1.14-x86_64-1.txz: Upgraded. d/kernel-headers-6.1.14-x86-1.txz: Upgraded. k/kernel-source-6.1.14-noarch-1.txz: Upgraded. l/v4l-utils-1.24.1-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt. |
||
|
Patrick J Volkerding
|
b2b4f6942b |
Thu Feb 23 20:47:06 UTC 2023
ap/sqlite-3.41.0-x86_64-1.txz: Upgraded. d/parallel-20230222-noarch-1.txz: Upgraded. kde/kidletime-5.103.0-x86_64-2.txz: Rebuilt. [PATCH] wayland: Guard wayland object destructors. Thanks to marav. l/glib2-2.74.6-x86_64-1.txz: Upgraded. l/nodejs-19.7.0-x86_64-1.txz: Upgraded. l/v4l-utils-1.24.0-x86_64-1.txz: Upgraded. n/NetworkManager-1.42.2-x86_64-1.txz: Upgraded. x/font-util-1.4.0-x86_64-1.txz: Upgraded. x/mesa-22.3.6-x86_64-1.txz: Upgraded. x/xbitmaps-1.1.3-x86_64-1.txz: Upgraded. x/xcursor-themes-1.0.7-noarch-1.txz: Upgraded. x/xf86-video-amdgpu-23.0.0-x86_64-1.txz: Upgraded. x/xorg-cf-files-1.0.8-x86_64-1.txz: Upgraded. xap/gimp-2.10.34-x86_64-1.txz: Upgraded. xap/gparted-1.5.0-x86_64-1.txz: Upgraded. xfce/thunar-4.18.4-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
c37e54c60e |
Tue Feb 21 19:15:06 UTC 2023
ap/vim-9.0.1337-x86_64-1.txz: Upgraded. OK, so the upstream runtime update didn't fix sh syntax highlighting, so we patched it. Thanks to marav. Also, we needed this version number. ;-) d/autoconf-archive-2023.02.20-noarch-1.txz: Upgraded. l/babl-0.1.100-x86_64-1.txz: Upgraded. l/gegl-0.4.42-x86_64-1.txz: Upgraded. x/ibus-1.5.28-x86_64-1.txz: Upgraded. x/ibus-libpinyin-1.15.1-x86_64-1.txz: Upgraded. xap/vim-gvim-9.0.1337-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
132e03bf32 |
Sun Feb 19 20:11:11 UTC 2023
ap/sudo-1.9.13p1-x86_64-1.txz: Upgraded. d/gdb-13.1-x86_64-1.txz: Upgraded. l/enchant-2.3.4-x86_64-1.txz: Upgraded. l/libnotify-0.8.2-x86_64-1.txz: Upgraded. y/nethack-3.6.7-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
88d937fb4e |
Wed Feb 15 03:05:40 UTC 2023
a/kernel-firmware-20230214_a253a37-noarch-1.txz: Upgraded.
a/kernel-generic-6.1.12-x86_64-1.txz: Upgraded.
a/kernel-huge-6.1.12-x86_64-1.txz: Upgraded.
a/kernel-modules-6.1.12-x86_64-1.txz: Upgraded.
d/kernel-headers-6.1.12-x86-1.txz: Upgraded.
d/rust-1.66.1-x86_64-1.txz: Upgraded.
k/kernel-source-6.1.12-noarch-1.txz: Upgraded.
kde/bluedevil-5.27.0-x86_64-1.txz: Upgraded.
kde/breeze-5.27.0-x86_64-1.txz: Upgraded.
kde/breeze-grub-5.27.0-x86_64-1.txz: Upgraded.
kde/breeze-gtk-5.27.0-x86_64-1.txz: Upgraded.
kde/drkonqi-5.27.0-x86_64-1.txz: Upgraded.
kde/kactivitymanagerd-5.27.0-x86_64-1.txz: Upgraded.
kde/kde-cli-tools-5.27.0-x86_64-1.txz: Upgraded.
kde/kde-gtk-config-5.27.0-x86_64-1.txz: Upgraded.
kde/kdecoration-5.27.0-x86_64-1.txz: Upgraded.
kde/kdeplasma-addons-5.27.0-x86_64-1.txz: Upgraded.
kde/kgamma5-5.27.0-x86_64-1.txz: Upgraded.
kde/khotkeys-5.27.0-x86_64-1.txz: Upgraded.
kde/kinfocenter-5.27.0-x86_64-1.txz: Upgraded.
kde/kmenuedit-5.27.0-x86_64-1.txz: Upgraded.
kde/kpipewire-5.27.0-x86_64-1.txz: Upgraded.
kde/kscreen-5.27.0-x86_64-1.txz: Upgraded.
kde/kscreenlocker-5.27.0-x86_64-1.txz: Upgraded.
kde/ksshaskpass-5.27.0-x86_64-1.txz: Upgraded.
kde/ksystemstats-5.27.0-x86_64-1.txz: Upgraded.
kde/kwallet-pam-5.27.0-x86_64-1.txz: Upgraded.
kde/kwayland-integration-5.27.0-x86_64-1.txz: Upgraded.
kde/kwin-5.27.0-x86_64-1.txz: Upgraded.
kde/kwrited-5.27.0-x86_64-1.txz: Upgraded.
kde/layer-shell-qt-5.27.0-x86_64-1.txz: Upgraded.
kde/libkscreen-5.27.0-x86_64-1.txz: Upgraded.
kde/libksysguard-5.27.0-x86_64-1.txz: Upgraded.
kde/milou-5.27.0-x86_64-1.txz: Upgraded.
kde/oxygen-5.27.0-x86_64-1.txz: Upgraded.
kde/oxygen-sounds-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-browser-integration-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-desktop-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-disks-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-firewall-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-integration-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-nm-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-pa-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-sdk-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-systemmonitor-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-vault-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-workspace-5.27.0-x86_64-1.txz: Upgraded.
kde/plasma-workspace-wallpapers-5.27.0-x86_64-1.txz: Upgraded.
kde/polkit-kde-agent-1-5.27.0-x86_64-1.txz: Upgraded.
kde/powerdevil-5.27.0-x86_64-1.txz: Upgraded.
kde/qqc2-breeze-style-5.27.0-x86_64-1.txz: Upgraded.
kde/sddm-kcm-5.27.0-x86_64-1.txz: Upgraded.
kde/systemsettings-5.27.0-x86_64-1.txz: Upgraded.
kde/xdg-desktop-portal-kde-5.27.0-x86_64-1.txz: Upgraded.
l/mozjs102-102.8.0esr-x86_64-1.txz: Upgraded.
n/php-7.4.33-x86_64-3.txz: Rebuilt.
This update fixes security issues:
Core: Password_verify() always return true with some hash.
Core: 1-byte array overrun in common path resolve code.
SAPI: DOS vulnerability when parsing multipart request body.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-0567
https://www.cve.org/CVERecord?id=CVE-2023-0568
https://www.cve.org/CVERecord?id=CVE-2023-0662
(* Security fix *)
xap/mozilla-firefox-110.0-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/110.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/
https://www.cve.org/CVERecord?id=CVE-2023-25728
https://www.cve.org/CVERecord?id=CVE-2023-25730
https://www.cve.org/CVERecord?id=CVE-2023-25743
https://www.cve.org/CVERecord?id=CVE-2023-0767
https://www.cve.org/CVERecord?id=CVE-2023-25735
https://www.cve.org/CVERecord?id=CVE-2023-25737
https://www.cve.org/CVERecord?id=CVE-2023-25738
https://www.cve.org/CVERecord?id=CVE-2023-25739
https://www.cve.org/CVERecord?id=CVE-2023-25729
https://www.cve.org/CVERecord?id=CVE-2023-25732
https://www.cve.org/CVERecord?id=CVE-2023-25734
https://www.cve.org/CVERecord?id=CVE-2023-25740
https://www.cve.org/CVERecord?id=CVE-2023-25731
https://www.cve.org/CVERecord?id=CVE-2023-25733
https://www.cve.org/CVERecord?id=CVE-2023-25736
https://www.cve.org/CVERecord?id=CVE-2023-25741
https://www.cve.org/CVERecord?id=CVE-2023-25742
https://www.cve.org/CVERecord?id=CVE-2023-25744
https://www.cve.org/CVERecord?id=CVE-2023-25745
(* Security fix *)
extra/php80/php80-8.0.28-x86_64-1.txz: Upgraded.
This update fixes security issues:
Core: Password_verify() always return true with some hash.
Core: 1-byte array overrun in common path resolve code.
SAPI: DOS vulnerability when parsing multipart request body.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-0567
https://www.cve.org/CVERecord?id=CVE-2023-0568
https://www.cve.org/CVERecord?id=CVE-2023-0662
(* Security fix *)
extra/php81/php81-8.1.16-x86_64-1.txz: Upgraded.
This update fixes security issues:
Core: Password_verify() always return true with some hash.
Core: 1-byte array overrun in common path resolve code.
SAPI: DOS vulnerability when parsing multipart request body.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-0567
https://www.cve.org/CVERecord?id=CVE-2023-0568
https://www.cve.org/CVERecord?id=CVE-2023-0662
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/rust-1.67.1-x86_64-1.txz: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|
||
|
Patrick J Volkerding
|
52ac228489 |
Mon Feb 13 20:03:36 UTC 2023
ap/man-pages-6.03-noarch-1.txz: Upgraded. l/atkmm-2.28.3-x86_64-1.txz: Upgraded. l/cairomm-1.14.4-x86_64-1.txz: Upgraded. l/glibmm-2.66.5-x86_64-1.txz: Upgraded. l/imagemagick-7.1.0_62-x86_64-1.txz: Upgraded. n/nghttp2-1.52.0-x86_64-1.txz: Upgraded. x/util-macros-1.20.0-noarch-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
f548ad5b53 |
Mon Feb 13 01:09:36 UTC 2023
d/vala-0.56.4-x86_64-1.txz: Upgraded. kde/attica-5.103.0-x86_64-1.txz: Upgraded. kde/baloo-5.103.0-x86_64-1.txz: Upgraded. kde/bluez-qt-5.103.0-x86_64-1.txz: Upgraded. kde/breeze-icons-5.103.0-noarch-1.txz: Upgraded. kde/extra-cmake-modules-5.103.0-x86_64-1.txz: Upgraded. kde/frameworkintegration-5.103.0-x86_64-1.txz: Upgraded. kde/kactivities-5.103.0-x86_64-1.txz: Upgraded. kde/kactivities-stats-5.103.0-x86_64-1.txz: Upgraded. kde/kapidox-5.103.0-x86_64-1.txz: Upgraded. kde/karchive-5.103.0-x86_64-1.txz: Upgraded. kde/kauth-5.103.0-x86_64-1.txz: Upgraded. kde/kbookmarks-5.103.0-x86_64-1.txz: Upgraded. kde/kcalendarcore-5.103.0-x86_64-1.txz: Upgraded. kde/kcmutils-5.103.0-x86_64-1.txz: Upgraded. kde/kcodecs-5.103.0-x86_64-1.txz: Upgraded. kde/kcompletion-5.103.0-x86_64-1.txz: Upgraded. kde/kconfig-5.103.0-x86_64-1.txz: Upgraded. kde/kconfigwidgets-5.103.0-x86_64-1.txz: Upgraded. kde/kcontacts-5.103.0-x86_64-1.txz: Upgraded. kde/kcoreaddons-5.103.0-x86_64-1.txz: Upgraded. kde/kcrash-5.103.0-x86_64-1.txz: Upgraded. kde/kdav-5.103.0-x86_64-1.txz: Upgraded. kde/kdbusaddons-5.103.0-x86_64-1.txz: Upgraded. kde/kdeclarative-5.103.0-x86_64-1.txz: Upgraded. kde/kded-5.103.0-x86_64-1.txz: Upgraded. kde/kdelibs4support-5.103.0-x86_64-1.txz: Upgraded. kde/kdesignerplugin-5.103.0-x86_64-1.txz: Upgraded. kde/kdesu-5.103.0-x86_64-1.txz: Upgraded. kde/kdewebkit-5.103.0-x86_64-1.txz: Upgraded. kde/kdnssd-5.103.0-x86_64-1.txz: Upgraded. kde/kdoctools-5.103.0-x86_64-1.txz: Upgraded. kde/kemoticons-5.103.0-x86_64-1.txz: Upgraded. kde/kfilemetadata-5.103.0-x86_64-1.txz: Upgraded. kde/kglobalaccel-5.103.0-x86_64-1.txz: Upgraded. kde/kguiaddons-5.103.0-x86_64-1.txz: Upgraded. kde/kholidays-5.103.0-x86_64-1.txz: Upgraded. kde/khtml-5.103.0-x86_64-1.txz: Upgraded. kde/ki18n-5.103.0-x86_64-1.txz: Upgraded. kde/kiconthemes-5.103.0-x86_64-1.txz: Upgraded. kde/kidletime-5.103.0-x86_64-1.txz: Upgraded. kde/kimageformats-5.103.0-x86_64-1.txz: Upgraded. kde/kinit-5.103.0-x86_64-1.txz: Upgraded. kde/kio-5.103.0-x86_64-1.txz: Upgraded. kde/kirigami2-5.103.0-x86_64-1.txz: Upgraded. kde/kitemmodels-5.103.0-x86_64-1.txz: Upgraded. kde/kitemviews-5.103.0-x86_64-1.txz: Upgraded. kde/kjobwidgets-5.103.0-x86_64-1.txz: Upgraded. kde/kjs-5.103.0-x86_64-1.txz: Upgraded. kde/kjsembed-5.103.0-x86_64-1.txz: Upgraded. kde/kmediaplayer-5.103.0-x86_64-1.txz: Upgraded. kde/knewstuff-5.103.0-x86_64-1.txz: Upgraded. kde/knotifications-5.103.0-x86_64-1.txz: Upgraded. kde/knotifyconfig-5.103.0-x86_64-1.txz: Upgraded. kde/kpackage-5.103.0-x86_64-1.txz: Upgraded. kde/kparts-5.103.0-x86_64-1.txz: Upgraded. kde/kpeople-5.103.0-x86_64-1.txz: Upgraded. kde/kplotting-5.103.0-x86_64-1.txz: Upgraded. kde/kpty-5.103.0-x86_64-1.txz: Upgraded. kde/kquickcharts-5.103.0-x86_64-1.txz: Upgraded. kde/kross-5.103.0-x86_64-1.txz: Upgraded. kde/krunner-5.103.0-x86_64-1.txz: Upgraded. kde/kservice-5.103.0-x86_64-1.txz: Upgraded. kde/ktexteditor-5.103.0-x86_64-1.txz: Upgraded. kde/ktextwidgets-5.103.0-x86_64-1.txz: Upgraded. kde/kunitconversion-5.103.0-x86_64-1.txz: Upgraded. kde/kwallet-5.103.0-x86_64-1.txz: Upgraded. kde/kwayland-5.103.0-x86_64-1.txz: Upgraded. kde/kwidgetsaddons-5.103.0-x86_64-1.txz: Upgraded. kde/kwindowsystem-5.103.0-x86_64-1.txz: Upgraded. kde/kxmlgui-5.103.0-x86_64-1.txz: Upgraded. kde/kxmlrpcclient-5.103.0-x86_64-1.txz: Upgraded. kde/modemmanager-qt-5.103.0-x86_64-1.txz: Upgraded. kde/networkmanager-qt-5.103.0-x86_64-1.txz: Upgraded. kde/oxygen-icons5-5.103.0-noarch-1.txz: Upgraded. kde/plasma-framework-5.103.0-x86_64-1.txz: Upgraded. kde/prison-5.103.0-x86_64-1.txz: Upgraded. kde/purpose-5.103.0-x86_64-1.txz: Upgraded. kde/qqc2-desktop-style-5.103.0-x86_64-1.txz: Upgraded. kde/solid-5.103.0-x86_64-1.txz: Upgraded. kde/sonnet-5.103.0-x86_64-1.txz: Upgraded. kde/syndication-5.103.0-x86_64-1.txz: Upgraded. kde/syntax-highlighting-5.103.0-x86_64-1.txz: Upgraded. kde/threadweaver-5.103.0-x86_64-1.txz: Upgraded. l/ffmpeg-5.1.2-x86_64-2.txz: Rebuilt. Recompiled against libvpx-1.13.0. l/gst-plugins-good-1.22.0-x86_64-2.txz: Rebuilt. Recompiled against libvpx-1.13.0. l/harfbuzz-7.0.0-x86_64-1.txz: Upgraded. l/qt5-5.15.8_20230208_cae1723a-x86_64-1.txz: Upgraded. Compiled against libvpx-1.13.0. l/vte-0.70.3-x86_64-1.txz: Upgraded. xap/xine-lib-1.2.13-x86_64-2.txz: Rebuilt. Recompiled against libvpx-1.13.0. |
||
|
Patrick J Volkerding
|
e85cad0d7f |
Sat Feb 11 20:36:32 UTC 2023
l/libvpx-1.13.0-x86_64-1.txz: Upgraded. l/mozilla-nss-3.88.1-x86_64-1.txz: Upgraded. xap/gnuplot-5.4.6-x86_64-1.txz: Upgraded. xfce/xfce4-notifyd-0.8.0-x86_64-1.txz: Upgraded. xfce/xfce4-settings-4.18.2-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
befd7aa261 |
Fri Feb 10 20:08:41 UTC 2023
a/cryptsetup-2.6.1-x86_64-1.txz: Upgraded. a/dialog-1.3_20230209-x86_64-1.txz: Upgraded. l/mozilla-nss-3.87.1-x86_64-1.txz: Upgraded. l/zstd-1.5.4-x86_64-1.txz: Upgraded. n/NetworkManager-1.42.0-x86_64-1.txz: Upgraded. n/gnutls-3.7.9-x86_64-1.txz: Upgraded. libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. Reported by Hubert Kario (#1050). Fix developed by Alexander Sosedkin. [GNUTLS-SA-2020-07-14, CVSS: medium] [CVE-2023-0361] For more information, see: https://www.cve.org/CVERecord?id=CVE-2023-0361 (* Security fix *) xfce/mousepad-0.6.0-x86_64-1.txz: Upgraded. xfce/xfce4-power-manager-4.18.1-x86_64-1.txz: Upgraded. xfce/xfce4-session-4.18.1-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
892f6fc495 |
Thu Feb 9 22:39:11 UTC 2023
a/dbus-1.14.6-x86_64-1.txz: Upgraded. a/kernel-generic-6.1.11-x86_64-1.txz: Upgraded. a/kernel-huge-6.1.11-x86_64-1.txz: Upgraded. a/kernel-modules-6.1.11-x86_64-1.txz: Upgraded. d/kernel-headers-6.1.11-x86-1.txz: Upgraded. k/kernel-source-6.1.11-noarch-1.txz: Upgraded. l/freetype-2.13.0-x86_64-1.txz: Upgraded. l/libjpeg-turbo-2.1.5.1-x86_64-1.txz: Upgraded. Fix an illegal instruction error on older x86 CPUs. l/lmdb-0.9.30-x86_64-1.txz: Upgraded. n/openldap-2.6.4-x86_64-1.txz: Upgraded. x/libdrm-2.4.115-x86_64-1.txz: Upgraded. x/mesa-22.3.5-x86_64-1.txz: Upgraded. xfce/libxfce4ui-4.18.2-x86_64-1.txz: Upgraded. xfce/xfce4-panel-4.18.2-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt. |
||
|
Patrick J Volkerding
|
dfd380d502 |
Sun Feb 5 20:39:36 UTC 2023
ap/htop-3.2.2-x86_64-1.txz: Upgraded. l/fuse3-3.13.1-x86_64-1.txz: Upgraded. l/pangomm-2.46.3-x86_64-1.txz: Upgraded. l/tevent-0.14.1-x86_64-1.txz: Upgraded. n/dnsmasq-2.89-x86_64-1.txz: Upgraded. x/libX11-1.8.4-x86_64-1.txz: Upgraded. x/xkeyboard-config-2.38-noarch-1.txz: Upgraded. x/xvidtune-1.0.4-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
201ae578a4 |
Fri Feb 3 20:04:33 UTC 2023
a/aaa_glibc-solibs-2.37-x86_64-2.txz: Rebuilt.
a/e2fsprogs-1.46.6-x86_64-1.txz: Upgraded.
a/hwdata-0.367-noarch-1.txz: Upgraded.
l/glibc-2.37-x86_64-2.txz: Rebuilt.
[PATCH] Account for grouping in printf width (bug 23432).
This issue could cause a overflow with sprintf in the corner case where an
application computes the size of buffer to be exactly enough to fit the
digits in question, but sprintf ends up writing a couple of extra bytes.
Thanks to marav for the heads-up.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-25139
(* Security fix *)
l/glibc-i18n-2.37-x86_64-2.txz: Rebuilt.
l/glibc-profile-2.37-x86_64-2.txz: Rebuilt.
l/libcap-2.67-x86_64-1.txz: Upgraded.
l/poppler-data-0.4.12-noarch-1.txz: Upgraded.
extra/php81/php81-8.1.15-x86_64-1.txz: Upgraded.
testing/packages/samba-4.17.5-x86_64-2.txz: Rebuilt.
Build with the bundled Heimdal instead of the system MIT Kerberos, since MIT
Kerberos has more issues when Samba is used as an AD DC. I'd appreciate any
feedback on the "Samba on Slackware 15" thread on LQ about how well this
works. Although it's not the sort of change I'd normally make in a -stable
release such as Slackware 15.0, in this case I'm considering it if it can
be done painlessly for any existing users... but I'll need to see some
reports about this. I'd like to note that yes, of course we saw the
"experimental" label in the configure flag we used to build Samba, but we
also saw another prominent Linux distribution go ahead and use it anyway. :)
And the Samba package built against MIT Kerberos cooked in the previous
-current development cycle for a couple of years without any objections.
Anyway, hopefully we'll get some testing from folks out there with networks
that use AD and go from there.
Thanks to Rowland Penny of the Samba team for clarifying this situation.
|
||
|
Patrick J Volkerding
|
9de77f5e56 |
Thu Feb 2 22:52:48 UTC 2023
a/aaa_glibc-solibs-2.37-x86_64-1.txz: Upgraded.
kde/akonadi-22.12.2-x86_64-1.txz: Upgraded.
kde/akonadi-calendar-22.12.2-x86_64-1.txz: Upgraded.
kde/akonadi-calendar-tools-22.12.2-x86_64-1.txz: Upgraded.
kde/akonadi-contacts-22.12.2-x86_64-1.txz: Upgraded.
kde/akonadi-import-wizard-22.12.2-x86_64-1.txz: Upgraded.
kde/akonadi-mime-22.12.2-x86_64-1.txz: Upgraded.
kde/akonadi-notes-22.12.2-x86_64-1.txz: Upgraded.
kde/akonadi-search-22.12.2-x86_64-1.txz: Upgraded.
kde/akonadiconsole-22.12.2-x86_64-1.txz: Upgraded.
kde/akregator-22.12.2-x86_64-1.txz: Upgraded.
kde/analitza-22.12.2-x86_64-1.txz: Upgraded.
kde/ark-22.12.2-x86_64-1.txz: Upgraded.
kde/artikulate-22.12.2-x86_64-1.txz: Upgraded.
kde/audiocd-kio-22.12.2-x86_64-1.txz: Upgraded.
kde/baloo-widgets-22.12.2-x86_64-1.txz: Upgraded.
kde/blinken-22.12.2-x86_64-1.txz: Upgraded.
kde/bomber-22.12.2-x86_64-1.txz: Upgraded.
kde/bovo-22.12.2-x86_64-1.txz: Upgraded.
kde/calendarsupport-22.12.2-x86_64-1.txz: Upgraded.
kde/cantor-22.12.2-x86_64-1.txz: Upgraded.
kde/cervisia-22.12.2-x86_64-1.txz: Upgraded.
kde/dolphin-22.12.2-x86_64-1.txz: Upgraded.
kde/dolphin-plugins-22.12.2-x86_64-1.txz: Upgraded.
kde/dragon-22.12.2-x86_64-1.txz: Upgraded.
kde/elisa-22.12.2-x86_64-1.txz: Upgraded.
kde/eventviews-22.12.2-x86_64-1.txz: Upgraded.
kde/falkon-22.12.2-x86_64-1.txz: Upgraded.
kde/ffmpegthumbs-22.12.2-x86_64-1.txz: Upgraded.
kde/filelight-22.12.2-x86_64-1.txz: Upgraded.
kde/granatier-22.12.2-x86_64-1.txz: Upgraded.
kde/grantlee-editor-22.12.2-x86_64-1.txz: Upgraded.
kde/grantleetheme-22.12.2-x86_64-1.txz: Upgraded.
kde/gwenview-22.12.2-x86_64-1.txz: Upgraded.
kde/incidenceeditor-22.12.2-x86_64-1.txz: Upgraded.
kde/itinerary-22.12.2-x86_64-1.txz: Upgraded.
kde/juk-22.12.2-x86_64-1.txz: Upgraded.
kde/k3b-22.12.2-x86_64-1.txz: Upgraded.
kde/kaddressbook-22.12.2-x86_64-1.txz: Upgraded.
kde/kalarm-22.12.2-x86_64-1.txz: Upgraded.
kde/kalendar-22.12.2-x86_64-1.txz: Upgraded.
kde/kalgebra-22.12.2-x86_64-1.txz: Upgraded.
kde/kalzium-22.12.2-x86_64-1.txz: Upgraded.
kde/kamera-22.12.2-x86_64-1.txz: Upgraded.
kde/kamoso-22.12.2-x86_64-1.txz: Upgraded.
kde/kanagram-22.12.2-x86_64-1.txz: Upgraded.
kde/kapman-22.12.2-x86_64-1.txz: Upgraded.
kde/kapptemplate-22.12.2-x86_64-1.txz: Upgraded.
kde/kate-22.12.2-x86_64-1.txz: Upgraded.
kde/katomic-22.12.2-x86_64-1.txz: Upgraded.
kde/kbackup-22.12.2-x86_64-1.txz: Upgraded.
kde/kblackbox-22.12.2-x86_64-1.txz: Upgraded.
kde/kblocks-22.12.2-x86_64-1.txz: Upgraded.
kde/kbounce-22.12.2-x86_64-1.txz: Upgraded.
kde/kbreakout-22.12.2-x86_64-1.txz: Upgraded.
kde/kbruch-22.12.2-x86_64-1.txz: Upgraded.
kde/kcachegrind-22.12.2-x86_64-1.txz: Upgraded.
kde/kcalc-22.12.2-x86_64-1.txz: Upgraded.
kde/kcalutils-22.12.2-x86_64-1.txz: Upgraded.
kde/kcharselect-22.12.2-x86_64-1.txz: Upgraded.
kde/kcolorchooser-22.12.2-x86_64-1.txz: Upgraded.
kde/kcron-22.12.2-x86_64-1.txz: Upgraded.
kde/kde-dev-scripts-22.12.2-x86_64-1.txz: Upgraded.
kde/kde-dev-utils-22.12.2-x86_64-1.txz: Upgraded.
kde/kdebugsettings-22.12.2-x86_64-1.txz: Upgraded.
kde/kdeconnect-kde-22.12.2-x86_64-1.txz: Upgraded.
kde/kdeedu-data-22.12.2-x86_64-1.txz: Upgraded.
kde/kdegraphics-mobipocket-22.12.2-x86_64-1.txz: Upgraded.
kde/kdegraphics-thumbnailers-22.12.2-x86_64-1.txz: Upgraded.
kde/kdenetwork-filesharing-22.12.2-x86_64-1.txz: Upgraded.
kde/kdenlive-22.12.2-x86_64-1.txz: Upgraded.
kde/kdepim-addons-22.12.2-x86_64-1.txz: Upgraded.
kde/kdepim-runtime-22.12.2-x86_64-1.txz: Upgraded.
kde/kdesdk-kio-22.12.2-x86_64-1.txz: Upgraded.
kde/kdesdk-thumbnailers-22.12.2-x86_64-1.txz: Upgraded.
kde/kdev-php-22.12.2-x86_64-1.txz: Upgraded.
kde/kdev-python-22.12.2-x86_64-1.txz: Upgraded.
kde/kdevelop-22.12.2-x86_64-1.txz: Upgraded.
kde/kdf-22.12.2-x86_64-1.txz: Upgraded.
kde/kdialog-22.12.2-x86_64-1.txz: Upgraded.
kde/kdiamond-22.12.2-x86_64-1.txz: Upgraded.
kde/keditbookmarks-22.12.2-x86_64-1.txz: Upgraded.
kde/kfind-22.12.2-x86_64-1.txz: Upgraded.
kde/kfloppy-22.12.2-x86_64-1.txz: Upgraded.
kde/kfourinline-22.12.2-x86_64-1.txz: Upgraded.
kde/kgeography-22.12.2-x86_64-1.txz: Upgraded.
kde/kget-22.12.2-x86_64-1.txz: Upgraded.
kde/kgoldrunner-22.12.2-x86_64-1.txz: Upgraded.
kde/kgpg-22.12.2-x86_64-1.txz: Upgraded.
kde/khangman-22.12.2-x86_64-1.txz: Upgraded.
kde/khelpcenter-22.12.2-x86_64-1.txz: Upgraded.
kde/kidentitymanagement-22.12.2-x86_64-1.txz: Upgraded.
kde/kig-22.12.2-x86_64-1.txz: Upgraded.
kde/kigo-22.12.2-x86_64-1.txz: Upgraded.
kde/killbots-22.12.2-x86_64-1.txz: Upgraded.
kde/kimagemapeditor-22.12.2-x86_64-1.txz: Upgraded.
kde/kimap-22.12.2-x86_64-1.txz: Upgraded.
kde/kio-extras-22.12.2-x86_64-1.txz: Upgraded.
kde/kio-gdrive-22.12.2-x86_64-1.txz: Upgraded.
kde/kio-zeroconf-22.12.2-x86_64-1.txz: Upgraded.
kde/kipi-plugins-22.12.2-x86_64-1.txz: Upgraded.
kde/kirigami-gallery-22.12.2-x86_64-1.txz: Upgraded.
kde/kiriki-22.12.2-x86_64-1.txz: Upgraded.
kde/kiten-22.12.2-x86_64-1.txz: Upgraded.
kde/kitinerary-22.12.2-x86_64-1.txz: Upgraded.
kde/kjumpingcube-22.12.2-x86_64-1.txz: Upgraded.
kde/kldap-22.12.2-x86_64-1.txz: Upgraded.
kde/kleopatra-22.12.2-x86_64-1.txz: Upgraded.
kde/klickety-22.12.2-x86_64-1.txz: Upgraded.
kde/klines-22.12.2-x86_64-1.txz: Upgraded.
kde/kmag-22.12.2-x86_64-1.txz: Upgraded.
kde/kmahjongg-22.12.2-x86_64-1.txz: Upgraded.
kde/kmail-22.12.2-x86_64-1.txz: Upgraded.
kde/kmail-account-wizard-22.12.2-x86_64-1.txz: Upgraded.
kde/kmailtransport-22.12.2-x86_64-1.txz: Upgraded.
kde/kmbox-22.12.2-x86_64-1.txz: Upgraded.
kde/kmime-22.12.2-x86_64-1.txz: Upgraded.
kde/kmines-22.12.2-x86_64-1.txz: Upgraded.
kde/kmix-22.12.2-x86_64-1.txz: Upgraded.
kde/kmousetool-22.12.2-x86_64-1.txz: Upgraded.
kde/kmouth-22.12.2-x86_64-1.txz: Upgraded.
kde/kmplot-22.12.2-x86_64-1.txz: Upgraded.
kde/knavalbattle-22.12.2-x86_64-1.txz: Upgraded.
kde/knetwalk-22.12.2-x86_64-1.txz: Upgraded.
kde/knights-22.12.2-x86_64-1.txz: Upgraded.
kde/knotes-22.12.2-x86_64-1.txz: Upgraded.
kde/kolf-22.12.2-x86_64-1.txz: Upgraded.
kde/kollision-22.12.2-x86_64-1.txz: Upgraded.
kde/kolourpaint-22.12.2-x86_64-1.txz: Upgraded.
kde/kompare-22.12.2-x86_64-1.txz: Upgraded.
kde/konqueror-22.12.2-x86_64-1.txz: Upgraded.
kde/konquest-22.12.2-x86_64-1.txz: Upgraded.
kde/konsole-22.12.2-x86_64-1.txz: Upgraded.
kde/kontact-22.12.2-x86_64-1.txz: Upgraded.
kde/kontactinterface-22.12.2-x86_64-1.txz: Upgraded.
kde/kontrast-22.12.2-x86_64-1.txz: Upgraded.
kde/konversation-22.12.2-x86_64-1.txz: Upgraded.
kde/kopeninghours-22.12.2-x86_64-1.txz: Upgraded.
kde/kopete-22.12.2-x86_64-1.txz: Upgraded.
kde/korganizer-22.12.2-x86_64-1.txz: Upgraded.
kde/kosmindoormap-22.12.2-x86_64-1.txz: Upgraded.
kde/kpat-22.12.2-x86_64-1.txz: Upgraded.
kde/kpimtextedit-22.12.2-x86_64-1.txz: Upgraded.
kde/kpkpass-22.12.2-x86_64-1.txz: Upgraded.
kde/kpmcore-22.12.2-x86_64-1.txz: Upgraded.
kde/kpublictransport-22.12.2-x86_64-1.txz: Upgraded.
kde/kqtquickcharts-22.12.2-x86_64-1.txz: Upgraded.
kde/krdc-22.12.2-x86_64-1.txz: Upgraded.
kde/kreversi-22.12.2-x86_64-1.txz: Upgraded.
kde/krfb-22.12.2-x86_64-1.txz: Upgraded.
kde/kross-interpreters-22.12.2-x86_64-1.txz: Upgraded.
kde/kruler-22.12.2-x86_64-1.txz: Upgraded.
kde/ksanecore-22.12.2-x86_64-1.txz: Upgraded.
kde/kshisen-22.12.2-x86_64-1.txz: Upgraded.
kde/ksirk-22.12.2-x86_64-1.txz: Upgraded.
kde/ksmtp-22.12.2-x86_64-1.txz: Upgraded.
kde/ksnakeduel-22.12.2-x86_64-1.txz: Upgraded.
kde/kspaceduel-22.12.2-x86_64-1.txz: Upgraded.
kde/ksquares-22.12.2-x86_64-1.txz: Upgraded.
kde/ksudoku-22.12.2-x86_64-1.txz: Upgraded.
kde/ksystemlog-22.12.2-x86_64-1.txz: Upgraded.
kde/kteatime-22.12.2-x86_64-1.txz: Upgraded.
kde/ktimer-22.12.2-x86_64-1.txz: Upgraded.
kde/ktnef-22.12.2-x86_64-1.txz: Upgraded.
kde/ktorrent-22.12.2-x86_64-1.txz: Upgraded.
kde/ktouch-22.12.2-x86_64-1.txz: Upgraded.
kde/kturtle-22.12.2-x86_64-1.txz: Upgraded.
kde/kubrick-22.12.2-x86_64-1.txz: Upgraded.
kde/kwalletmanager-22.12.2-x86_64-1.txz: Upgraded.
kde/kwave-22.12.2-x86_64-1.txz: Upgraded.
kde/kwordquiz-22.12.2-x86_64-1.txz: Upgraded.
kde/libgravatar-22.12.2-x86_64-1.txz: Upgraded.
kde/libkcddb-22.12.2-x86_64-1.txz: Upgraded.
kde/libkcompactdisc-22.12.2-x86_64-1.txz: Upgraded.
kde/libkdcraw-22.12.2-x86_64-1.txz: Upgraded.
kde/libkdegames-22.12.2-x86_64-1.txz: Upgraded.
kde/libkdepim-22.12.2-x86_64-1.txz: Upgraded.
kde/libkeduvocdocument-22.12.2-x86_64-1.txz: Upgraded.
kde/libkexiv2-22.12.2-x86_64-1.txz: Upgraded.
kde/libkgapi-22.12.2-x86_64-1.txz: Upgraded.
kde/libkipi-22.12.2-x86_64-1.txz: Upgraded.
kde/libkleo-22.12.2-x86_64-1.txz: Upgraded.
kde/libkmahjongg-22.12.2-x86_64-1.txz: Upgraded.
kde/libkomparediff2-22.12.2-x86_64-1.txz: Upgraded.
kde/libksane-22.12.2-x86_64-1.txz: Upgraded.
kde/libksieve-22.12.2-x86_64-1.txz: Upgraded.
kde/libktorrent-22.12.2-x86_64-1.txz: Upgraded.
kde/lokalize-22.12.2-x86_64-1.txz: Upgraded.
kde/lskat-22.12.2-x86_64-1.txz: Upgraded.
kde/mailcommon-22.12.2-x86_64-1.txz: Upgraded.
kde/mailimporter-22.12.2-x86_64-1.txz: Upgraded.
kde/marble-22.12.2-x86_64-1.txz: Upgraded.
kde/markdownpart-22.12.2-x86_64-1.txz: Upgraded.
kde/mbox-importer-22.12.2-x86_64-1.txz: Upgraded.
kde/messagelib-22.12.2-x86_64-1.txz: Upgraded.
kde/minuet-22.12.2-x86_64-1.txz: Upgraded.
kde/okular-22.12.2-x86_64-1.txz: Upgraded.
kde/palapeli-22.12.2-x86_64-1.txz: Upgraded.
kde/parley-22.12.2-x86_64-1.txz: Upgraded.
kde/partitionmanager-22.12.2-x86_64-1.txz: Upgraded.
kde/picmi-22.12.2-x86_64-1.txz: Upgraded.
kde/pim-data-exporter-22.12.2-x86_64-1.txz: Upgraded.
kde/pim-sieve-editor-22.12.2-x86_64-1.txz: Upgraded.
kde/pimcommon-22.12.2-x86_64-1.txz: Upgraded.
kde/poxml-22.12.2-x86_64-1.txz: Upgraded.
kde/print-manager-22.12.2-x86_64-1.txz: Upgraded.
kde/rocs-22.12.2-x86_64-1.txz: Upgraded.
kde/skanlite-22.12.2-x86_64-1.txz: Upgraded.
kde/skanpage-22.12.2-x86_64-1.txz: Upgraded.
kde/spectacle-22.12.2-x86_64-1.txz: Upgraded.
kde/svgpart-22.12.2-x86_64-1.txz: Upgraded.
kde/sweeper-22.12.2-x86_64-1.txz: Upgraded.
kde/umbrello-22.12.2-x86_64-1.txz: Upgraded.
kde/yakuake-22.12.2-x86_64-1.txz: Upgraded.
kde/zanshin-22.12.2-x86_64-1.txz: Upgraded.
l/glibc-2.37-x86_64-1.txz: Upgraded.
l/glibc-i18n-2.37-x86_64-1.txz: Upgraded.
l/glibc-profile-2.37-x86_64-1.txz: Upgraded.
l/nodejs-19.6.0-x86_64-1.txz: Upgraded.
l/poppler-23.02.0-x86_64-1.txz: Upgraded.
l/xapian-core-1.4.22-x86_64-1.txz: Upgraded.
n/openssh-9.2p1-x86_64-1.txz: Upgraded.
This release contains fixes for two security problems and a memory safety
problem. The memory safety problem is not believed to be exploitable, but
upstream reports most network-reachable memory faults as security bugs.
For more information, see:
https://www.openssh.com/releasenotes.html#9.2
(* Security fix *)
|
||
|
Patrick J Volkerding
|
a130ab0fdf |
Wed Feb 1 22:27:31 UTC 2023
a/kernel-firmware-20230125_5c11a37-noarch-1.txz: Upgraded.
a/kernel-generic-6.1.9-x86_64-1.txz: Upgraded.
a/kernel-huge-6.1.9-x86_64-1.txz: Upgraded.
a/kernel-modules-6.1.9-x86_64-1.txz: Upgraded.
d/kernel-headers-6.1.9-x86-1.txz: Upgraded.
k/kernel-source-6.1.9-noarch-1.txz: Upgraded.
l/apr-1.7.2-x86_64-1.txz: Upgraded.
This update fixes security issues:
Integer Overflow or Wraparound vulnerability in apr_encode functions of
Apache Portable Runtime (APR) allows an attacker to write beyond bounds
of a buffer. (CVE-2022-24963)
Restore fix for out-of-bounds array dereference in apr_time_exp*() functions.
(This issue was addressed as CVE-2017-12613 in APR 1.6.3 and
later 1.6.x releases, but was missing in 1.7.0.) (CVE-2021-35940)
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-24963
https://www.cve.org/CVERecord?id=CVE-2021-35940
https://www.cve.org/CVERecord?id=CVE-2017-12613
(* Security fix *)
l/apr-util-1.6.3-x86_64-1.txz: Upgraded.
This update fixes a security issue:
Integer Overflow or Wraparound vulnerability in apr_base64 functions
of Apache Portable Runtime Utility (APR-util) allows an attacker to
write beyond bounds of a buffer. (CVE-2022-25147)
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-25147
(* Security fix *)
l/libhandy-1.8.1-x86_64-1.txz: Upgraded.
l/libjpeg-turbo-2.1.5-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-102.7.1-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/102.7.1/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-04/
https://www.cve.org/CVERecord?id=CVE-2023-0430
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|
||
|
Patrick J Volkerding
|
45d1307fae |
Wed Feb 1 05:29:53 UTC 2023
d/perl-5.36.0-x86_64-3.txz: Rebuilt. Upgraded: IO-Socket-SSL-2.081, Moo-2.005005, Path-Tiny-0.144, Sub-Quote-2.006008, Template-Toolkit-3.101, URI-5.17. Added: JSON-4.10 (needed to build Samba with --bundled-libraries=heimdal). kde/kstars-3.6.3-x86_64-1.txz: Upgraded. l/gjs-1.74.1-x86_64-1.txz: Upgraded. Compiled against mozjs102-102.7.0esr. l/mozjs102-102.7.0esr-x86_64-1.txz: Added. This is required by gjs-1.74.1 and polkit-122. l/mozjs78-78.15.0esr-x86_64-1.txz: Removed. l/polkit-122-x86_64-1.txz: Upgraded. Compiled against mozjs102-102.7.0esr. |
||
|
Patrick J Volkerding
|
6fa6b077d5 |
Mon Jan 30 21:38:07 UTC 2023
ap/sysstat-12.7.2-x86_64-1.txz: Upgraded.
kde/kimageformats-5.102.0-x86_64-2.txz: Rebuilt.
Recompiled against LibRaw-0.21.1.
kde/krita-5.1.5-x86_64-3.txz: Rebuilt.
Recompiled against LibRaw-0.21.1.
kde/kstars-3.6.2-x86_64-3.txz: Rebuilt.
Recompiled against LibRaw-0.21.1.
kde/libkdcraw-22.12.1-x86_64-2.txz: Rebuilt.
Recompiled against LibRaw-0.21.1.
l/LibRaw-0.21.1-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/dconf-editor-43.0-x86_64-1.txz: Upgraded.
l/gegl-0.4.40-x86_64-3.txz: Rebuilt.
Recompiled against LibRaw-0.21.1.
l/imagemagick-7.1.0_60-x86_64-1.txz: Upgraded.
Compiled against LibRaw-0.21.1.
l/libhandy-1.8.0-x86_64-1.txz: Added.
This is required by dconf-editor-43.0.
xap/geeqie-2.0.1-x86_64-2.txz: Rebuilt.
Recompiled against LibRaw-0.21.1.
xap/mozilla-firefox-109.0.1-x86_64-1.txz: Upgraded.
For more information, see:
https://www.mozilla.org/en-US/firefox/109.0.1/releasenotes/
|
||
|
Patrick J Volkerding
|
92998aedbd |
Tue Jan 24 03:09:01 UTC 2023
l/gst-plugins-bad-free-1.22.0-x86_64-1.txz: Upgraded. l/gst-plugins-base-1.22.0-x86_64-1.txz: Upgraded. l/gst-plugins-good-1.22.0-x86_64-1.txz: Upgraded. l/gst-plugins-libav-1.22.0-x86_64-1.txz: Upgraded. l/gstreamer-1.22.0-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
0dc754d878 |
Fri Jan 20 23:58:24 UTC 2023
ap/mc-4.8.29-x86_64-1.txz: Upgraded.
d/cmake-3.25.2-x86_64-1.txz: Upgraded.
l/editorconfig-core-c-0.12.6-x86_64-1.txz: Upgraded.
l/glib2-2.74.5-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.36-x86_64-1.txz: Upgraded.
l/talloc-2.4.0-x86_64-1.txz: Upgraded.
l/tevent-0.14.0-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-102.7.0-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/102.7.0/releasenotes/
https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird102.7
(* Security fix *)
xap/seamonkey-2.53.15-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.seamonkey-project.org/releases/seamonkey2.53.15
(* Security fix *)
|
||
|
Patrick J Volkerding
|
9e8fdb324d |
Sun Jan 15 01:02:36 UTC 2023
a/kernel-generic-6.1.6-x86_64-1.txz: Upgraded. a/kernel-huge-6.1.6-x86_64-1.txz: Upgraded. a/kernel-modules-6.1.6-x86_64-1.txz: Upgraded. d/kernel-headers-6.1.6-x86-1.txz: Upgraded. k/kernel-source-6.1.6-noarch-1.txz: Upgraded. kde/attica-5.102.0-x86_64-1.txz: Upgraded. kde/baloo-5.102.0-x86_64-1.txz: Upgraded. kde/bluez-qt-5.102.0-x86_64-1.txz: Upgraded. kde/breeze-icons-5.102.0-noarch-1.txz: Upgraded. kde/extra-cmake-modules-5.102.0-x86_64-1.txz: Upgraded. kde/frameworkintegration-5.102.0-x86_64-1.txz: Upgraded. kde/kactivities-5.102.0-x86_64-1.txz: Upgraded. kde/kactivities-stats-5.102.0-x86_64-1.txz: Upgraded. kde/kapidox-5.102.0-x86_64-1.txz: Upgraded. kde/karchive-5.102.0-x86_64-1.txz: Upgraded. kde/kauth-5.102.0-x86_64-1.txz: Upgraded. kde/kbookmarks-5.102.0-x86_64-1.txz: Upgraded. kde/kcalendarcore-5.102.0-x86_64-1.txz: Upgraded. kde/kcmutils-5.102.0-x86_64-1.txz: Upgraded. kde/kcodecs-5.102.0-x86_64-1.txz: Upgraded. kde/kcompletion-5.102.0-x86_64-1.txz: Upgraded. kde/kconfig-5.102.0-x86_64-1.txz: Upgraded. kde/kconfigwidgets-5.102.0-x86_64-1.txz: Upgraded. kde/kcontacts-5.102.0-x86_64-1.txz: Upgraded. kde/kcoreaddons-5.102.0-x86_64-1.txz: Upgraded. kde/kcrash-5.102.0-x86_64-1.txz: Upgraded. kde/kdav-5.102.0-x86_64-1.txz: Upgraded. kde/kdbusaddons-5.102.0-x86_64-1.txz: Upgraded. kde/kdeclarative-5.102.0-x86_64-1.txz: Upgraded. kde/kded-5.102.0-x86_64-1.txz: Upgraded. kde/kdelibs4support-5.102.0-x86_64-1.txz: Upgraded. kde/kdesignerplugin-5.102.0-x86_64-1.txz: Upgraded. kde/kdesu-5.102.0-x86_64-1.txz: Upgraded. kde/kdewebkit-5.102.0-x86_64-1.txz: Upgraded. kde/kdnssd-5.102.0-x86_64-1.txz: Upgraded. kde/kdoctools-5.102.0-x86_64-1.txz: Upgraded. kde/kemoticons-5.102.0-x86_64-1.txz: Upgraded. kde/kfilemetadata-5.102.0-x86_64-1.txz: Upgraded. kde/kglobalaccel-5.102.0-x86_64-1.txz: Upgraded. kde/kguiaddons-5.102.0-x86_64-1.txz: Upgraded. kde/kholidays-5.102.0-x86_64-1.txz: Upgraded. kde/khtml-5.102.0-x86_64-1.txz: Upgraded. kde/ki18n-5.102.0-x86_64-1.txz: Upgraded. kde/kiconthemes-5.102.0-x86_64-1.txz: Upgraded. kde/kidletime-5.102.0-x86_64-1.txz: Upgraded. kde/kimageformats-5.102.0-x86_64-1.txz: Upgraded. kde/kinit-5.102.0-x86_64-1.txz: Upgraded. kde/kio-5.102.0-x86_64-1.txz: Upgraded. kde/kirigami2-5.102.0-x86_64-1.txz: Upgraded. kde/kitemmodels-5.102.0-x86_64-1.txz: Upgraded. kde/kitemviews-5.102.0-x86_64-1.txz: Upgraded. kde/kjobwidgets-5.102.0-x86_64-1.txz: Upgraded. kde/kjs-5.102.0-x86_64-1.txz: Upgraded. kde/kjsembed-5.102.0-x86_64-1.txz: Upgraded. kde/kmediaplayer-5.102.0-x86_64-1.txz: Upgraded. kde/knewstuff-5.102.0-x86_64-1.txz: Upgraded. kde/knotifications-5.102.0-x86_64-1.txz: Upgraded. kde/knotifyconfig-5.102.0-x86_64-1.txz: Upgraded. kde/kpackage-5.102.0-x86_64-1.txz: Upgraded. kde/kparts-5.102.0-x86_64-1.txz: Upgraded. kde/kpeople-5.102.0-x86_64-1.txz: Upgraded. kde/kplotting-5.102.0-x86_64-1.txz: Upgraded. kde/kpty-5.102.0-x86_64-1.txz: Upgraded. kde/kquickcharts-5.102.0-x86_64-1.txz: Upgraded. kde/kross-5.102.0-x86_64-1.txz: Upgraded. kde/krunner-5.102.0-x86_64-1.txz: Upgraded. kde/kservice-5.102.0-x86_64-1.txz: Upgraded. kde/ktexteditor-5.102.0-x86_64-1.txz: Upgraded. kde/ktextwidgets-5.102.0-x86_64-1.txz: Upgraded. kde/kunitconversion-5.102.0-x86_64-1.txz: Upgraded. kde/kwallet-5.102.0-x86_64-1.txz: Upgraded. kde/kwayland-5.102.0-x86_64-1.txz: Upgraded. kde/kwidgetsaddons-5.102.0-x86_64-1.txz: Upgraded. kde/kwindowsystem-5.102.0-x86_64-1.txz: Upgraded. kde/kxmlgui-5.102.0-x86_64-1.txz: Upgraded. kde/kxmlrpcclient-5.102.0-x86_64-1.txz: Upgraded. kde/modemmanager-qt-5.102.0-x86_64-1.txz: Upgraded. kde/networkmanager-qt-5.102.0-x86_64-1.txz: Upgraded. kde/oxygen-icons5-5.102.0-noarch-1.txz: Upgraded. kde/plasma-framework-5.102.0-x86_64-1.txz: Upgraded. kde/prison-5.102.0-x86_64-1.txz: Upgraded. kde/purpose-5.102.0-x86_64-1.txz: Upgraded. kde/qqc2-desktop-style-5.102.0-x86_64-1.txz: Upgraded. kde/solid-5.102.0-x86_64-1.txz: Upgraded. kde/sonnet-5.102.0-x86_64-1.txz: Upgraded. kde/syndication-5.102.0-x86_64-1.txz: Upgraded. kde/syntax-highlighting-5.102.0-x86_64-1.txz: Upgraded. kde/threadweaver-5.102.0-x86_64-1.txz: Upgraded. l/qt5-5.15.8_20230110_755033ba-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt. |
||
|
Patrick J Volkerding
|
34e6259d47 |
Sat Jan 7 01:50:00 UTC 2023
a/btrfs-progs-6.1.2-x86_64-1.txz: Upgraded.
l/mozilla-nss-3.87-x86_64-1.txz: Upgraded.
Fixed memory corruption in NSS via DER-encoded DSA and RSA-PSS signatures.
For more information, see:
https://www.mozilla.org/en-US/security/advisories/mfsa2021-51/
https://www.cve.org/CVERecord?id=CVE-2021-43527
(* Security fix *)
l/nodejs-19.4.0-x86_64-1.txz: Upgraded.
n/php-7.4.33-x86_64-2.txz: Rebuilt.
This update fixes a security issue:
PDO::quote() may return unquoted string.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-31631
(* Security fix *)
extra/php80/php80-8.0.27-x86_64-1.txz: Upgraded.
This update fixes a security issue:
PDO::quote() may return unquoted string.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-31631
(* Security fix *)
extra/php81/php81-8.1.14-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
PDO::quote() may return unquoted string.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-31631
(* Security fix *)
|
||
|
Patrick J Volkerding
|
b3409a9b21 |
Wed Jan 4 02:18:08 UTC 2023
ap/lsof-4.96.5-x86_64-1.txz: Upgraded.
ap/sqlite-3.40.1-x86_64-1.txz: Upgraded.
kde/bluedevil-5.26.5-x86_64-1.txz: Upgraded.
kde/breeze-5.26.5-x86_64-1.txz: Upgraded.
kde/breeze-grub-5.26.5-x86_64-1.txz: Upgraded.
kde/breeze-gtk-5.26.5-x86_64-1.txz: Upgraded.
kde/digikam-7.9.0-x86_64-2.txz: Rebuilt.
Recompiled against opencv-4.7.0.
kde/drkonqi-5.26.5-x86_64-1.txz: Upgraded.
kde/kactivitymanagerd-5.26.5-x86_64-1.txz: Upgraded.
kde/kde-cli-tools-5.26.5-x86_64-1.txz: Upgraded.
kde/kde-gtk-config-5.26.5-x86_64-1.txz: Upgraded.
kde/kdecoration-5.26.5-x86_64-1.txz: Upgraded.
kde/kdeplasma-addons-5.26.5-x86_64-1.txz: Upgraded.
kde/kgamma5-5.26.5-x86_64-1.txz: Upgraded.
kde/khotkeys-5.26.5-x86_64-1.txz: Upgraded.
kde/kinfocenter-5.26.5-x86_64-1.txz: Upgraded.
kde/kmenuedit-5.26.5-x86_64-1.txz: Upgraded.
kde/kpipewire-5.26.5-x86_64-1.txz: Upgraded.
kde/kscreen-5.26.5-x86_64-1.txz: Upgraded.
kde/kscreenlocker-5.26.5-x86_64-1.txz: Upgraded.
kde/ksshaskpass-5.26.5-x86_64-1.txz: Upgraded.
kde/ksystemstats-5.26.5-x86_64-1.txz: Upgraded.
kde/kwallet-pam-5.26.5-x86_64-1.txz: Upgraded.
kde/kwayland-integration-5.26.5-x86_64-1.txz: Upgraded.
kde/kwin-5.26.5-x86_64-1.txz: Upgraded.
kde/kwrited-5.26.5-x86_64-1.txz: Upgraded.
kde/layer-shell-qt-5.26.5-x86_64-1.txz: Upgraded.
kde/libkscreen-5.26.5-x86_64-1.txz: Upgraded.
kde/libksysguard-5.26.5-x86_64-1.txz: Upgraded.
kde/milou-5.26.5-x86_64-1.txz: Upgraded.
kde/oxygen-5.26.5-x86_64-1.txz: Upgraded.
kde/oxygen-sounds-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-browser-integration-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-desktop-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-disks-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-firewall-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-integration-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-nm-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-pa-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-sdk-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-systemmonitor-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-vault-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-workspace-5.26.5-x86_64-1.txz: Upgraded.
kde/plasma-workspace-wallpapers-5.26.5-x86_64-1.txz: Upgraded.
kde/polkit-kde-agent-1-5.26.5-x86_64-1.txz: Upgraded.
kde/powerdevil-5.26.5-x86_64-1.txz: Upgraded.
kde/qqc2-breeze-style-5.26.5-x86_64-1.txz: Upgraded.
kde/sddm-kcm-5.26.5-x86_64-1.txz: Upgraded.
kde/systemsettings-5.26.5-x86_64-1.txz: Upgraded.
kde/xdg-desktop-portal-kde-5.26.5-x86_64-1.txz: Upgraded.
l/SDL2-2.26.2-x86_64-1.txz: Upgraded.
l/gst-plugins-bad-free-1.20.5-x86_64-2.txz: Rebuilt.
Recompiled against opencv-4.7.0.
l/imagemagick-7.1.0_57-x86_64-1.txz: Upgraded.
l/libpcap-1.10.2-x86_64-1.txz: Upgraded.
l/libpsl-0.21.2-x86_64-1.txz: Upgraded.
l/librevenge-0.0.5-x86_64-1.txz: Upgraded.
l/libsndfile-1.2.0-x86_64-1.txz: Upgraded.
l/libtiff-4.4.0-x86_64-2.txz: Rebuilt.
Patched various security bugs.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-2056
https://www.cve.org/CVERecord?id=CVE-2022-2057
https://www.cve.org/CVERecord?id=CVE-2022-2058
https://www.cve.org/CVERecord?id=CVE-2022-3970
https://www.cve.org/CVERecord?id=CVE-2022-34526
(* Security fix *)
l/netpbm-11.01.00-x86_64-1.txz: Upgraded.
l/opencv-4.7.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/poppler-23.01.0-x86_64-1.txz: Upgraded.
n/getmail-6.18.11-x86_64-1.txz: Upgraded.
n/tcpdump-4.99.2-x86_64-1.txz: Upgraded.
n/whois-5.5.15-x86_64-1.txz: Upgraded.
Updated the .bd, .nz and .tv TLD servers.
Added the .llyw.cymru, .gov.scot and .gov.wales SLD servers.
Updated the .ac.uk and .gov.uk SLD servers.
Recursion has been enabled for whois.nic.tv.
Updated the list of new gTLDs with four generic TLDs assigned in October 2013
which were missing due to a bug.
Removed 4 new gTLDs which are no longer active.
Added the Georgian translation, contributed by Temuri Doghonadze.
Updated the Finnish translation, contributed by Lauri Nurmi.
xap/pidgin-2.14.12-x86_64-1.txz: Upgraded.
xap/rxvt-unicode-9.26-x86_64-4.txz: Rebuilt.
When the "background" extension was loaded, an attacker able to control the
data written to the terminal would be able to execute arbitrary code as the
terminal's user. Thanks to David Leadbeater and Ben Collver.
For more information, see:
https://www.openwall.com/lists/oss-security/2022/12/05/1
https://www.cve.org/CVERecord?id=CVE-2022-4170
(* Security fix *)
|
||
|
Patrick J Volkerding
|
5d902bcdde |
Sun Dec 25 23:21:25 UTC 2022
Hey folks, Merry Christmas and Hanukkah Sameach! Figured it was about time to get some kind of kernel activity going again, but it most definitely belongs in /testing for now. I've been trying to shape this up for weeks, but there are still issues, and maybe someone out there can help. The biggest problem is that the 32-bit kernels crash on boot. Initially there's some sort of Intel ME failure (this is on a Thinkpad X1E). If those modules are blacklisted, then the kernel will go on to crash loading the snd_hda_intel module. The other issue is that I've got a 4K panel in this machine, and have always appended the kernel option video=1920x1080@60 to put the console in HD instead, and then loaded a Terminus console font to make the text even larger. With these kernels, that option is completely ignored. I've tried some other syntax I've seen online to no avail. And when the Terminus font is loaded the text gets *even smaller* for some reason. So be careful of these kernels (especially the 32-bit ones), but I welcome any hints about what's going on here or if there are config changes that might get this working properly. Is anyone out there running a 6.x kernel on bare metal 32-bit x86? Cheers! ap/vim-9.0.1091-x86_64-1.txz: Upgraded. d/meson-1.0.0-x86_64-1.txz: Upgraded. d/ruby-3.2.0-x86_64-1.txz: Upgraded. Shared library .so-version bump. d/subversion-1.14.2-x86_64-3.txz: Rebuilt. Recompiled against ruby-3.2.0. l/glib2-2.74.4-x86_64-1.txz: Upgraded. l/netpbm-11.00.03-x86_64-1.txz: Upgraded. l/rubygem-asciidoctor-2.0.18-x86_64-1.txz: Upgraded. Compiled against ruby-3.2.0. n/epic5-2.1.12-x86_64-2.txz: Rebuilt. Recompiled against ruby-3.2.0. x/marisa-0.2.6-x86_64-6.txz: Rebuilt. Recompiled against ruby-3.2.0. xap/vim-gvim-9.0.1091-x86_64-1.txz: Upgraded. testing/packages/linux-6.1.x/kernel-generic-6.1.1-x86_64-1.txz: Added. testing/packages/linux-6.1.x/kernel-headers-6.1.1-x86-1.txz: Added. testing/packages/linux-6.1.x/kernel-huge-6.1.1-x86_64-1.txz: Added. testing/packages/linux-6.1.x/kernel-modules-6.1.1-x86_64-1.txz: Added. testing/packages/linux-6.1.x/kernel-source-6.1.1-noarch-1.txz: Added. |
||
|
Patrick J Volkerding
|
a1d6f79ce8 |
Tue Dec 20 20:40:18 UTC 2022
d/p2c-2.02-x86_64-1.txz: Upgraded.
kde/dolphin-22.12.0-x86_64-2.txz: Rebuilt.
[PATCH] Revert "portalize drag urls"
Thanks to marav.
l/gst-plugins-bad-free-1.20.5-x86_64-1.txz: Upgraded.
l/gst-plugins-base-1.20.5-x86_64-1.txz: Upgraded.
l/gst-plugins-good-1.20.5-x86_64-1.txz: Upgraded.
l/gst-plugins-libav-1.20.5-x86_64-1.txz: Upgraded.
l/gstreamer-1.20.5-x86_64-1.txz: Upgraded.
l/libqalculate-4.5.0-x86_64-1.txz: Upgraded.
l/libvncserver-0.9.14-x86_64-1.txz: Upgraded.
l/sdl-1.2.15-x86_64-14.txz: Rebuilt.
This update fixes a heap overflow problem in video/SDL_pixels.c in SDL.
By crafting a malicious .BMP file, an attacker can cause the application
using this library to crash, denial of service, or code execution.
Thanks to marav for the heads-up.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2021-33657
(* Security fix *)
n/gnupg2-2.2.41-x86_64-1.txz: Upgraded.
n/libksba-1.6.3-x86_64-1.txz: Upgraded.
Fix another integer overflow in the CRL's signature parser.
(* Security fix *)
x/libSM-1.2.4-x86_64-1.txz: Upgraded.
x/xcb-util-0.4.1-x86_64-1.txz: Upgraded.
x/xdriinfo-1.0.7-x86_64-1.txz: Upgraded.
|
||
|
Patrick J Volkerding
|
5795941801 |
Sun Dec 18 20:58:52 UTC 2022
l/imagemagick-7.1.0_55-x86_64-2.txz: Rebuilt. Rebuilt to fix dng.so module that was mistakenly compiled against the new LibRaw that we don't yet include. |
||
|
Patrick J Volkerding
|
ddd9fe141f |
Sat Dec 17 21:14:11 UTC 2022
a/xz-5.4.0-x86_64-1.txz: Upgraded.
l/harfbuzz-6.0.0-x86_64-1.txz: Upgraded.
l/libmpc-1.3.1-x86_64-1.txz: Upgraded.
n/NetworkManager-1.40.8-x86_64-1.txz: Upgraded.
n/samba-4.17.4-x86_64-1.txz: Upgraded.
This update fixes security issues:
This is the Samba CVE for the Windows Kerberos RC4-HMAC Elevation of
Privilege Vulnerability disclosed by Microsoft on Nov 8 2022.
A Samba Active Directory DC will issue weak rc4-hmac session keys for
use between modern clients and servers despite all modern Kerberos
implementations supporting the aes256-cts-hmac-sha1-96 cipher.
On Samba Active Directory DCs and members
'kerberos encryption types = legacy'
would force rc4-hmac as a client even if the server supports
aes128-cts-hmac-sha1-96 and/or aes256-cts-hmac-sha1-96.
This is the Samba CVE for the Windows Kerberos Elevation of Privilege
Vulnerability disclosed by Microsoft on Nov 8 2022.
A service account with the special constrained delegation permission
could forge a more powerful ticket than the one it was presented with.
The "RC4" protection of the NetLogon Secure channel uses the same
algorithms as rc4-hmac cryptography in Kerberos, and so must also be
assumed to be weak.
Note that there are several important behavior changes included in this
release, which may cause compatibility problems interacting with system
still expecting the former behavior.
Please read the advisories of CVE-2022-37966, CVE-2022-37967 and
CVE-2022-38023 carefully!
For more information, see:
https://www.samba.org/samba/security/CVE-2022-37966.html
https://www.samba.org/samba/security/CVE-2022-37967.html
https://www.samba.org/samba/security/CVE-2022-38023.html
https://www.cve.org/CVERecord?id=CVE-2022-37966
https://www.cve.org/CVERecord?id=CVE-2022-37967
https://www.cve.org/CVERecord?id=CVE-2022-38023
(* Security fix *)
xfce/exo-4.18.0-x86_64-1.txz: Upgraded.
xfce/garcon-4.18.0-x86_64-1.txz: Upgraded.
xfce/libxfce4ui-4.18.0-x86_64-1.txz: Upgraded.
xfce/libxfce4util-4.18.0-x86_64-1.txz: Upgraded.
xfce/thunar-4.18.0-x86_64-1.txz: Upgraded.
xfce/thunar-volman-4.18.0-x86_64-1.txz: Upgraded.
xfce/tumbler-4.18.0-x86_64-1.txz: Upgraded.
xfce/xfce4-appfinder-4.18.0-x86_64-1.txz: Upgraded.
xfce/xfce4-dev-tools-4.18.0-x86_64-1.txz: Upgraded.
xfce/xfce4-notifyd-0.6.5-x86_64-1.txz: Upgraded.
xfce/xfce4-panel-4.18.0-x86_64-1.txz: Upgraded.
xfce/xfce4-power-manager-4.18.0-x86_64-1.txz: Upgraded.
xfce/xfce4-session-4.18.0-x86_64-1.txz: Upgraded.
xfce/xfce4-settings-4.18.0-x86_64-1.txz: Upgraded.
xfce/xfce4-weather-plugin-0.11.0-x86_64-1.txz: Upgraded.
xfce/xfconf-4.18.0-x86_64-1.txz: Upgraded.
xfce/xfdesktop-4.18.0-x86_64-1.txz: Upgraded.
xfce/xfwm4-4.18.0-x86_64-1.txz: Upgraded.
|
||
|
Patrick J Volkerding
|
5eda6aabe1 |
Sat Dec 17 02:40:06 UTC 2022
a/aaa_libraries-15.1-x86_64-14.txz: Rebuilt.
Upgraded: liblzma.so.5.2.9, libpcre2-8.so.0.11.2, libglib-2.0.so.0.7400.3,
libgmodule-2.0.so.0.7400.3, libpng16.so.16.39.0.
Removed: libFLAC++.so.6.3.0, libFLAC.so.8.3.0, libicudata.so.71.1,
libicui18n.so.71.1, libicuio.so.71.1, libicutest.so.71.1, libicutu.so.71.1,
libicuuc.so.71.1, libjasper.so.6.0.0.
Added: libboost_atomic.so.1.80.0, libboost_chrono.so.1.80.0,
libboost_container.so.1.80.0, libboost_context.so.1.80.0,
libboost_contract.so.1.80.0, libboost_coroutine.so.1.80.0,
libboost_date_time.so.1.80.0, libboost_fiber.so.1.80.0,
libboost_filesystem.so.1.80.0, libboost_graph.so.1.80.0,
libboost_iostreams.so.1.80.0, libboost_json.so.1.80.0,
libboost_locale.so.1.80.0, libboost_log.so.1.80.0,
libboost_log_setup.so.1.80.0, libboost_math_c99.so.1.80.0,
libboost_math_c99f.so.1.80.0, libboost_math_c99l.so.1.80.0,
libboost_math_tr1.so.1.80.0, libboost_math_tr1f.so.1.80.0,
libboost_math_tr1l.so.1.80.0, libboost_nowide.so.1.80.0,
libboost_prg_exec_monitor.so.1.80.0, libboost_program_options.so.1.80.0,
libboost_python27.so.1.80.0, libboost_python39.so.1.80.0,
libboost_random.so.1.80.0, libboost_regex.so.1.80.0,
libboost_serialization.so.1.80.0, libboost_stacktrace_addr2line.so.1.80.0,
libboost_stacktrace_basic.so.1.80.0, libboost_stacktrace_noop.so.1.80.0,
libboost_system.so.1.80.0, libboost_thread.so.1.80.0,
libboost_timer.so.1.80.0, libboost_type_erasure.so.1.80.0,
libboost_unit_test_framework.so.1.80.0, libboost_wave.so.1.80.0,
libboost_wserialization.so.1.80.0.
ap/pamixer-1.5-x86_64-5.txz: Rebuilt.
Recompiled against boost-1.81.0.
kde/kig-22.12.0-x86_64-2.txz: Rebuilt.
Recompiled against boost-1.81.0.
kde/kopeninghours-22.12.0-x86_64-2.txz: Rebuilt.
Recompiled against boost-1.81.0.
kde/krita-5.1.4-x86_64-2.txz: Rebuilt.
Recompiled against boost-1.81.0.
l/boost-1.81.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/cryfs-0.10.3-x86_64-7.txz: Rebuilt.
Recompiled against boost-1.81.0.
x/fcitx5-chinese-addons-5.0.16-x86_64-2.txz: Rebuilt.
Recompiled against boost-1.81.0.
x/libime-1.0.16-x86_64-2.txz: Rebuilt.
Recompiled against boost-1.81.0.
xap/mozilla-firefox-108.0.1-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/108.0.1/releasenotes/
xfce/elementary-xfce-0.17-x86_64-1.txz: Upgraded.
|
||
|
Patrick J Volkerding
|
fc0ff5a5d7 |
Wed Dec 14 21:19:34 UTC 2022
a/bash-5.2.015-x86_64-1.txz: Upgraded.
a/tcsh-6.24.06-x86_64-1.txz: Upgraded.
ap/inxi-3.3.24_1-noarch-1.txz: Upgraded.
ap/nano-7.1-x86_64-1.txz: Upgraded.
d/git-2.39.0-x86_64-1.txz: Upgraded.
d/rust-1.65.0-x86_64-1.txz: Upgraded.
d/strace-6.1-x86_64-1.txz: Upgraded.
kde/krita-5.1.4-x86_64-1.txz: Upgraded.
l/imagemagick-7.1.0_54-x86_64-1.txz: Upgraded.
l/nodejs-19.3.0-x86_64-1.txz: Upgraded.
l/pcre2-10.42-x86_64-1.txz: Upgraded.
n/iproute2-6.1.0-x86_64-1.txz: Upgraded.
x/makedepend-1.0.8-x86_64-1.txz: Upgraded.
x/xhost-1.0.9-x86_64-1.txz: Upgraded.
x/xorg-server-21.1.5-x86_64-1.txz: Upgraded.
This release fixes 6 recently reported security vulnerabilities in
various extensions.
For more information, see:
https://lists.x.org/archives/xorg-announce/2022-December/003302.html
https://www.cve.org/CVERecord?id=CVE-2022-46340
https://www.cve.org/CVERecord?id=CVE-2022-46341
https://www.cve.org/CVERecord?id=CVE-2022-46342
https://www.cve.org/CVERecord?id=CVE-2022-46343
https://www.cve.org/CVERecord?id=CVE-2022-46344
https://www.cve.org/CVERecord?id=CVE-2022-4283
(* Security fix *)
x/xorg-server-xephyr-21.1.5-x86_64-1.txz: Upgraded.
x/xorg-server-xnest-21.1.5-x86_64-1.txz: Upgraded.
x/xorg-server-xvfb-21.1.5-x86_64-1.txz: Upgraded.
x/xorg-server-xwayland-22.1.6-x86_64-1.txz: Upgraded.
This release fixes 6 recently reported security vulnerabilities in
various extensions.
For more information, see:
https://lists.x.org/archives/xorg-announce/2022-December/003302.html
https://www.cve.org/CVERecord?id=CVE-2022-46340
https://www.cve.org/CVERecord?id=CVE-2022-46341
https://www.cve.org/CVERecord?id=CVE-2022-46342
https://www.cve.org/CVERecord?id=CVE-2022-46343
https://www.cve.org/CVERecord?id=CVE-2022-46344
https://www.cve.org/CVERecord?id=CVE-2022-4283
(* Security fix *)
xap/mozilla-thunderbird-102.6.0-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/security/advisories/mfsa2022-53/
https://www.cve.org/CVERecord?id=CVE-2022-46880
https://www.cve.org/CVERecord?id=CVE-2022-46872
https://www.cve.org/CVERecord?id=CVE-2022-46881
https://www.cve.org/CVERecord?id=CVE-2022-46874
https://www.cve.org/CVERecord?id=CVE-2022-46875
https://www.cve.org/CVERecord?id=CVE-2022-46882
https://www.cve.org/CVERecord?id=CVE-2022-46878
(* Security fix *)
xap/xscreensaver-6.06-x86_64-1.txz: Upgraded.
testing/packages/mozilla-firefox-108.0-x86_64-1.txz: Upgraded.
Starting this out in /testing for now, since I've been trying for 2 days to
get it to compile on 32-bit with no luck. It ends up failing with a bunch of
errors like this:
ld.lld: error: undefined hidden symbol: tabs_4d51_TabsStore_sync
Any help getting this to build on 32-bit would be greatly appreciated.
I've tried most of ponce's bag of tricks already. :-)
|
||
|
Patrick J Volkerding
|
ac5857bb77 |
Sat Dec 10 19:28:02 UTC 2022
kde/attica-5.101.0-x86_64-1.txz: Upgraded. kde/baloo-5.101.0-x86_64-1.txz: Upgraded. kde/bluez-qt-5.101.0-x86_64-1.txz: Upgraded. kde/breeze-icons-5.101.0-noarch-1.txz: Upgraded. kde/extra-cmake-modules-5.101.0-x86_64-1.txz: Upgraded. kde/frameworkintegration-5.101.0-x86_64-1.txz: Upgraded. kde/kactivities-5.101.0-x86_64-1.txz: Upgraded. kde/kactivities-stats-5.101.0-x86_64-1.txz: Upgraded. kde/kapidox-5.101.0-x86_64-1.txz: Upgraded. kde/karchive-5.101.0-x86_64-1.txz: Upgraded. kde/kauth-5.101.0-x86_64-1.txz: Upgraded. kde/kbookmarks-5.101.0-x86_64-1.txz: Upgraded. kde/kcalendarcore-5.101.0-x86_64-1.txz: Upgraded. kde/kcmutils-5.101.0-x86_64-1.txz: Upgraded. kde/kcodecs-5.101.0-x86_64-1.txz: Upgraded. kde/kcompletion-5.101.0-x86_64-1.txz: Upgraded. kde/kconfig-5.101.0-x86_64-1.txz: Upgraded. kde/kconfigwidgets-5.101.0-x86_64-1.txz: Upgraded. kde/kcontacts-5.101.0-x86_64-1.txz: Upgraded. kde/kcoreaddons-5.101.0-x86_64-1.txz: Upgraded. kde/kcrash-5.101.0-x86_64-1.txz: Upgraded. kde/kdav-5.101.0-x86_64-1.txz: Upgraded. kde/kdbusaddons-5.101.0-x86_64-1.txz: Upgraded. kde/kdeclarative-5.101.0-x86_64-1.txz: Upgraded. kde/kded-5.101.0-x86_64-1.txz: Upgraded. kde/kdelibs4support-5.101.0-x86_64-1.txz: Upgraded. kde/kdesignerplugin-5.101.0-x86_64-1.txz: Upgraded. kde/kdesu-5.101.0-x86_64-1.txz: Upgraded. kde/kdewebkit-5.101.0-x86_64-1.txz: Upgraded. kde/kdnssd-5.101.0-x86_64-1.txz: Upgraded. kde/kdoctools-5.101.0-x86_64-1.txz: Upgraded. kde/kemoticons-5.101.0-x86_64-1.txz: Upgraded. kde/kfilemetadata-5.101.0-x86_64-1.txz: Upgraded. kde/kglobalaccel-5.101.0-x86_64-1.txz: Upgraded. kde/kguiaddons-5.101.0-x86_64-1.txz: Upgraded. kde/kholidays-5.101.0-x86_64-1.txz: Upgraded. kde/khtml-5.101.0-x86_64-1.txz: Upgraded. kde/ki18n-5.101.0-x86_64-1.txz: Upgraded. kde/kiconthemes-5.101.0-x86_64-1.txz: Upgraded. kde/kidletime-5.101.0-x86_64-1.txz: Upgraded. kde/kimageformats-5.101.0-x86_64-1.txz: Upgraded. kde/kinit-5.101.0-x86_64-1.txz: Upgraded. kde/kio-5.101.0-x86_64-1.txz: Upgraded. kde/kirigami2-5.101.0-x86_64-1.txz: Upgraded. kde/kitemmodels-5.101.0-x86_64-1.txz: Upgraded. kde/kitemviews-5.101.0-x86_64-1.txz: Upgraded. kde/kjobwidgets-5.101.0-x86_64-1.txz: Upgraded. kde/kjs-5.101.0-x86_64-1.txz: Upgraded. kde/kjsembed-5.101.0-x86_64-1.txz: Upgraded. kde/kmediaplayer-5.101.0-x86_64-1.txz: Upgraded. kde/knewstuff-5.101.0-x86_64-1.txz: Upgraded. kde/knotifications-5.101.0-x86_64-1.txz: Upgraded. kde/knotifyconfig-5.101.0-x86_64-1.txz: Upgraded. kde/kpackage-5.101.0-x86_64-1.txz: Upgraded. kde/kparts-5.101.0-x86_64-1.txz: Upgraded. kde/kpeople-5.101.0-x86_64-1.txz: Upgraded. kde/kplotting-5.101.0-x86_64-1.txz: Upgraded. kde/kpty-5.101.0-x86_64-1.txz: Upgraded. kde/kquickcharts-5.101.0-x86_64-1.txz: Upgraded. kde/kross-5.101.0-x86_64-1.txz: Upgraded. kde/krunner-5.101.0-x86_64-1.txz: Upgraded. kde/kservice-5.101.0-x86_64-1.txz: Upgraded. kde/ktexteditor-5.101.0-x86_64-1.txz: Upgraded. kde/ktextwidgets-5.101.0-x86_64-1.txz: Upgraded. kde/kunitconversion-5.101.0-x86_64-1.txz: Upgraded. kde/kwallet-5.101.0-x86_64-1.txz: Upgraded. kde/kwayland-5.101.0-x86_64-1.txz: Upgraded. kde/kwidgetsaddons-5.101.0-x86_64-1.txz: Upgraded. kde/kwindowsystem-5.101.0-x86_64-1.txz: Upgraded. kde/kxmlgui-5.101.0-x86_64-1.txz: Upgraded. kde/kxmlrpcclient-5.101.0-x86_64-1.txz: Upgraded. kde/modemmanager-qt-5.101.0-x86_64-1.txz: Upgraded. kde/networkmanager-qt-5.101.0-x86_64-1.txz: Upgraded. kde/oxygen-icons5-5.101.0-noarch-1.txz: Upgraded. kde/plasma-framework-5.101.0-x86_64-1.txz: Upgraded. kde/prison-5.101.0-x86_64-1.txz: Upgraded. kde/purpose-5.101.0-x86_64-1.txz: Upgraded. kde/qqc2-desktop-style-5.101.0-x86_64-1.txz: Upgraded. kde/solid-5.101.0-x86_64-1.txz: Upgraded. kde/sonnet-5.101.0-x86_64-1.txz: Upgraded. kde/syndication-5.101.0-x86_64-1.txz: Upgraded. kde/syntax-highlighting-5.101.0-x86_64-1.txz: Upgraded. kde/threadweaver-5.101.0-x86_64-1.txz: Upgraded. x/xf86-video-vesa-2.6.0-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
9969c19137 |
Fri Dec 9 19:43:46 UTC 2022
a/usbutils-015-x86_64-1.txz: Upgraded.
l/adwaita-icon-theme-43-noarch-1.txz: Upgraded.
l/gtk+3-3.24.35-x86_64-1.txz: Upgraded.
l/libarchive-3.6.2-x86_64-1.txz: Upgraded.
This is a bugfix and security release.
Relevant bugfixes:
rar5 reader: fix possible garbled output with bsdtar -O (#1745)
mtree reader: support reading mtree files with tabs (#1783)
Security fixes:
various small fixes for issues found by CodeQL
(* Security fix *)
l/mozilla-nss-3.86-x86_64-1.txz: Upgraded.
l/pipewire-0.3.62-x86_64-1.txz: Upgraded.
x/OpenCC-1.1.6-x86_64-1.txz: Upgraded.
|
||
|
Patrick J Volkerding
|
b98f1614c2 |
Wed Dec 7 18:48:07 UTC 2022
d/cargo-vendor-filterer-0.5.7-x86_64-1.txz: Added.
Thanks to Heinz Wiesinger.
d/cbindgen-0.24.3-x86_64-1.txz: Added.
d/python3-3.9.16-x86_64-1.txz: Upgraded.
This update fixes security issues:
gh-98739: Updated bundled libexpat to 2.5.0 to fix CVE-2022-43680
(heap use-after-free).
gh-98433: The IDNA codec decoder used on DNS hostnames by socket or asyncio
related name resolution functions no longer involves a quadratic algorithm
to fix CVE-2022-45061. This prevents a potential CPU denial of service if an
out-of-spec excessive length hostname involving bidirectional characters were
decoded. Some protocols such as urllib http 3xx redirects potentially allow
for an attacker to supply such a name.
gh-100001: python -m http.server no longer allows terminal control characters
sent within a garbage request to be printed to the stderr server log.
gh-87604: Avoid publishing list of active per-interpreter audit hooks via the
gc module.
gh-97514: On Linux the multiprocessing module returns to using filesystem
backed unix domain sockets for communication with the forkserver process
instead of the Linux abstract socket namespace. Only code that chooses to use
the "forkserver" start method is affected. This prevents Linux CVE-2022-42919
(potential privilege escalation) as abstract sockets have no permissions and
could allow any user on the system in the same network namespace (often the
whole system) to inject code into the multiprocessing forkserver process.
Filesystem based socket permissions restrict this to the forkserver process
user as was the default in Python 3.8 and earlier.
gh-98517: Port XKCP's fix for the buffer overflows in SHA-3 to fix
CVE-2022-37454.
gh-68966: The deprecated mailcap module now refuses to inject unsafe text
(filenames, MIME types, parameters) into shell commands to address
CVE-2015-20107. Instead of using such text, it will warn and act as if a
match was not found (or for test commands, as if the test failed).
For more information, see:
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html
https://www.cve.org/CVERecord?id=CVE-2022-43680
https://www.cve.org/CVERecord?id=CVE-2022-45061
https://www.cve.org/CVERecord?id=CVE-2022-42919
https://www.cve.org/CVERecord?id=CVE-2022-37454
https://www.cve.org/CVERecord?id=CVE-2015-20107
(* Security fix *)
d/rust-bindgen-0.63.0-x86_64-1.txz: Added.
Thanks to Heinz Wiesinger.
l/pcre2-10.41-x86_64-1.txz: Upgraded.
n/proftpd-1.3.8-x86_64-1.txz: Upgraded.
x/mesa-22.3.0-x86_64-1.txz: Upgraded.
Compiled with Rusticl support. Thanks to Heinz Wiesinger.
x/xdm-1.1.14-x86_64-1.txz: Upgraded.
|
||
|
Patrick J Volkerding
|
6229c1ff54 |
Mon Dec 5 02:40:12 UTC 2022
x/OpenCC-1.1.5-x86_64-1.txz: Upgraded. x/libXScrnSaver-1.2.4-x86_64-1.txz: Upgraded. x/libXcomposite-0.4.6-x86_64-1.txz: Upgraded. x/libXdamage-1.1.6-x86_64-1.txz: Upgraded. x/libXres-1.2.2-x86_64-1.txz: Upgraded. x/libXv-1.0.12-x86_64-1.txz: Upgraded. x/libXxf86dga-1.1.6-x86_64-1.txz: Upgraded. x/lndir-1.0.4-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
668a929acf |
Fri Dec 2 06:58:38 UTC 2022
a/gptfdisk-1.0.9-x86_64-2.txz: Rebuilt. Applied upstream patches to fix a crash and partition corruption caused by the popt upgrade: [PATCH] Updated guid.cc to deal with minor change in libuuid [PATCH] Fix failure & crash of sgdisk when compiled with latest popt [PATCH] Fix NULL dereference when duplicating string argument Thanks to jloco. d/cmake-3.25.1-x86_64-1.txz: Upgraded. kde/calligra-3.2.1-x86_64-24.txz: Rebuilt. Recompiled against poppler-22.12.0. kde/cantor-22.08.3-x86_64-2.txz: Rebuilt. Recompiled against poppler-22.12.0. kde/kfilemetadata-5.100.0-x86_64-2.txz: Rebuilt. Recompiled against poppler-22.12.0. kde/kile-2.9.93-x86_64-22.txz: Rebuilt. Recompiled against poppler-22.12.0. kde/kitinerary-22.08.3-x86_64-2.txz: Rebuilt. Recompiled against poppler-22.12.0. kde/krita-5.1.3-x86_64-2.txz: Rebuilt. Recompiled against poppler-22.12.0. kde/okular-22.08.3-x86_64-2.txz: Rebuilt. Recompiled against poppler-22.12.0. l/glib2-2.74.3-x86_64-1.txz: Upgraded. l/poppler-22.12.0-x86_64-1.txz: Upgraded. Shared library .so-version bump. n/NetworkManager-1.40.6-x86_64-1.txz: Upgraded. xap/NetworkManager-openvpn-1.10.2-x86_64-1.txz: Upgraded. xap/libnma-1.10.4-x86_64-1.txz: Upgraded. xap/network-manager-applet-1.30.0-x86_64-1.txz: Upgraded. |
||
|
Patrick J Volkerding
|
31e27c00fb |
Tue Nov 29 20:56:03 UTC 2022
a/cryptsetup-2.6.0-x86_64-1.txz: Upgraded.
a/kernel-firmware-20221123_cdf9499-noarch-1.txz: Upgraded.
kde/bluedevil-5.26.4-x86_64-1.txz: Upgraded.
kde/breeze-5.26.4-x86_64-1.txz: Upgraded.
kde/breeze-grub-5.26.4-x86_64-1.txz: Upgraded.
kde/breeze-gtk-5.26.4-x86_64-1.txz: Upgraded.
kde/drkonqi-5.26.4-x86_64-1.txz: Upgraded.
kde/kactivitymanagerd-5.26.4-x86_64-1.txz: Upgraded.
kde/kde-cli-tools-5.26.4-x86_64-1.txz: Upgraded.
kde/kde-gtk-config-5.26.4-x86_64-1.txz: Upgraded.
kde/kdecoration-5.26.4-x86_64-1.txz: Upgraded.
kde/kdeplasma-addons-5.26.4-x86_64-1.txz: Upgraded.
kde/kgamma5-5.26.4-x86_64-1.txz: Upgraded.
kde/khotkeys-5.26.4-x86_64-1.txz: Upgraded.
kde/kinfocenter-5.26.4-x86_64-1.txz: Upgraded.
kde/kmenuedit-5.26.4-x86_64-1.txz: Upgraded.
kde/kpipewire-5.26.4-x86_64-1.txz: Upgraded.
kde/kscreen-5.26.4-x86_64-1.txz: Upgraded.
kde/kscreenlocker-5.26.4-x86_64-1.txz: Upgraded.
kde/ksshaskpass-5.26.4-x86_64-1.txz: Upgraded.
kde/ksystemstats-5.26.4-x86_64-1.txz: Upgraded.
kde/kwallet-pam-5.26.4-x86_64-1.txz: Upgraded.
kde/kwayland-integration-5.26.4-x86_64-1.txz: Upgraded.
kde/kwin-5.26.4-x86_64-1.txz: Upgraded.
kde/kwrited-5.26.4-x86_64-1.txz: Upgraded.
kde/layer-shell-qt-5.26.4-x86_64-1.txz: Upgraded.
kde/libkscreen-5.26.4-x86_64-1.txz: Upgraded.
kde/libksysguard-5.26.4-x86_64-1.txz: Upgraded.
kde/milou-5.26.4-x86_64-1.txz: Upgraded.
kde/oxygen-5.26.4-x86_64-1.txz: Upgraded.
kde/oxygen-sounds-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-browser-integration-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-desktop-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-disks-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-firewall-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-integration-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-nm-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-pa-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-sdk-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-systemmonitor-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-vault-5.26.4-x86_64-1.txz: Upgraded.
kde/plasma-workspace-5.26.4.1-x86_64-1.txz: Upgraded.
kde/plasma-workspace-wallpapers-5.26.4-x86_64-1.txz: Upgraded.
kde/polkit-kde-agent-1-5.26.4-x86_64-1.txz: Upgraded.
kde/powerdevil-5.26.4-x86_64-1.txz: Upgraded.
kde/qqc2-breeze-style-5.26.4-x86_64-1.txz: Upgraded.
kde/sddm-kcm-5.26.4-x86_64-1.txz: Upgraded.
kde/systemsettings-5.26.4-x86_64-1.txz: Upgraded.
kde/xdg-desktop-portal-kde-5.26.4-x86_64-1.txz: Upgraded.
l/glib2-2.74.2-x86_64-2.txz: Rebuilt.
Patched to fix C++ API.
Thanks to 0XBF.
l/wavpack-5.6.0-x86_64-1.txz: Upgraded.
n/iputils-20221126-x86_64-1.txz: Upgraded.
n/libmbim-1.28.2-x86_64-1.txz: Upgraded.
x/libime-1.0.16-x86_64-1.txz: Upgraded.
x/xterm-377-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-107.0.1-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/107.0.1/releasenotes/
|
||
|
Patrick J Volkerding
|
b0246e0205 |
Fri Nov 25 20:37:16 UTC 2022
a/btrfs-progs-6.0.2-x86_64-1.txz: Upgraded. l/glib2-2.74.2-x86_64-1.txz: Upgraded. x/fcitx5-gtk-5.0.21-x86_64-1.txz: Upgraded. |