Here are some updates to provide a little holiday cheer. The kernels are
rebuilt (yeah, we'll probably have new ones tomorrow but whatever) to build in
HWMON making NVMe temperature monitoring available, and there's also a massive
cleanup of polkit/dbus related packages to move most of the config files out
of /etc and not install them as .new. Local config files that override the
shipped ones may be placed in the directories in /etc to override the ones that
we ship. Thanks to Robby Workman for this!
None of the packages included in Slackware place any files in
/etc/polkit-1/rules.d/ or /etc/dbus-1/system.d/ any more, but there may be
third-party packages that still do. However, since Slackware's packages
originally installed these as .new files, the leftover configs will remain.
You'll probably want to take a look in those directories to clean out any
config files that you haven't modified yourself or that belong to packages that
aren't part of Slackware itself.
Hope everyone has a great day. :-)
a/dbus-1.12.20-x86_64-3.txz: Rebuilt.
Added local config override directory /etc/dbus-1/system.d/ since no other
package provides it now.
a/kernel-generic-5.10.2-x86_64-2.txz: Upgraded.
a/kernel-huge-5.10.2-x86_64-2.txz: Upgraded.
a/kernel-modules-5.10.2-x86_64-2.txz: Upgraded.
a/udisks-1.0.5-x86_64-6.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
a/udisks2-2.9.1-x86_64-2.txz: Rebuilt.
Include 20-plugdev-group-mount-override.rules, installed in the system
location. Thanks to Robby Workman.
ap/cups-2.3.3-x86_64-3.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
ap/hplip-3.20.6-x86_64-4.txz: Rebuilt.
Use --enable-qt5.
Move D-Bus configs from /etc to the system location.
Drop HAL support (LOL!)
Thanks to Robby Workman.
ap/mpg123-1.26.4-x86_64-1.txz: Upgraded.
d/gnucobol-3.1.2-x86_64-1.txz: Upgraded.
d/kernel-headers-5.10.2-x86-2.txz: Upgraded.
k/kernel-source-5.10.2-noarch-2.txz: Upgraded.
HWMON m -> y
+NVME_HWMON y
+POWER_SUPPLY_HWMON y
+THERMAL_HWMON y
Thanks to Daedra.
kde/sddm-0.19.0-x86_64-4.txz: Rebuilt.
Don't include the /etc/dbus-1/system.d/ directory.
l/GConf-3.2.6-x86_64-5.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
l/accountsservice-0.6.55-x86_64-2.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
l/cryptopp-8.3.0-x86_64-1.txz: Upgraded.
l/harfbuzz-2.7.3-x86_64-1.txz: Upgraded.
l/polkit-0.118-x86_64-3.txz: Rebuilt.
Remove D-Bus rules for udisks2 and NetworkManager (moved to those packages).
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
l/pulseaudio-14.0-x86_64-2.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
l/system-config-printer-1.5.12-x86_64-6.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
n/ModemManager-1.14.8-x86_64-2.txz: Rebuilt.
Added elogind support.
Move D-Bus configs from /etc to the system location.
Thanks to Robby Workman.
n/NetworkManager-1.28.0-x86_64-2.txz: Rebuilt.
Include 10-org.freedesktop.NetworkManager.rules, installed in the system
location. Thanks to Robby Workman.
n/bluez-5.55-x86_64-2.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
n/netatalk-3.1.12-x86_64-5.txz: Rebuilt.
Patched to fix failure to build from source with gcc10.
Move D-Bus configs from /etc to the system location.
Thanks to Robby Workman.
n/wpa_supplicant-2.9-x86_64-3.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
x/mesa-20.3.1-x86_64-2.txz: Rebuilt.
[PATCH] vulkan/device_select: Store Vulkan vendorID and deviceID as uint32_t.
Thanks to sasha69 for the link to the upstream discussion/commit.
xap/blueman-2.1.4-x86_64-3.txz: Rebuilt.
Move D-Bus configs from /etc to the system location. Thanks to Robby Workman.
xap/xgames-0.3-x86_64-6.txz: Rebuilt.
Fixed spider failing to build from source with gcc10.
Removed the ancient version of xsnow.
xap/xscreensaver-5.45-x86_64-2.txz: Rebuilt.
Make the description of the xscreensaver settings be clearly for xscreensaver
as opposed to a generic "screensaver" settings. Thanks to Robby Workman.
xap/xsnow-3.1.9-x86_64-1.txz: Added.
Merry Christmas / Happy Holidays! :-)
xfce/mousepad-0.5.1-x86_64-1.txz: Upgraded.
xfce/xfce4-screensaver-0.1.11-x86_64-2.txz: Rebuilt.
Make the description of the xfce4-screensaver settings be clearly for
xfce4-screensaver as opposed to a generic "screensaver" settings.
Thanks to Robby Workman.
xfce/xfce4-session-4.14.2-x86_64-2.txz: Rebuilt.
Use xfce4-screensaver by default and don't ship the xscreensaver.desktop
autostart file. Thanks to Robby Workman.
extra/pure-alsa-system/*: Removed.
This served a purpose during the pure ALSA to PulseAudio transition, but
it's time for it to go away. If the latency is an issue for your use case,
a look around should turn up documentation on how to reduce it, or how to
send output directly to ALSA without having to uninstall PulseAudio or
recompile anything that's linked to it. As an example, see this one (which
was mentioned here before):
https://wiki.archlinux.org/index.php/PulseAudio/Examples#PulseAudio_as_a_minimal_unintrusive_dumb_pipe_to_ALSA
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
d/python-pip-20.3.3-x86_64-1.txz: Upgraded.
kde/sddm-0.19.0-x86_64-3.txz: Rebuilt.
In SDDM's Xsession script, don't source $HOME/.xsession as this may launch
the wrong session type or cause dbus-run-session to start twice breaking
logout.
l/orc-0.4.32-x86_64-1.txz: Upgraded.
l/pipewire-0.3.18-x86_64-1.txz: Upgraded.
l/python-chardet-4.0.0-x86_64-1.txz: Upgraded.
l/python-packaging-20.8-x86_64-1.txz: Upgraded.
n/samba-4.13.3-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-78.6.0-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/78.6.0/releasenotes/
xfce/mousepad-0.5.0-x86_64-1.txz: Upgraded.
a/elogind-243.7-x86_64-2.txz: Rebuilt.
Moved default udev rules to /lib/udev/rules.d/. Thanks to Robby Workman.
Added /usr/share/polkit-1/rules.d/10-enable-session-power.rules.
a/glibc-zoneinfo-2020d-noarch-2.txz: Rebuilt.
Make /etc/localtime a symlink pointing into /usr/share/zoneinfo. If you
have /usr on a separate partition, this might cause time problems prior
to /usr being mounted (I recommend *not* making /usr a separate partition).
But if you insist for some reason, you can probably work around it by
adding the pointed-to directory and timezone file to your empty pre-mounted
/usr directory.
a/upower-0.99.11-x86_64-2.txz: Rebuilt.
Added /usr/share/polkit-1/rules.d/10-enable-upower-suspend.rules.
d/autoconf-2.70-noarch-1.txz: Upgraded.
d/gnucobol-3.1.1-x86_64-1.txz: Upgraded.
kde/powerdevil-5.20.4-x86_64-2.txz: Rebuilt.
Moved 10-enable-powerdevil-discrete-gpu.rules.new to
/usr/share/polkit-1/rules.d/. Thanks to Robby Workman.
Moved 10-enable-session-power.rules to the elogind package.
Moved 10-enable-upower-suspend.rules to the upower package.
Thanks to GazL.
l/jasper-2.0.23-x86_64-1.txz: Upgraded.
Fix heap-overflow in cp_create() in jpc_enc.c.
For more information, see:
https://github.com/jasper-software/jasper/issues/252https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27828
(* Security fix *)
l/sbc-1.5-x86_64-1.txz: Upgraded.
n/curl-7.74.0-x86_64-1.txz: Upgraded.
This release includes the following security related bugfixes:
Inferior OCSP verification [93]
FTP wildcard stack overflow [95]
Trusting FTP PASV responses [97]
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
(* Security fix *)
xap/xscreensaver-5.45-x86_64-1.txz: Upgraded.
xfce/Greybird-3.22.13-noarch-1.txz: Upgraded.
d/python-setuptools-49.6.0-x86_64-1.txz: Upgraded.
l/harfbuzz-2.7.1-x86_64-1.txz: Upgraded.
l/pango-1.46.0-x86_64-1.txz: Upgraded.
It would appear that there's no chance of upstream bringing back support for
bitmapped fonts, so it's time to stop dragging our feet and just accept this
upgrade. At least they've fixed it to provide readable (though badly spaced)
text for unsupported fonts. If you're using Terminus, I'd suggest switching
to the Hack font as a good replacement.
n/lftp-4.9.2-x86_64-1.txz: Upgraded.
xfce/garcon-0.6.4-x86_64-1.txz: Upgraded.
Switched back to 0.6.4 since that is actually the latest stable release.
xfce/tumbler-0.2.9-x86_64-1.txz: Upgraded.
Switched back to 0.2.9 since that is actually the latest stable release.
a/sysvinit-scripts-2.1-noarch-35.txz: Rebuilt.
rc.6: don't try to turn off swap if none is active. Thanks to stf92.
ap/man-pages-5.08-noarch-1.txz: Upgraded.
d/python-setuptools-49.4.0-x86_64-1.txz: Upgraded.
x/libinput-1.16.1-x86_64-1.txz: Upgraded.
xfce/tumbler-0.3.0-x86_64-1.txz: Upgraded.
a/cryptsetup-2.3.0-x86_64-1.txz: Upgraded.
a/kernel-firmware-20200203_6d9f399-noarch-1.txz: Upgraded.
ap/xfsdump-3.1.9-x86_64-1.txz: Upgraded.
d/mercurial-5.3-x86_64-1.txz: Upgraded.
l/libzip-1.6.1-x86_64-1.txz: Upgraded.
n/nfs-utils-2.4.2-x86_64-3.txz: Rebuilt.
Added /etc/exports.d directory.
Removed the bogus sanity checks. Sure, we could try to "fix" them, but this
seems to be the path of least resistance.
n/postfix-3.4.9-x86_64-1.txz: Upgraded.
x/libinput-1.15.1-x86_64-1.txz: Upgraded.
x/vulkan-sdk-1.2.131.1-x86_64-1.txz: Upgraded.
xap/sane-1.0.29-x86_64-1.txz: Upgraded.
a/util-linux-2.35.1-x86_64-1.txz: Upgraded.
a/zerofree-1.1.1-x86_64-1.txz: Added.
Also queued up for the next installer build. Thanks to bifferos.
ap/sudo-1.8.31-x86_64-1.txz: Upgraded.
This update fixes a security issue:
In Sudo before 1.8.31, if pwfeedback is enabled in /etc/sudoers, users can
trigger a stack-based buffer overflow in the privileged sudo process.
(pwfeedback is a default setting in some Linux distributions; however, it
is not the default for upstream or in Slackware, and would exist only if
enabled by an administrator.) The attacker needs to deliver a long string
to the stdin of getln() in tgetpass.c.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18634
(* Security fix *)
n/NetworkManager-1.22.6-x86_64-1.txz: Upgraded.
n/openldap-client-2.4.49-x86_64-1.txz: Upgraded.
xfce/Thunar-1.8.11-x86_64-1.txz: Removed.
xfce/thunar-1.8.12-x86_64-1.txz: Added.
Changed package name from "Thunar" to "thunar" to follow upstream's naming.
n/bind-9.14.8-x86_64-1.txz: Upgraded.
This update fixes a security issue:
Set a limit on the number of concurrently served pipelined TCP queries.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6477
(* Security fix *)
x/mesa-19.2.5-x86_64-1.txz: Upgraded.
d/llvm-9.0.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
Thanks to orbea for getting this working and cleaning up the build script.
d/vala-0.46.2-x86_64-1.txz: Upgraded.
l/imagemagick-6.9.10_67-x86_64-1.txz: Upgraded.
Fixed --disable-opencl configure option. Thanks to Markus Wiesner for the
bug report and to upstream for the quick fix.
n/NetworkManager-1.20.4-x86_64-1.txz: Upgraded.
n/gnutls-3.6.10-x86_64-1.txz: Upgraded.
x/freeglut-3.2.1-x86_64-1.txz: Upgraded.
x/libglvnd-1.1.1-x86_64-2.txz: Upgraded.
Reverted to this version since I'm seeing some errors linking with Mesa
libraries with the newer one. Thanks to nobodino for the bug report.
x/mesa-19.2.0-x86_64-2.txz: Rebuilt.
Recompiled against llvm-9.0.0 and libglvnd-1.1.1.
x/xf86-video-vmware-13.3.0-x86_64-3.txz: Rebuilt.
Recompiled against llvm-9.0.0.
a/aaa_elflibs-15.0-x86_64-10.txz: Rebuilt.
Upgraded: libglib-2.0.so.0.6000.6, libgmodule-2.0.so.0.6000.6,
libgobject-2.0.so.0.6000.6, libgthread-2.0.so.0.6000.6,
liblber-2.4.so.2.10.11, libldap-2.4.so.2.10.11.
Added: libargon2.so.1, libjson-c.so.4.0.0.
a/cryptsetup-2.1.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
Thanks to Robby Workman.
a/efibootmgr-20190528_d9eb7f1-x86_64-1.txz: Upgraded.
Even though efibootmgr-17 will compile against efivar from git, it's probably
best to take this from git as well to keep things closely synced.
a/efivar-20190618_272b216-x86_64-1.txz: Upgraded.
Switch to git to fix "efibootmgr -v" failing with a parse error.
a/elilo-3.16-x86_64-10.txz: Rebuilt.
eliloconfig: If /boot/initrd.gz exists, install the generic kernel and initrd.
Otherwise, install the huge kernel.
a/lvm2-2.03.05-x86_64-1.txz: Upgraded.
Back to lvm2-2.03.x (cryptsetup needs it). Hopefully there's been enough time
for most of the bugs to have been ironed out.
l/argon2-20190702-x86_64-3.txz: Rebuilt.
Fix shared library permissions.
l/aspell-0.60.7-x86_64-1.txz: Upgraded.
l/imagemagick-6.9.10_57-x86_64-1.txz: Upgraded.
l/python-docutils-0.15.1-x86_64-1.txz: Upgraded.
n/ipset-7.3-x86_64-1.txz: Upgraded.
xap/geeqie-1.5-x86_64-1.txz: Upgraded.
xfce/garcon-0.6.4-x86_64-1.txz: Upgraded.
xfce/thunar-volman-0.9.4-x86_64-1.txz: Upgraded.
xfce/tumbler-0.2.6-x86_64-1.txz: Upgraded.
d/Cython-0.29.11-x86_64-1.txz: Upgraded.
t/texlive-2019.190626-x86_64-2.txz: Rebuilt.
Patched tabu.sty to fix compiling doxygen.
Thanks to Johannes Schoepfer and nobodino.
x/mesa-19.1.1-x86_64-2.txz: Rebuilt.
Don't build the swr Gallium driver on IA32 - it leads to an illegal
instruction startup crash with CPUs that lack AVX support.
Thanks to Jefferson and Johnson.
xfce/thunar-volman-0.9.3-x86_64-1.txz: Upgraded.
xfce/tumbler-0.2.5-x86_64-1.txz: Upgraded.
a/hwdata-0.325-noarch-1.txz: Upgraded.
ap/hplip-3.19.6-x86_64-1.txz: Upgraded.
n/irssi-1.2.1-x86_64-1.txz: Upgraded.
This update fixes a security issue: Use after free when sending SASL login
to the server found by ilbelkyr. May affect the stability of Irssi. SASL
logins may fail, especially during (manual and automated) reconnect.
For more information, see:
https://irssi.org/2019/06/29/irssi-1.2.1-1.1.3-1.0.8-released/https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13045
(* Security fix *)
xfce/Thunar-1.8.7-x86_64-1.txz: Upgraded.
a/less-550-x86_64-1.txz: Upgraded.
d/vala-0.44.4-x86_64-1.txz: Upgraded.
n/curl-7.65.1-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://curl.haxx.se/changes.html
xfce/xfdesktop-4.12.5-x86_64-1.txz: Upgraded.
a/aaa_terminfo-6.1_20190518-x86_64-1.txz: Upgraded.
ap/qpdf-8.4.2-x86_64-1.txz: Upgraded.
l/libidn2-2.2.0-x86_64-1.txz: Upgraded.
l/ncurses-6.1_20190518-x86_64-1.txz: Upgraded.
n/p11-kit-0.23.16.1-x86_64-1.txz: Upgraded.
xap/rdesktop-1.8.6-x86_64-1.txz: Upgraded.
This is a small bug fix release for rdesktop 1.8.5. An issue was discovered
soon after release where it was impossible to connect to some servers. This
issue has now been fixed, but otherwise this release is identical to 1.8.5.
xfce/Thunar-1.8.6-x86_64-1.txz: Upgraded.
xfce/thunar-volman-0.9.2-x86_64-1.txz: Upgraded.
ap/tmux-2.9a-x86_64-1.txz: Upgraded.
n/dovecot-2.3.6-x86_64-1.txz: Upgraded.
This update fixes two security issues:
Submission-login crashed with signal 11 due to null pointer access when
authentication was aborted by disconnecting.
Submission-login crashed when authentication was started over TLS secured
channel and invalid authentication message was sent.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11494https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11499
(* Security fix *)
n/php-7.2.18-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue
Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11036
(* Security fix *)
xfce/exo-0.12.5-x86_64-1.txz: Upgraded.
a/btrfs-progs-4.20-x86_64-1.txz: Upgraded.
a/kernel-firmware-20190118_a8b75ca-noarch-1.txz: Upgraded.
a/sysvinit-scripts-2.1-noarch-26.txz: Rebuilt.
rc.S: Don't sleep for 3 seconds before mounting non-root filesystems. This
should not be needed once udev reports having settled all devices.
Let me know if I'm wrong. :-)
d/parallel-20190122-noarch-1.txz: Upgraded.
l/glib2-2.58.3-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.4-x86_64-1.txz: Upgraded.
l/librsvg-2.44.12-x86_64-1.txz: Upgraded.
l/python-packaging-19.0-x86_64-1.txz: Upgraded.
n/p11-kit-0.23.15-x86_64-1.txz: Upgraded.
x/libinput-1.12.6-x86_64-1.txz: Upgraded.
xfce/exo-0.12.4-x86_64-1.txz: Upgraded.
a/btrfs-progs-v4.19.1-x86_64-1.txz: Upgraded.
a/dbus-1.12.12-x86_64-1.txz: Upgraded.
ap/cups-2.2.10-x86_64-1.txz: Upgraded.
ap/cups-filters-1.21.5-x86_64-1.txz: Upgraded.
ap/hplip-3.18.12-x86_64-1.txz: Upgraded.
d/mercurial-4.8.1-x86_64-1.txz: Upgraded.
d/rust-1.31.0-x86_64-1.txz: Upgraded.
l/libpng-1.6.36-x86_64-1.txz: Upgraded.
l/python-idna-2.8-x86_64-1.txz: Upgraded.
n/ntp-4.2.8p12-x86_64-5.txz: Rebuilt.
Fixed logrotate file. Thanks to allend and rworkman.
n/php-7.2.13-x86_64-1.txz: Upgraded.
This is a security release which also contains several minor bug fixes.
For more information, see:
https://php.net/ChangeLog-7.php#7.2.13
(* Security fix *)
n/wpa_supplicant-2.7-x86_64-1.txz: Upgraded.
x/mesa-18.3.0-x86_64-1.txz: Upgraded.
x/xf86-video-i740-1.4.0-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-60.3.3-x86_64-1.txz: Upgraded.
This is a bugfix release. For more information, see:
https://www.mozilla.org/en-US/thunderbird/60.3.3/releasenotes/
xfce/thunar-volman-0.9.1-x86_64-1.txz: Upgraded.
ap/texinfo-6.5-x86_64-7.txz: Rebuilt.
Recompiled against perl-5.28.1.
ap/vim-8.1.0552-x86_64-1.txz: Upgraded.
Compiled against perl-5.28.1.
d/perl-5.28.1-x86_64-1.txz: Upgraded.
Upgraded DBD-mysql-4.049, DBI-1.642, abd IO-Socket-SSL-2.060.
Added Devel-CheckLib-1.13 (needed by DBD-mysql-4.049).
kde/perlkde-4.14.3-x86_64-7.txz: Rebuilt.
Recompiled against perl-5.28.1.
kde/perlqt-4.14.3-x86_64-8.txz: Rebuilt.
Recompiled against perl-5.28.1.
n/epic5-2.0.1-x86_64-7.txz: Rebuilt.
Recompiled against perl-5.28.1.
n/irssi-1.1.1-x86_64-5.txz: Rebuilt.
Recompiled against perl-5.28.1.
n/net-snmp-5.8-x86_64-4.txz: Rebuilt.
Recompiled against perl-5.28.1.
n/ntp-4.2.8p12-x86_64-4.txz: Rebuilt.
Recompiled against perl-5.28.1.
xap/hexchat-2.14.2-x86_64-2.txz: Rebuilt.
Recompiled against perl-5.28.1.
xap/mozilla-thunderbird-60.3.2-x86_64-1.txz: Upgraded.
This is a bugfix release. For more information, see:
https://www.mozilla.org/en-US/thunderbird/60.3.2/releasenotes/
xap/rxvt-unicode-9.22-x86_64-6.txz: Rebuilt.
Recompiled against perl-5.28.1.
xap/vim-gvim-8.1.0552-x86_64-1.txz: Upgraded.
Compiled against perl-5.28.1.
xfce/xfce4-systemload-plugin-1.2.2-x86_64-1.txz: Upgraded.
a/kernel-generic-4.19.3-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.3-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.3-x86_64-1.txz: Upgraded.
a/openssl-solibs-1.1.1a-x86_64-1.txz: Upgraded.
a/sysvinit-scripts-2.1-noarch-21.txz: Rebuilt.
rc.S: Don't run rc.fuse - udev takes care of the FUSE module and filesystem.
rc.S: Support replacing the /etc/mtab file with a symlink to /proc/mounts.
rc.6: Show more information when unmounting filesystems at shutdown.
ap/ghostscript-9.26-x86_64-1.txz: Upgraded.
ap/mariadb-10.3.11-x86_64-1.txz: Upgraded.
This update fixes bugs and security issues.
For more information, see:
https://mariadb.com/kb/en/library/mariadb-10311-release-notes/https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3282
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2016-9843
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3174
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3143
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3156
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3251
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3185
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3277
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3162
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3173
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3200
https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2018-3284
(* Security fix *)
d/cmake-3.13.0-x86_64-1.txz: Upgraded.
d/git-2.19.2-x86_64-1.txz: Upgraded.
d/kernel-headers-4.14.63-x86-1.txz: Upgraded.
d/kernel-headers-4.19.3-x86-1.txz: Upgraded.
d/vala-0.42.3-x86_64-1.txz: Added.
k/kernel-source-4.19.3-noarch-1.txz: Upgraded.
l/adwaita-icon-theme-3.30.0-noarch-1.txz: Upgraded.
l/at-spi2-atk-2.30.0-x86_64-1.txz: Upgraded.
l/at-spi2-core-2.30.0-x86_64-1.txz: Upgraded.
l/atk-2.30.0-x86_64-1.txz: Upgraded.
l/atkmm-2.28.0-x86_64-1.txz: Upgraded.
l/dconf-0.28.0-x86_64-1.txz: Upgraded.
dconf and dconf-editor require Vala; the alternative would be to try to
stick with the old versions forever, and we don't want to do that.
l/dconf-editor-3.30.2-x86_64-1.txz: Upgraded.
l/gcr-3.28.0-x86_64-3.txz: Rebuilt.
Recompiled to add Vala bindings.
l/gdk-pixbuf2-2.38.0-x86_64-1.txz: Upgraded.
l/gexiv2-0.10.9-x86_64-1.txz: Upgraded.
l/glib-networking-2.58.0-x86_64-1.txz: Upgraded.
l/glib2-2.58.1-x86_64-1.txz: Upgraded.
l/glibmm-2.58.0-x86_64-1.txz: Upgraded.
l/gobject-introspection-1.58.0-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.1-x86_64-1.txz: Upgraded.
l/gtkmm3-3.24.0-x86_64-1.txz: Upgraded.
l/gvfs-1.38.1-x86_64-1.txz: Upgraded.
l/libcap-2.26-x86_64-1.txz: Upgraded.
l/libpsl-0.20.1-x86_64-1.txz: Added.
Required by libsoup.
l/libsoup-2.64.2-x86_64-1.txz: Upgraded.
l/pangomm-2.42.0-x86_64-1.txz: Upgraded.
l/pygobject3-3.30.2-x86_64-1.txz: Upgraded.
l/vte-0.54.2-x86_64-1.txz: Upgraded.
n/openssl-1.1.1a-x86_64-1.txz: Upgraded.
This update fixes timing side channel attacks on DSA and ECDSA signature
generation that could allow an attacker to recover the private key.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735
(* Security fix *)
x/pixman-0.36.0-x86_64-1.txz: Upgraded.
xfce/xfce4-terminal-0.8.7.4-x86_64-2.txz: Rebuilt.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
a/bin-11.1-x86_64-3.txz: Rebuilt.
Renamed mktemp to mktemp-debianutils.
Removed bban and sysvbanner which seem to be lacking proper licensing info.
a/coreutils-8.30-x86_64-2.txz: Rebuilt.
Renamed mktemp-gnu to mktemp.
a/xfsprogs-4.18.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-63.1.
ap/alsa-utils-1.1.7-x86_64-1.txz: Upgraded.
ap/sqlite-3.25.2-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-63.1.
d/ccache-3.5-x86_64-1.txz: Upgraded.
kde/calligra-2.9.11-x86_64-26.txz: Rebuilt.
Recompiled against icu4c-63.1.
l/alsa-lib-1.1.7-x86_64-1.txz: Upgraded.
l/alsa-plugins-1.1.7-x86_64-1.txz: Upgraded.
l/boost-1.68.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-63.1.
l/harfbuzz-1.9.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-63.1.
l/icu4c-63.1-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
Those of you using Plasma 5 or various third party packages should know by
now what it means when icu4c gets a bump in -current. You may want to wait
a few days for those things to appear again rebuilt against this.
l/libical-3.0.4-x86_64-1.txz: Upgraded.
Compiled against icu4c-63.1.
l/libssh-0.7.6-x86_64-1.txz: Upgraded.
Fixed authentication bypass vulnerability.
For more information, see:
https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10933
(* Security fix *)
l/libvisio-0.1.6-x86_64-5.txz: Rebuilt.
Recompiled against icu4c-63.1.
l/qt-4.8.7-x86_64-11.txz: Rebuilt.
Recompiled against icu4c-63.1.
l/raptor2-2.0.15-x86_64-6.txz: Rebuilt.
Recompiled against icu4c-63.1.
n/dovecot-2.3.3-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-63.1.
n/php-7.2.11-x86_64-1.txz: Upgraded.
Compiled against icu4c-63.1.
n/postfix-3.3.1-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-63.1.
n/tin-2.4.2-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-63.1.
t/texlive-2018.180822-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-63.1.
x/libdrm-2.4.96-x86_64-1.txz: Upgraded.
xfce/exo-0.12.3-x86_64-1.txz: Upgraded.
extra/brltty/brltty-5.6-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-63.1.
extra/pure-alsa-system/alsa-lib-1.1.7-x86_64-1_alsa.txz: Upgraded.
extra/pure-alsa-system/alsa-plugins-1.1.7-x86_64-1_alsa.txz: Upgraded.