slackware-current/source
Patrick J Volkerding e833eebc98 Tue Jan 26 21:20:58 UTC 2021
ap/sudo-1.9.5p2-x86_64-1.txz:  Upgraded.
  When invoked as sudoedit, the same set of command line options
  are now accepted as for "sudo -e". The -H and -P options are
  now rejected for sudoedit and "sudo -e" which matches the sudo
  1.7 behavior. This is part of the fix for CVE-2021-3156.
  Fixed a potential buffer overflow when unescaping backslashes
  in the command's arguments. Normally, sudo escapes special
  characters when running a command via a shell (sudo -s or sudo
  -i). However, it was also possible to run sudoedit with the -s
  or -i flags in which case no escaping had actually been done,
  making a buffer overflow possible. This fixes CVE-2021-3156.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3156
  (* Security fix *)
d/binutils-2.36-x86_64-2.txz:  Rebuilt.
  Revert commit d1bcae833b32f1408485ce69f844dcd7ded093a8:
  [PATCH] ELF: Don't generate unused section symbols
  This fixes building the kernel.
l/loudmouth-1.5.4-x86_64-1.txz:  Upgraded.
n/autofs-5.1.7-x86_64-1.txz:  Upgraded.
n/dnsmasq-2.84-x86_64-1.txz:  Upgraded.
n/tin-2.4.5-x86_64-1.txz:  Upgraded.
xap/gparted-1.2.0-x86_64-1.txz:  Upgraded.
xap/mozilla-thunderbird-78.7.0-x86_64-1.txz:  Upgraded.
  This release contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/78.7.0/releasenotes/
    https://www.mozilla.org/en-US/security/advisories/mfsa2021-05/
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23953
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23954
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15685
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26976
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23960
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23964
  (* Security fix *)
2021-01-27 14:59:56 +01:00
..
a Mon Jan 25 01:07:00 UTC 2021 2021-01-25 08:59:51 +01:00
ap Tue Jan 26 21:20:58 UTC 2021 2021-01-27 14:59:56 +01:00
d Tue Jan 26 21:20:58 UTC 2021 2021-01-27 14:59:56 +01:00
e Fri Jan 22 19:17:44 UTC 2021 2021-01-23 08:59:49 +01:00
f Mon May 28 19:12:29 UTC 2018 2018-05-31 23:39:35 +02:00
installer Sun Jan 17 23:48:59 UTC 2021 2021-01-18 08:59:51 +01:00
k Sat Jan 23 19:55:29 UTC 2021 2021-01-24 08:59:52 +01:00
kde Fri Jan 22 19:17:44 UTC 2021 2021-01-23 08:59:49 +01:00
l Tue Jan 26 21:20:58 UTC 2021 2021-01-27 14:59:56 +01:00
n Tue Jan 26 21:20:58 UTC 2021 2021-01-27 14:59:56 +01:00
t Fri Jan 22 19:17:44 UTC 2021 2021-01-23 08:59:49 +01:00
tcl Fri Jan 22 19:17:44 UTC 2021 2021-01-23 08:59:49 +01:00
x Mon Jan 25 20:42:50 UTC 2021 2021-01-26 08:59:51 +01:00
xap Tue Jan 26 21:20:58 UTC 2021 2021-01-27 14:59:56 +01:00
xfce Mon Jan 25 20:42:50 UTC 2021 2021-01-26 08:59:51 +01:00
y Fri Jan 22 19:17:44 UTC 2021 2021-01-23 08:59:49 +01:00
buildlist-from-changelog.sh Sat Jan 9 20:53:30 UTC 2021 2021-01-10 08:59:50 +01:00
make_world.sh Fri Jan 8 19:43:46 UTC 2021 2021-01-09 08:59:49 +01:00
README.TXT Slackware 14.0 2018-05-31 22:51:55 +02:00

This is the source used for Slackware.

To look for a particular bit of source (let's say for 'cp'), first you would
look for the full path:

fuzzy:~# which cp
/bin/cp

Then, you grep for the package it came from. Note that the leading '/'
is removed:

fuzzy:~# grep bin/cp /var/log/packages/*
/var/log/packages/cpio-2.4.2.91-i386-1:bin/cpio
/var/log/packages/fileutils-4.1-i386-2:bin/cp
/var/log/packages/gcc-2.95.3-i386-2:usr/bin/cpp
/var/log/packages/gnome-applets-1.4.0.5-i386-1:usr/bin/cpumemusage_applet


From this, you can see that 'cp' came from the fileutils-4.1-i386-2 package.
The source will be found in a corresponding subdirectory.  In this case, that
would be ./a/bin.   Don't be fooled into thinking that the _bin.tar.gz in this
directory is the package with the source code -- anything starting with '_' is
just a framework package full of empty files with the correct permissions and 
ownerships for the completed package to use.

Many of these packages now have scripts that untar, patch, and compile the
source automatically.  These are the 'SlackBuild' scripts.  Moving back to the
example above, you can figure out which package the bin/cp source came from by
examining the SlackBuild script.

Have fun!

---
Patrick J. Volkerding
volkerdi@slackware.com