Latest changelog for slackware-current

marav · 01-27-2024, 01:26 PM

6 updates (x86_64) : 6 Upgraded

Code:

Sat Jan 27 19:18:02 UTC 2024
ap/mc-4.8.31-x86_64-1.txz:  Upgraded.
l/libidn2-2.3.7-x86_64-1.txz:  Upgraded.
l/orc-0.4.36-x86_64-1.txz:  Upgraded.
n/c-ares-1.26.0-x86_64-1.txz:  Upgraded.
tcl/tclx-8.6.3-x86_64-1.txz:  Upgraded.
xap/freerdp-2.11.5-x86_64-1.txz:  Upgraded.

Provided by http://matoda.pw/report/slack-current-x86_64.txt

volkerdi · 01-29-2024, 01:30 PM

32 updates (x86_64) : 8 Upgraded, 21 Rebuilt, 3 Added

Code:

Mon Jan 29 19:17:30 UTC 2024
ap/diffstat-1.66-x86_64-1.txz:  Upgraded.
ap/moc-2.6_alpha3-x86_64-3.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
ap/vim-9.1.0061-x86_64-1.txz:  Upgraded.
d/nv-codec-headers-12.1.14.0-x86_64-1.txz:  Added.
  Needed to build support for nvidia hardware decoders/encoders on newer GPUs.
  gst-plugins-bad can use it too.
  Thanks to Heinz Wiesinger.
kde/digikam-8.2.0-x86_64-4.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
kde/ffmpegthumbs-23.08.4-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
kde/k3b-23.08.4-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
kde/kfilemetadata-5.114.0-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
kde/kpipewire-5.27.10-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
l/Imath-3.1.10-x86_64-1.txz:  Upgraded.
l/alsa-plugins-1.2.7.1-x86_64-3.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
l/ffmpeg-6.1.1-x86_64-1.txz:  Upgraded.
  Shared library .so-version bump.
  Added some new build options in the SlackBuild.
  Use shaderc instead of glslang.
  Build against libgcrypt to enable support for RTMP[E].
  Enable support for lcms2.
  Build against libass, libplacebo, and nv-codec-headers.
  Thanks to Heinz Wiesinger.
l/gegl-0.4.46-x86_64-4.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
l/gst-plugins-bad-free-1.22.9-x86_64-2.txz:  Rebuilt.
  Recompiled against libass-0.17.1.
l/gst-plugins-libav-1.22.9-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
l/libass-0.17.1-x86_64-1.txz:  Added.
  Adds ASS/SSA subtitle renderer (commonly used in the anime community).
  adapted SlackBuild from SBo, original by Larry Hajali/Matteo Bernardini.
  MPlayer and gst-plugins-bad can use it too.
  Thanks to Heinz Wiesinger.
l/libplacebo-6.338.2-x86_64-1.txz:  Added.
  Adds various hardware accelerated filters such as HDR -> SDR tone mapping.
  adapted SlackBuild from SBo, original by Hunter Sezen/Christoph Willing.
  Thanks to Heinz Wiesinger.
l/mlt-7.22.0-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
l/netpbm-11.05.02-x86_64-1.txz:  Upgraded.
l/opencv-4.9.0-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
l/pipewire-1.0.1-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
l/qt5-5.15.12_20240103_b8fd1448-x86_64-3.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
x/pixman-0.43.2-x86_64-1.txz:  Upgraded.
xap/MPlayer-20240127-x86_64-1.txz:  Upgraded.
  Compiled against ffmpeg-6.1.1 and libass-0.17.1.
xap/audacious-plugins-4.3.1-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
xap/ffmpegthumbnailer-2.2.2-x86_64-5.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
xap/freerdp-2.11.5-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
xap/ssr-0.4.4-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
xap/vim-gvim-9.1.0061-x86_64-1.txz:  Upgraded.
xap/xine-lib-1.2.13-x86_64-6.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
xap/xscreensaver-6.08-x86_64-2.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.
extra/tigervnc/tigervnc-1.13.1-x86_64-4.txz:  Rebuilt.
  Recompiled against ffmpeg-6.1.1.

Provided by http://matoda.pw/report/slack-current-x86_64.txt

marav · 01-29-2024, 01:38 PM

OMG!
For some reason, the script failed
I ran it manually, 1 second later you posted it

Did you hack my VPS ?

volkerdi · 01-29-2024, 02:00 PM

Quote:

Originally Posted by marav

OMG!
For some reason, the script failed
I ran it manually, 1 second later you posted it

Did you hack my VPS ?

We have traced the call... IT'S COMING FROM INSIDE YOUR ROOM

marav · 01-30-2024, 04:14 PM

22 updates (x86_64). Including a (* Security fix *)! : 17 Upgraded, 5 Rebuilt

Code:

Tue Jan 30 22:01:28 UTC 2024
a/lzip-1.24-x86_64-1.txz:  Upgraded.
a/openssl-solibs-3.2.1-x86_64-1.txz:  Upgraded.
ap/alsa-utils-1.2.11-x86_64-1.txz:  Upgraded.
ap/sqlite-3.45.1-x86_64-1.txz:  Upgraded.
d/binutils-2.42-x86_64-1.txz:  Upgraded.
  Shared library .so-version bump.
d/cmake-3.28.2-x86_64-1.txz:  Upgraded.
d/oprofile-1.4.0-x86_64-13.txz:  Rebuilt.
  Recompiled against binutils-2.42.
d/strace-6.7-x86_64-1.txz:  Upgraded.
kde/digikam-8.2.0-x86_64-5.txz:  Rebuilt.
  Recompiled against libpng-1.6.42.
l/alsa-lib-1.2.11-x86_64-1.txz:  Upgraded.
l/libpng-1.6.42-x86_64-1.txz:  Upgraded.
  Fixed the implementation of the macro function png_check_sig().
  This was an API regression, introduced in libpng-1.6.41.
  Reported by Matthieu Darbois.
l/lmdb-0.9.32-x86_64-1.txz:  Upgraded.
l/neon-0.33.0-x86_64-1.txz:  Upgraded.
l/opencv-4.9.0-x86_64-3.txz:  Rebuilt.
  Recompiled against libpng-1.6.42.
l/qt5-5.15.12_20240103_b8fd1448-x86_64-4.txz:  Rebuilt.
  Recompiled against libpng-1.6.42.
l/talloc-2.4.2-x86_64-1.txz:  Upgraded.
l/tdb-1.4.10-x86_64-1.txz:  Upgraded.
l/tevent-0.16.1-x86_64-1.txz:  Upgraded.
n/openldap-2.6.7-x86_64-1.txz:  Upgraded.
n/openssl-3.2.1-x86_64-1.txz:  Upgraded.
  This update fixes possible denial-of-service security issues:
  A file in PKCS12 format can contain certificates and keys and may come from
  an untrusted source. The PKCS12 specification allows certain fields to be
  NULL, but OpenSSL did not correctly check for this case. A fix has been
  applied to prevent a NULL pointer dereference that results in OpenSSL
  crashing. If an application processes PKCS12 files from an untrusted source
  using the OpenSSL APIs then that application will be vulnerable to this
  issue prior to this fix.
  OpenSSL APIs that were vulnerable to this are: PKCS12_parse(),
  PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()
  and PKCS12_newpass().
  When function EVP_PKEY_public_check() is called on RSA public keys,
  a computation is done to confirm that the RSA modulus, n, is composite.
  For valid RSA keys, n is a product of two or more large primes and this
  computation completes quickly. However, if n is an overly large prime,
  then this computation would take a long time.
  An application that calls EVP_PKEY_public_check() and supplies an RSA key
  obtained from an untrusted source could be vulnerable to a Denial of Service
  attack.
  The function EVP_PKEY_public_check() is not called from other OpenSSL
  functions however it is called from the OpenSSL pkey command line
  application. For that reason that application is also vulnerable if used
  with the "-pubin" and "-check" options on untrusted data.
  To resolve this issue RSA keys larger than OPENSSL_RSA_MAX_MODULUS_BITS will
  now fail the check immediately with an RSA_R_MODULUS_TOO_LARGE error reason.
  Fix excessive time spent in DH check / generation with large Q parameter
  value.
  Applications that use the functions DH_generate_key() to generate an
  X9.42 DH key may experience long delays. Likewise, applications that use
  DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()
  to check an X9.42 DH key or X9.42 DH parameters may experience long delays.
  Where the key or parameters that are being checked have been obtained from
  an untrusted source this may lead to a Denial of Service.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2024-0727
    https://www.cve.org/CVERecord?id=CVE-2023-6237
    https://www.cve.org/CVERecord?id=CVE-2023-5678
  (* Security fix *)
xap/MPlayer-20240130-x86_64-1.txz:  Upgraded.
  Fixed build script to exit on errors.
  Patched to build against gettext-0.22.4.
  Thanks to Matteo Bernardini.
xap/xine-lib-1.2.13-x86_64-7.txz:  Rebuilt.
  Recompiled against libpng-1.6.42.

Provided by http://matoda.pw/report/slack-current-x86_64.txt

marav · 01-31-2024, 03:34 PM

7 updates (x86_64). Including a (* Security fix *)! : 6 Upgraded, 1 Added

Code:

Wed Jan 31 21:19:19 UTC 2024
ap/nvme-cli-2.7.1-x86_64-1.txz:  Upgraded.
l/libnvme-1.7.1-x86_64-1.txz:  Added.
  This is required by nvme-cli.
l/pipewire-1.0.2-x86_64-1.txz:  Upgraded.
n/curl-8.6.0-x86_64-1.txz:  Upgraded.
n/libmilter-8.18.1-x86_64-1.txz:  Upgraded.
extra/sendmail/sendmail-8.18.1-x86_64-1.txz:  Upgraded.
  sendmail through 8.17.2 allows SMTP smuggling in certain configurations.
  Remote attackers can use a published exploitation technique to inject e-mail
  messages with a spoofed MAIL FROM address, allowing bypass of an SPF
  protection mechanism. This occurs because sendmail supports <LF>.<CR><LF>
  but some other popular e-mail servers do not. This is resolved in 8.18 and
  later versions with 'o' in srv_features.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2023-51765
  (* Security fix *)
extra/sendmail/sendmail-cf-8.18.1-noarch-1.txz:  Upgraded.

source/installer

Code:

Wed Jan 31 20:35:22 UTC 2024
  Added libnvme.

Provided by http://matoda.pw/report/slack-current-x86_64.txt

marav · 02-01-2024, 02:15 PM

13 updates (x86_64) : 11 Upgraded, 2 Rebuilt

Code:

Thu Feb  1 19:51:54 UTC 2024
a/kernel-firmware-20240201_09f0fb8-noarch-1.txz:  Upgraded.
a/kernel-generic-6.6.15-x86_64-1.txz:  Upgraded.
a/kernel-huge-6.6.15-x86_64-1.txz:  Upgraded.
a/kernel-modules-6.6.15-x86_64-1.txz:  Upgraded.
d/kernel-headers-6.6.15-x86-1.txz:  Upgraded.
k/kernel-source-6.6.15-noarch-1.txz:  Upgraded.
kde/libindi-2.0.6-x86_64-1.txz:  Upgraded.
l/libusb-1.0.27-x86_64-1.txz:  Upgraded.
n/fetchmail-6.4.38-x86_64-1.txz:  Upgraded.
x/mesa-24.0.0-x86_64-1.txz:  Upgraded.
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.

Provided by http://matoda.pw/report/slack-current-x86_64.txt

marav · 02-02-2024, 04:25 PM

15 updates (x86_64). Including a (* Security fix *)! : 8 Upgraded, 7 Rebuilt

Code:

Fri Feb  2 22:12:45 UTC 2024
A test mass rebuild here didn't find any new failure-to-build-from-source, so
we'll go ahead and upgrade to the new glibc. Enjoy! :-)
a/aaa_glibc-solibs-2.39-x86_64-1.txz:  Upgraded.
kde/calligra-3.2.1-x86_64-36.txz:  Rebuilt.
  Recompiled against poppler-24.02.0.
kde/cantor-23.08.4-x86_64-2.txz:  Rebuilt.
  Recompiled against poppler-24.02.0.
kde/kfilemetadata-5.114.0-x86_64-3.txz:  Rebuilt.
  Recompiled against poppler-24.02.0.
kde/kile-2.9.93-x86_64-30.txz:  Rebuilt.
  Recompiled against poppler-24.02.0.
kde/kitinerary-23.08.4-x86_64-2.txz:  Rebuilt.
  Recompiled against poppler-24.02.0.
kde/krita-5.2.2-x86_64-3.txz:  Rebuilt.
  Recompiled against poppler-24.02.0.
kde/okular-23.08.4-x86_64-2.txz:  Rebuilt.
  Recompiled against poppler-24.02.0.
l/SDL2-2.30.0-x86_64-1.txz:  Upgraded.
l/glibc-2.39-x86_64-1.txz:  Upgraded.
  This fixes a few __vsyslog_internal related overflows that could result in
  an application crash or local privilege escalation.
  The issues affected glibc 2.36 and newer.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2023-6246
    https://www.cve.org/CVERecord?id=CVE-2023-6779
    https://www.cve.org/CVERecord?id=CVE-2023-6780
  (* Security fix *)
l/glibc-i18n-2.39-x86_64-1.txz:  Upgraded.
l/glibc-profile-2.39-x86_64-1.txz:  Upgraded.
l/pipewire-1.0.3-x86_64-1.txz:  Upgraded.
l/poppler-24.02.0-x86_64-1.txz:  Upgraded.
  Shared library .so-version bump.
n/ipset-7.20-x86_64-1.txz:  Upgraded.

source/installer

Code:

Thu Feb  1 19:36:54 UTC 2024
  Don't add elilo boot support to the 32-bit installer image. This had been
  done previously, but began being siliently dropped when the 32-bit kernel
  changed from i586 to i686. But it's just as well since UEFI cannot directly
  boot a 32-bit kernel anyway. Legacy BIOS is the only option.

Provided by http://matoda.pw/report/slack-current-x86_64.txt

volkerdi · 02-03-2024, 03:06 PM

4 updates (x86_64) : 4 Upgraded

Code:

Sat Feb  3 20:54:00 UTC 2024
a/glibc-zoneinfo-2024a-noarch-1.txz:  Upgraded.
  This package provides the latest timezone updates.
n/ca-certificates-20240203-noarch-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
x/ibus-libpinyin-1.15.7-x86_64-1.txz:  Upgraded.
x/xdg-utils-1.2.0-noarch-1.txz:  Upgraded.

Provided by http://matoda.pw/report/slack-current-x86_64.txt