From 68513bbb1bc0621018d9cbbe21b6a5c87a7ab2dc Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Thu, 10 Nov 2022 19:47:59 +0000 Subject: Thu Nov 10 19:47:59 UTC 2022 patches/packages/php-7.4.33-x86_64-1_slack15.0.txz: Upgraded. This update fixes bugs and security issues: GD: OOB read due to insufficient input validation in imageloadfont(). Hash: buffer overflow in hash_update() on long parameter. For more information, see: https://www.cve.org/CVERecord?id=CVE-2022-31630 https://www.cve.org/CVERecord?id=CVE-2022-37454 (* Security fix *) --- ChangeLog.rss | 22 ++++++++++-- ChangeLog.txt | 10 ++++++ FILELIST.TXT | 42 +++++++++++----------- patches/packages/php-7.4.32-x86_64-1_slack15.0.txt | 11 ------ patches/packages/php-7.4.33-x86_64-1_slack15.0.txt | 11 ++++++ patches/source/php/fetch-php.sh | 4 +-- 6 files changed, 64 insertions(+), 36 deletions(-) delete mode 100644 patches/packages/php-7.4.32-x86_64-1_slack15.0.txt create mode 100644 patches/packages/php-7.4.33-x86_64-1_slack15.0.txt diff --git a/ChangeLog.rss b/ChangeLog.rss index 01f99a146..939399395 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,9 +11,27 @@ Tracking Slackware development in git. en-us urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f - Wed, 9 Nov 2022 22:16:30 GMT - Thu, 10 Nov 2022 12:30:18 GMT + Thu, 10 Nov 2022 19:47:59 GMT + Fri, 11 Nov 2022 12:30:16 GMT maintain_current_git.sh v 1.17 + + Thu, 10 Nov 2022 19:47:59 GMT + Thu, 10 Nov 2022 19:47:59 GMT + https://git.slackware.nl/current/tag/?h=20221110194759 + 20221110194759 + + +patches/packages/php-7.4.33-x86_64-1_slack15.0.txz: Upgraded. + This update fixes bugs and security issues: + GD: OOB read due to insufficient input validation in imageloadfont(). + Hash: buffer overflow in hash_update() on long parameter. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2022-31630 + https://www.cve.org/CVERecord?id=CVE-2022-37454 + (* Security fix *) + ]]> + + Wed, 9 Nov 2022 22:16:30 GMT Wed, 9 Nov 2022 22:16:30 GMT diff --git a/ChangeLog.txt b/ChangeLog.txt index 15f9f3c02..b8a4145af 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,13 @@ +Thu Nov 10 19:47:59 UTC 2022 +patches/packages/php-7.4.33-x86_64-1_slack15.0.txz: Upgraded. + This update fixes bugs and security issues: + GD: OOB read due to insufficient input validation in imageloadfont(). + Hash: buffer overflow in hash_update() on long parameter. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2022-31630 + https://www.cve.org/CVERecord?id=CVE-2022-37454 + (* Security fix *) ++--------------------------+ Wed Nov 9 22:16:30 UTC 2022 patches/packages/sysstat-12.7.1-x86_64-1_slack15.0.txz: Upgraded. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, diff --git a/FILELIST.TXT b/FILELIST.TXT index b5ad58bb6..2d71d7771 100644 --- a/FILELIST.TXT +++ b/FILELIST.TXT @@ -1,20 +1,20 @@ -Wed Nov 9 22:19:44 UTC 2022 +Thu Nov 10 19:50:20 UTC 2022 Here is the file list for this directory. If you are using a mirror site and find missing or extra files in the disk subdirectories, please have the archive administrator refresh the mirror. -drwxr-xr-x 12 root root 4096 2022-11-09 22:16 . +drwxr-xr-x 12 root root 4096 2022-11-10 19:47 . -rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0 -rw-r--r-- 1 root root 16609 2022-03-30 19:03 ./CHANGES_AND_HINTS.TXT --rw-r--r-- 1 root root 1157302 2022-11-08 22:27 ./CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2022-11-08 22:27 ./CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 1158795 2022-11-09 22:20 ./CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2022-11-09 22:20 ./CHECKSUMS.md5.asc -rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING -rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3 -rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT -rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT --rw-r--r-- 1 root root 1950162 2022-11-09 22:16 ./ChangeLog.txt +-rw-r--r-- 1 root root 1950615 2022-11-10 19:47 ./ChangeLog.txt drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi @@ -25,7 +25,7 @@ drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh -rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg -rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg --rw-r--r-- 1 root root 1510632 2022-11-08 22:27 ./FILELIST.TXT +-rw-r--r-- 1 root root 1512587 2022-11-09 22:19 ./FILELIST.TXT -rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY -rw-r--r-- 1 root root 864745 2022-02-02 08:25 ./PACKAGES.TXT -rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT @@ -738,13 +738,13 @@ drwxr-xr-x 2 root root 4096 2008-05-07 05:21 ./pasture/source/php/pear -rwxr-xr-x 1 root root 9448 2018-05-16 22:38 ./pasture/source/php/php.SlackBuild -rw-r--r-- 1 root root 775 2017-07-07 19:25 ./pasture/source/php/php.ini-development.diff.gz -rw-r--r-- 1 root root 830 2005-12-09 05:18 ./pasture/source/php/slack-desc -drwxr-xr-x 4 root root 4096 2022-11-09 22:19 ./patches --rw-r--r-- 1 root root 54062 2022-11-09 22:19 ./patches/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2022-11-09 22:19 ./patches/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 72112 2022-11-09 22:19 ./patches/FILE_LIST --rw-r--r-- 1 root root 11737654 2022-11-09 22:19 ./patches/MANIFEST.bz2 --rw-r--r-- 1 root root 40216 2022-11-09 22:19 ./patches/PACKAGES.TXT -drwxr-xr-x 3 root root 16384 2022-11-09 22:19 ./patches/packages +drwxr-xr-x 4 root root 4096 2022-11-10 19:50 ./patches +-rw-r--r-- 1 root root 54062 2022-11-10 19:50 ./patches/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2022-11-10 19:50 ./patches/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 72112 2022-11-10 19:50 ./patches/FILE_LIST +-rw-r--r-- 1 root root 11743107 2022-11-10 19:50 ./patches/MANIFEST.bz2 +-rw-r--r-- 1 root root 40216 2022-11-10 19:50 ./patches/PACKAGES.TXT +drwxr-xr-x 3 root root 16384 2022-11-10 19:50 ./patches/packages -rw-r--r-- 1 root root 327 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txt -rw-r--r-- 1 root root 10716 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz -rw-r--r-- 1 root root 163 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz.asc @@ -860,9 +860,9 @@ drwxr-xr-x 2 root root 4096 2022-08-26 04:06 ./patches/packages/linux-5.15 -rw-r--r-- 1 root root 544 2022-07-25 18:03 ./patches/packages/perl-5.34.0-x86_64-2_slack15.0.txt -rw-r--r-- 1 root root 17057236 2022-07-25 18:03 ./patches/packages/perl-5.34.0-x86_64-2_slack15.0.txz -rw-r--r-- 1 root root 163 2022-07-25 18:03 ./patches/packages/perl-5.34.0-x86_64-2_slack15.0.txz.asc --rw-r--r-- 1 root root 345 2022-09-29 18:28 ./patches/packages/php-7.4.32-x86_64-1_slack15.0.txt --rw-r--r-- 1 root root 5828016 2022-09-29 18:28 ./patches/packages/php-7.4.32-x86_64-1_slack15.0.txz --rw-r--r-- 1 root root 163 2022-09-29 18:28 ./patches/packages/php-7.4.32-x86_64-1_slack15.0.txz.asc +-rw-r--r-- 1 root root 345 2022-11-10 19:20 ./patches/packages/php-7.4.33-x86_64-1_slack15.0.txt +-rw-r--r-- 1 root root 5822284 2022-11-10 19:20 ./patches/packages/php-7.4.33-x86_64-1_slack15.0.txz +-rw-r--r-- 1 root root 163 2022-11-10 19:20 ./patches/packages/php-7.4.33-x86_64-1_slack15.0.txz.asc -rw-r--r-- 1 root root 457 2022-06-04 18:23 ./patches/packages/pidgin-2.14.10-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 5828060 2022-06-04 18:23 ./patches/packages/pidgin-2.14.10-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-06-04 18:23 ./patches/packages/pidgin-2.14.10-x86_64-1_slack15.0.txz.asc @@ -935,7 +935,7 @@ drwxr-xr-x 2 root root 4096 2022-08-26 04:06 ./patches/packages/linux-5.15 -rw-r--r-- 1 root root 388 2022-10-15 04:05 ./patches/packages/zlib-1.2.13-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 105356 2022-10-15 04:05 ./patches/packages/zlib-1.2.13-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-10-15 04:05 ./patches/packages/zlib-1.2.13-x86_64-1_slack15.0.txz.asc -drwxr-xr-x 56 root root 4096 2022-11-09 22:09 ./patches/source +drwxr-xr-x 56 root root 4096 2022-11-10 19:30 ./patches/source drwxr-xr-x 2 root root 4096 2022-01-16 05:07 ./patches/source/aaa_base -rw-r--r-- 1 root root 11041 2022-02-15 04:49 ./patches/source/aaa_base/_aaa_base.tar.gz -rwxr-xr-x 1 root root 3894 2022-02-15 05:07 ./patches/source/aaa_base/aaa_base.SlackBuild @@ -1281,12 +1281,12 @@ drwxr-xr-x 2 root root 4096 2022-07-25 17:58 ./patches/source/perl -rwxr-xr-x 1 root root 18123 2022-07-25 17:58 ./patches/source/perl/perl.SlackBuild -rw-r--r-- 1 root root 606 2008-09-21 00:04 ./patches/source/perl/perl.configure.multilib.patch.gz -rw-r--r-- 1 root root 996 2021-05-21 04:51 ./patches/source/perl/slack-desc -drwxr-xr-x 2 root root 4096 2022-09-29 18:26 ./patches/source/php +drwxr-xr-x 2 root root 4096 2022-11-10 19:18 ./patches/source/php -rw-r--r-- 1 root root 432 2020-12-21 16:28 ./patches/source/php/doinst.sh.gz --rwxr-xr-x 1 root root 120 2022-09-29 18:17 ./patches/source/php/fetch-php.sh +-rwxr-xr-x 1 root root 120 2022-11-10 19:17 ./patches/source/php/fetch-php.sh -rw-r--r-- 1 root root 1022 2017-11-28 18:32 ./patches/source/php/mod_php.conf.example --rw-r--r-- 1 root root 10419092 2022-09-28 09:50 ./patches/source/php/php-7.4.32.tar.xz --rw-r--r-- 1 root root 833 2022-09-28 09:50 ./patches/source/php/php-7.4.32.tar.xz.asc +-rw-r--r-- 1 root root 10420144 2022-10-31 15:10 ./patches/source/php/php-7.4.33.tar.xz +-rw-r--r-- 1 root root 833 2022-10-31 15:10 ./patches/source/php/php-7.4.33.tar.xz.asc -rw-r--r-- 1 root root 387 2017-11-28 02:08 ./patches/source/php/php-fpm.conf.diff.gz -rwxr-xr-x 1 root root 10805 2022-02-18 04:53 ./patches/source/php/php.SlackBuild -rw-r--r-- 1 root root 855 2021-06-29 20:14 ./patches/source/php/php.enchant-2.patch.gz diff --git a/patches/packages/php-7.4.32-x86_64-1_slack15.0.txt b/patches/packages/php-7.4.32-x86_64-1_slack15.0.txt deleted file mode 100644 index 88937e9e0..000000000 --- a/patches/packages/php-7.4.32-x86_64-1_slack15.0.txt +++ /dev/null @@ -1,11 +0,0 @@ -php: php (HTML-embedded scripting language) -php: -php: PHP is an HTML-embedded scripting language. It shares syntax -php: characteristics with C, Java, and Perl. The primary objective behind -php: this language is to make a fast and easy-to-use scripting language -php: for dynamic web sites. -php: -php: Homepage: https://www.php.net/ -php: -php: -php: diff --git a/patches/packages/php-7.4.33-x86_64-1_slack15.0.txt b/patches/packages/php-7.4.33-x86_64-1_slack15.0.txt new file mode 100644 index 000000000..88937e9e0 --- /dev/null +++ b/patches/packages/php-7.4.33-x86_64-1_slack15.0.txt @@ -0,0 +1,11 @@ +php: php (HTML-embedded scripting language) +php: +php: PHP is an HTML-embedded scripting language. It shares syntax +php: characteristics with C, Java, and Perl. The primary objective behind +php: this language is to make a fast and easy-to-use scripting language +php: for dynamic web sites. +php: +php: Homepage: https://www.php.net/ +php: +php: +php: diff --git a/patches/source/php/fetch-php.sh b/patches/source/php/fetch-php.sh index 46f9f31f8..e44524800 100755 --- a/patches/source/php/fetch-php.sh +++ b/patches/source/php/fetch-php.sh @@ -1,2 +1,2 @@ -lftpget http://us.php.net/distributions/php-7.4.32.tar.xz.asc -lftpget http://us.php.net/distributions/php-7.4.32.tar.xz +lftpget http://us.php.net/distributions/php-7.4.33.tar.xz.asc +lftpget http://us.php.net/distributions/php-7.4.33.tar.xz -- cgit v1.2.3-79-gdb01