From 201ae578a4cd9577f795e2d25dd65ec8533c51d3 Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Fri, 3 Feb 2023 20:04:33 +0000 Subject: Fri Feb 3 20:04:33 UTC 2023 a/aaa_glibc-solibs-2.37-x86_64-2.txz: Rebuilt. a/e2fsprogs-1.46.6-x86_64-1.txz: Upgraded. a/hwdata-0.367-noarch-1.txz: Upgraded. l/glibc-2.37-x86_64-2.txz: Rebuilt. [PATCH] Account for grouping in printf width (bug 23432). This issue could cause a overflow with sprintf in the corner case where an application computes the size of buffer to be exactly enough to fit the digits in question, but sprintf ends up writing a couple of extra bytes. Thanks to marav for the heads-up. For more information, see: https://www.cve.org/CVERecord?id=CVE-2023-25139 (* Security fix *) l/glibc-i18n-2.37-x86_64-2.txz: Rebuilt. l/glibc-profile-2.37-x86_64-2.txz: Rebuilt. l/libcap-2.67-x86_64-1.txz: Upgraded. l/poppler-data-0.4.12-noarch-1.txz: Upgraded. extra/php81/php81-8.1.15-x86_64-1.txz: Upgraded. testing/packages/samba-4.17.5-x86_64-2.txz: Rebuilt. Build with the bundled Heimdal instead of the system MIT Kerberos, since MIT Kerberos has more issues when Samba is used as an AD DC. I'd appreciate any feedback on the "Samba on Slackware 15" thread on LQ about how well this works. Although it's not the sort of change I'd normally make in a -stable release such as Slackware 15.0, in this case I'm considering it if it can be done painlessly for any existing users... but I'll need to see some reports about this. I'd like to note that yes, of course we saw the "experimental" label in the configure flag we used to build Samba, but we also saw another prominent Linux distribution go ahead and use it anyway. :) And the Samba package built against MIT Kerberos cooked in the previous -current development cycle for a couple of years without any objections. Anyway, hopefully we'll get some testing from folks out there with networks that use AD and go from there. Thanks to Rowland Penny of the Samba team for clarifying this situation. --- ChangeLog.rss | 46 ++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 44 insertions(+), 2 deletions(-) (limited to 'ChangeLog.rss') diff --git a/ChangeLog.rss b/ChangeLog.rss index 5db826ffc..4076e8342 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,9 +11,51 @@ Tracking Slackware development in git. en-us urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f - Thu, 2 Feb 2023 22:52:48 GMT - Thu, 2 Feb 2023 23:42:29 GMT + Fri, 3 Feb 2023 20:04:33 GMT + Fri, 3 Feb 2023 20:35:06 GMT maintain_current_git.sh v 1.17 + + Fri, 3 Feb 2023 20:04:33 GMT + Fri, 3 Feb 2023 20:04:33 GMT + https://git.slackware.nl/current/tag/?h=20230203200433 + 20230203200433 + + +a/aaa_glibc-solibs-2.37-x86_64-2.txz: Rebuilt. +a/e2fsprogs-1.46.6-x86_64-1.txz: Upgraded. +a/hwdata-0.367-noarch-1.txz: Upgraded. +l/glibc-2.37-x86_64-2.txz: Rebuilt. + [PATCH] Account for grouping in printf width (bug 23432). + This issue could cause a overflow with sprintf in the corner case where an + application computes the size of buffer to be exactly enough to fit the + digits in question, but sprintf ends up writing a couple of extra bytes. + Thanks to marav for the heads-up. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2023-25139 + (* Security fix *) +l/glibc-i18n-2.37-x86_64-2.txz: Rebuilt. +l/glibc-profile-2.37-x86_64-2.txz: Rebuilt. +l/libcap-2.67-x86_64-1.txz: Upgraded. +l/poppler-data-0.4.12-noarch-1.txz: Upgraded. +extra/php81/php81-8.1.15-x86_64-1.txz: Upgraded. +testing/packages/samba-4.17.5-x86_64-2.txz: Rebuilt. + Build with the bundled Heimdal instead of the system MIT Kerberos, since MIT + Kerberos has more issues when Samba is used as an AD DC. I'd appreciate any + feedback on the "Samba on Slackware 15" thread on LQ about how well this + works. Although it's not the sort of change I'd normally make in a -stable + release such as Slackware 15.0, in this case I'm considering it if it can + be done painlessly for any existing users... but I'll need to see some + reports about this. I'd like to note that yes, of course we saw the + "experimental" label in the configure flag we used to build Samba, but we + also saw another prominent Linux distribution go ahead and use it anyway. :) + And the Samba package built against MIT Kerberos cooked in the previous + -current development cycle for a couple of years without any objections. + Anyway, hopefully we'll get some testing from folks out there with networks + that use AD and go from there. + Thanks to Rowland Penny of the Samba team for clarifying this situation. + ]]> + + Thu, 2 Feb 2023 22:52:48 GMT Thu, 2 Feb 2023 22:52:48 GMT -- cgit v1.2.3-79-gdb01