diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2023-02-03 20:04:33 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2023-02-03 21:35:10 +0100 |
| commit | 201ae578a4cd9577f795e2d25dd65ec8533c51d3 (patch) | |
| tree | 31b568866deffda8bd039d397044c8ccd6324f2a /recompress.sh | |
| parent | 9de77f5e56e5de8a14904474ed645f2bdd6ed5bf (diff) | |
| download | current-201ae578a4cd9577f795e2d25dd65ec8533c51d3.tar.gz current-201ae578a4cd9577f795e2d25dd65ec8533c51d3.tar.xz | |
Fri Feb 3 20:04:33 UTC 202320230203200433
a/aaa_glibc-solibs-2.37-x86_64-2.txz: Rebuilt.
a/e2fsprogs-1.46.6-x86_64-1.txz: Upgraded.
a/hwdata-0.367-noarch-1.txz: Upgraded.
l/glibc-2.37-x86_64-2.txz: Rebuilt.
[PATCH] Account for grouping in printf width (bug 23432).
This issue could cause a overflow with sprintf in the corner case where an
application computes the size of buffer to be exactly enough to fit the
digits in question, but sprintf ends up writing a couple of extra bytes.
Thanks to marav for the heads-up.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-25139
(* Security fix *)
l/glibc-i18n-2.37-x86_64-2.txz: Rebuilt.
l/glibc-profile-2.37-x86_64-2.txz: Rebuilt.
l/libcap-2.67-x86_64-1.txz: Upgraded.
l/poppler-data-0.4.12-noarch-1.txz: Upgraded.
extra/php81/php81-8.1.15-x86_64-1.txz: Upgraded.
testing/packages/samba-4.17.5-x86_64-2.txz: Rebuilt.
Build with the bundled Heimdal instead of the system MIT Kerberos, since MIT
Kerberos has more issues when Samba is used as an AD DC. I'd appreciate any
feedback on the "Samba on Slackware 15" thread on LQ about how well this
works. Although it's not the sort of change I'd normally make in a -stable
release such as Slackware 15.0, in this case I'm considering it if it can
be done painlessly for any existing users... but I'll need to see some
reports about this. I'd like to note that yes, of course we saw the
"experimental" label in the configure flag we used to build Samba, but we
also saw another prominent Linux distribution go ahead and use it anyway. :)
And the Samba package built against MIT Kerberos cooked in the previous
-current development cycle for a couple of years without any objections.
Anyway, hopefully we'll get some testing from folks out there with networks
that use AD and go from there.
Thanks to Rowland Penny of the Samba team for clarifying this situation.
Diffstat (limited to 'recompress.sh')
| -rwxr-xr-x | recompress.sh | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/recompress.sh b/recompress.sh index 089cc9fa2..d69a8c4e1 100755 --- a/recompress.sh +++ b/recompress.sh @@ -710,6 +710,7 @@ gzip ./source/t/xfig/xfig.fig.ad.diff gzip ./source/l/glibc/glibc.ru_RU.CP1251.diff gzip ./source/l/glibc/glibc.locale.no-archive.diff gzip ./source/l/glibc/patches/reenable_DT_HASH.patch +gzip ./source/l/glibc/patches/CVE-2023-25139.patch gzip ./source/l/glibc/glibc-2.32.en_US.no.am.pm.date.format.diff gzip ./source/l/fuse/fuse2-0007-util-ulockmgr_server.c-conditionally-define-closefro.patch gzip ./source/l/fuse/doinst.sh @@ -1151,6 +1152,9 @@ gzip ./source/x/ibus/emoji-test.txt gzip ./source/x/xcm/xcm.udev.rules.diff gzip ./source/x/libva/doinst.sh gzip ./testing/source/rust/link_libffi.diff +gzip ./testing/source/samba/smb.conf.diff +gzip ./testing/source/samba/doinst.sh +gzip ./testing/source/samba/samba.libsmbclient.h.ffmpeg.compat.diff gzip ./pasture/source/php/php-fpm.conf.diff gzip ./pasture/source/php/doinst.sh gzip ./pasture/source/php/PHP-5.6.31-OpenSSL-1.1.0-compatibility-20170801.patch |