diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2020-05-19 19:47:49 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2020-05-20 09:00:04 +0200 |
| commit | 26cd2dd0d1823fa8a3bd95d273dc4f1ec5bdb048 (patch) | |
| tree | 6c966f78a2f38c7141fda47144ac28da8b798137 /source/l | |
| parent | bb7dc1ffb7eb47db06eded668ce6c9e8eaa9cec0 (diff) | |
| download | current-26cd2dd0d1823fa8a3bd95d273dc4f1ec5bdb048.tar.gz current-26cd2dd0d1823fa8a3bd95d273dc4f1ec5bdb048.tar.xz | |
Tue May 19 19:47:49 UTC 202020200519194749
a/shadow-4.8.1-x86_64-8.txz: Rebuilt.
It seems that /etc/suauth is not supported when PAM is in use, even if
configure.ac is hacked to enable it. I've removed the man pages for it,
and would suggest using sudo as a replacement.
l/libexif-0.6.22-x86_64-1.txz: Upgraded.
This update fixes bugs and security issues:
CVE-2018-20030: Fix for recursion DoS
CVE-2020-13114: Time consumption DoS when parsing canon array markers
CVE-2020-13113: Potential use of uninitialized memory
CVE-2020-13112: Various buffer overread fixes due to integer overflows
in maker notes
CVE-2020-0093: read overflow
CVE-2019-9278: replaced integer overflow checks the compiler could
optimize away by safer constructs
CVE-2020-12767: fixed division by zero
CVE-2016-6328: fixed integer overflow when parsing maker notes
CVE-2017-7544: fixed buffer overread
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20030
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13114
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13113
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13112
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0093
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9278
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12767
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6328
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7544
(* Security fix *)
l/oniguruma-6.9.5_rev1-x86_64-2.txz: Rebuilt.
Rebuilt with --enable-posix-api. Thanks to MisterL.
l/python-packaging-20.4-x86_64-1.txz: Upgraded.
n/bind-9.16.3-x86_64-1.txz: Upgraded.
This update fixes a security issue:
A malicious actor who intentionally exploits the lack of effective
limitation on the number of fetches performed when processing referrals
can, through the use of specially crafted referrals, cause a recursing
server to issue a very large number of fetches in an attempt to process
the referral. This has at least two potential effects: The performance of
the recursing server can potentially be degraded by the additional work
required to perform these fetches, and the attacker can exploit this
behavior to use the recursing server as a reflector in a reflection attack
with a high amplification factor.
For more information, see:
https://kb.isc.org/docs/cve-2020-8616
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8616
(* Security fix *)
x/fontconfig-2.13.92-x86_64-1.txz: Upgraded.
x/xf86-input-libinput-0.30.0-x86_64-1.txz: Upgraded.
Diffstat (limited to 'source/l')
| -rwxr-xr-x | source/l/libexif/libexif.SlackBuild | 2 | ||||
| -rw-r--r-- | source/l/libexif/libexif.url | 1 | ||||
| -rw-r--r-- | source/l/libexif/slack-desc | 2 | ||||
| -rwxr-xr-x | source/l/oniguruma/oniguruma.SlackBuild | 3 | ||||
| -rwxr-xr-x | source/l/python-packaging/python-packaging.SlackBuild | 2 |
5 files changed, 6 insertions, 4 deletions
diff --git a/source/l/libexif/libexif.SlackBuild b/source/l/libexif/libexif.SlackBuild index 3a0f3319f..384e8f185 100755 --- a/source/l/libexif/libexif.SlackBuild +++ b/source/l/libexif/libexif.SlackBuild @@ -24,7 +24,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=libexif VERSION=${VERSION:-$(echo libexif-*.tar.?z* | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-2} +BUILD=${BUILD:-1} # Automatically determine the architecture we're building on: if [ -z "$ARCH" ]; then diff --git a/source/l/libexif/libexif.url b/source/l/libexif/libexif.url new file mode 100644 index 000000000..a89894e47 --- /dev/null +++ b/source/l/libexif/libexif.url @@ -0,0 +1 @@ +https://github.com/libexif/libexif/ diff --git a/source/l/libexif/slack-desc b/source/l/libexif/slack-desc index ee12ae10c..378cab10b 100644 --- a/source/l/libexif/slack-desc +++ b/source/l/libexif/slack-desc @@ -13,7 +13,7 @@ libexif: to store extra information in images such as the JPEG files produced libexif: by digital cameras. The libexif library allows programs such as libexif: gthumb to parse, edit, and save EXIF data. libexif: -libexif: +libexif: Homepage: https://libexif.github.io libexif: libexif: libexif: diff --git a/source/l/oniguruma/oniguruma.SlackBuild b/source/l/oniguruma/oniguruma.SlackBuild index 68573881b..cde0b2646 100755 --- a/source/l/oniguruma/oniguruma.SlackBuild +++ b/source/l/oniguruma/oniguruma.SlackBuild @@ -25,7 +25,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=oniguruma SRCNAM=oniguruma VERSION=${VERSION:-$(echo $SRCNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-1} +BUILD=${BUILD:-2} # Automatically determine the architecture we're building on: if [ -z "$ARCH" ]; then @@ -100,6 +100,7 @@ CXXFLAGS="$SLKCFLAGS" \ --localstatedir=/var \ --docdir=/usr/doc/$PKGNAM-$VERSION \ --mandir=/usr/man \ + --enable-posix-api \ --disable-static \ --build=$ARCH-slackware-linux || exit 1 make $NUMJOBS || make || exit 1 diff --git a/source/l/python-packaging/python-packaging.SlackBuild b/source/l/python-packaging/python-packaging.SlackBuild index 26d8f4c21..8d3430d7a 100755 --- a/source/l/python-packaging/python-packaging.SlackBuild +++ b/source/l/python-packaging/python-packaging.SlackBuild @@ -25,7 +25,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=python-packaging VERSION=${VERSION:-$(echo packaging-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-2} +BUILD=${BUILD:-1} SRCNAM=packaging |