diff options
author | Patrick J Volkerding <volkerdi@slackware.com> | 2024-04-19 19:36:17 +0000 |
---|---|---|
committer | Eric Hameleers <alien@slackware.com> | 2024-04-19 21:59:51 +0200 |
commit | ed81ac8ddaafd71f8b94096a87aae978c25c65c8 (patch) | |
tree | 7e0ad100feb83dca52e14828cbf0655c7058b7e0 /source/xap | |
parent | f924be94d261d8f6594c864c8bef34eae5970b64 (diff) | |
download | current-ed81ac8ddaafd71f8b94096a87aae978c25c65c8.tar.gz current-ed81ac8ddaafd71f8b94096a87aae978c25c65c8.tar.xz |
Fri Apr 19 19:36:17 UTC 202420240419193617
a/elogind-252.23-x86_64-3.txz: Rebuilt.
All right, it's time to stop the bleeding (edge). This has been verified as
the last working version of elogind, so we'll revert for now while moving the
newer sources into /testing. We didn't actually *need* the 255 branch for
libgudev (I was mistakenly under that impression), so this will be fine for
now. We'll keep an eye on upstream and move forward when things settle down.
d/vala-0.56.17-x86_64-1.txz: Upgraded.
l/gdk-pixbuf2-2.42.11-x86_64-1.txz: Upgraded.
l/gtk4-4.14.3-x86_64-1.txz: Upgraded.
l/polkit-124-x86_64-2.txz: Rebuilt.
Recompiled against elogind-252.23.
l/python-sphinx-7.3.7-x86_64-1.txz: Upgraded.
n/NetworkManager-1.46.0-x86_64-2.txz: Rebuilt.
Build with meson instead of autotools, since setting session_tracking to
elogind is ignored with autotools, and is set to consolekit instead.
While this didn't seem to make a difference in practice, better to get this
right now and rule it out as part of the issue.
Thanks to marav and LuckyCyborg for the options hints.
x/xdg-desktop-portal-1.18.4-x86_64-1.txz: Upgraded.
xap/freerdp-2.11.6-x86_64-1.txz: Upgraded.
This release is a security release and addresses multiple issues:
[Low] OutOfBound Read in zgfx_decompress_segment.
[Moderate] Integer overflow & OutOfBound Write in
clear_decompress_residual_data.
[Low] integer underflow in nsc_rle_decode.
[Low] OutOfBound Read in planar_skip_plane_rle.
[Low] OutOfBound Read in ncrush_decompress.
[Low] OutOfBound Read in interleaved_decompress.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-32041
https://www.cve.org/CVERecord?id=CVE-2024-32039
https://www.cve.org/CVERecord?id=CVE-2024-32040
https://www.cve.org/CVERecord?id=CVE-2024-32458
https://www.cve.org/CVERecord?id=CVE-2024-32459
https://www.cve.org/CVERecord?id=CVE-2024-32460
(* Security fix *)
Diffstat (limited to 'source/xap')
-rwxr-xr-x | source/xap/freerdp/freerdp.SlackBuild | 2 | ||||
-rwxr-xr-x | source/xap/mozilla-firefox/mozilla-firefox.SlackBuild | 2 | ||||
-rwxr-xr-x | source/xap/mozilla-thunderbird/mozilla-thunderbird.SlackBuild | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/source/xap/freerdp/freerdp.SlackBuild b/source/xap/freerdp/freerdp.SlackBuild index 6252d5db3..21e78ee05 100755 --- a/source/xap/freerdp/freerdp.SlackBuild +++ b/source/xap/freerdp/freerdp.SlackBuild @@ -24,7 +24,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=freerdp VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-2} +BUILD=${BUILD:-1} # Automatically determine the architecture we're building on: if [ -z "$ARCH" ]; then diff --git a/source/xap/mozilla-firefox/mozilla-firefox.SlackBuild b/source/xap/mozilla-firefox/mozilla-firefox.SlackBuild index ab6c28373..92d0f6e84 100755 --- a/source/xap/mozilla-firefox/mozilla-firefox.SlackBuild +++ b/source/xap/mozilla-firefox/mozilla-firefox.SlackBuild @@ -279,7 +279,7 @@ if [ ! -z $MOZLOCALIZE ]; then fi # They say to use the second line, not the first. -# But they're not the boos of me. +# But they're not the boss of me. export MACH_USE_SYSTEM_PYTHON="1" #export MACH_BUILD_PYTHON_NATIVE_PACKAGE_SOURCE=system export MOZILLA_OFFICIAL="1" diff --git a/source/xap/mozilla-thunderbird/mozilla-thunderbird.SlackBuild b/source/xap/mozilla-thunderbird/mozilla-thunderbird.SlackBuild index b4cfb0cde..58ecad05b 100755 --- a/source/xap/mozilla-thunderbird/mozilla-thunderbird.SlackBuild +++ b/source/xap/mozilla-thunderbird/mozilla-thunderbird.SlackBuild @@ -250,7 +250,7 @@ if [ ! -z $MOZLOCALIZE ]; then fi # They say to use the second line, not the first. -# But they're not the boos of me. +# But they're not the boss of me. export MACH_USE_SYSTEM_PYTHON="1" #export MACH_BUILD_PYTHON_NATIVE_PACKAGE_SOURCE=system export BUILD_OFFICIAL=1 |