summaryrefslogtreecommitdiffstats
path: root/source
diff options
context:
space:
mode:
author Patrick J Volkerding <volkerdi@slackware.com>2019-03-27 20:37:56 +0000
committer Eric Hameleers <alien@slackware.com>2019-03-28 08:59:45 +0100
commitdf07d8b7cd8adb83ab622d4d45209767376db901 (patch)
tree24d2cf2338759941ae71241933e94983bbc01cb2 /source
parentadd8dff95a4576e7ec8bb22f72c661c8a0934ebb (diff)
downloadcurrent-df07d8b7cd8adb83ab622d4d45209767376db901.tar.gz
current-df07d8b7cd8adb83ab622d4d45209767376db901.tar.xz
Wed Mar 27 20:37:56 UTC 201920190327203756
a/kernel-generic-4.19.32-x86_64-1.txz: Upgraded. a/kernel-huge-4.19.32-x86_64-1.txz: Upgraded. a/kernel-modules-4.19.32-x86_64-1.txz: Upgraded. ap/hplip-3.19.3-x86_64-1.txz: Upgraded. d/kernel-headers-4.19.32-x86-1.txz: Upgraded. d/python3-3.7.3-x86_64-1.txz: Upgraded. Fixed bugs and the following security issues: bpo-36216: Changes urlsplit() to raise ValueError when the URL contains characters that decompose under IDNA encoding (NFKC-normalization) into characters that affect how the URL is parsed. bpo-35746: [CVE-2019-5010] Fix a NULL pointer deref in ssl module. The cert parser did not handle CRL distribution points with empty DP or URI correctly. A malicious or buggy certificate can result into segfault. Vulnerability (TALOS-2018-0758) reported by Colin Read and Nicolas Edet of Cisco. bpo-35121: Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with http.cookiejar.DefaultCookiePolicy policy. Patch by Karthikeyan Singaravelan. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5010 (* Security fix *) d/scons-3.0.5-x86_64-1.txz: Upgraded. k/kernel-source-4.19.32-noarch-1.txz: Upgraded. n/curl-7.64.1-x86_64-1.txz: Upgraded. n/gnutls-3.6.7-x86_64-1.txz: Upgraded. Fixes security issues: libgnutls, gnutls tools: Every gnutls_free() will automatically set the free'd pointer to NULL. This prevents possible use-after-free and double free issues. Use-after-free will be turned into NULL dereference. The counter-measure does not extend to applications using gnutls_free(). libgnutls: Fixed a memory corruption (double free) vulnerability in the certificate verification API. Reported by Tavis Ormandy; addressed with the change above. [GNUTLS-SA-2019-03-27, #694] libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages; Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] libgnutls: enforce key usage limitations on certificates more actively. Previously we would enforce it for TLS1.2 protocol, now we enforce it even when TLS1.3 is negotiated, or on client certificates as well. When an inappropriate for TLS1.3 certificate is seen on the credentials structure GnuTLS will disable TLS1.3 support for that session (#690). libgnutls: enforce the equality of the two signature parameters fields in a certificate. We were already enforcing the signature algorithm, but there was a bug in parameter checking code. (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
Diffstat (limited to 'source')
-rwxr-xr-xsource/ap/hplip/hplip.SlackBuild2
-rw-r--r--source/k/kernel-configs/config-generic-4.19.32 (renamed from source/k/kernel-configs/config-generic-4.19.31)2
-rw-r--r--source/k/kernel-configs/config-generic-4.19.32.x64 (renamed from source/k/kernel-configs/config-generic-4.19.31.x64)2
-rw-r--r--source/k/kernel-configs/config-generic-smp-4.19.32-smp (renamed from source/k/kernel-configs/config-generic-smp-4.19.31-smp)2
-rw-r--r--source/k/kernel-configs/config-huge-4.19.32 (renamed from source/k/kernel-configs/config-huge-4.19.31)2
-rw-r--r--source/k/kernel-configs/config-huge-4.19.32.x64 (renamed from source/k/kernel-configs/config-huge-4.19.31.x64)2
-rw-r--r--source/k/kernel-configs/config-huge-smp-4.19.32-smp (renamed from source/k/kernel-configs/config-huge-smp-4.19.31-smp)2
-rwxr-xr-xsource/n/curl/curl.SlackBuild4
-rw-r--r--source/n/curl/curl.aabc7ae5ecf70973add429b5acbc86d6a57e4da5.patch27
-rwxr-xr-xsource/n/gnutls/gnutls.SlackBuild2
10 files changed, 9 insertions, 38 deletions
diff --git a/source/ap/hplip/hplip.SlackBuild b/source/ap/hplip/hplip.SlackBuild
index 58ee7f147..eb1d0be8a 100755
--- a/source/ap/hplip/hplip.SlackBuild
+++ b/source/ap/hplip/hplip.SlackBuild
@@ -27,7 +27,7 @@ cd $(dirname $0) ; CWD=$(pwd)
PKGNAM=hplip
VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)}
-BUILD=${BUILD:-2}
+BUILD=${BUILD:-1}
NUMJOBS=${NUMJOBS:-" -j$(expr $(nproc) + 1) "}
diff --git a/source/k/kernel-configs/config-generic-4.19.31 b/source/k/kernel-configs/config-generic-4.19.32
index 143363ad3..d7c022efe 100644
--- a/source/k/kernel-configs/config-generic-4.19.31
+++ b/source/k/kernel-configs/config-generic-4.19.32
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.19.31 Kernel Configuration
+# Linux/x86 4.19.32 Kernel Configuration
#
#
diff --git a/source/k/kernel-configs/config-generic-4.19.31.x64 b/source/k/kernel-configs/config-generic-4.19.32.x64
index 936d73002..2e4644142 100644
--- a/source/k/kernel-configs/config-generic-4.19.31.x64
+++ b/source/k/kernel-configs/config-generic-4.19.32.x64
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.19.31 Kernel Configuration
+# Linux/x86 4.19.32 Kernel Configuration
#
#
diff --git a/source/k/kernel-configs/config-generic-smp-4.19.31-smp b/source/k/kernel-configs/config-generic-smp-4.19.32-smp
index 98788ca74..7fe5bc360 100644
--- a/source/k/kernel-configs/config-generic-smp-4.19.31-smp
+++ b/source/k/kernel-configs/config-generic-smp-4.19.32-smp
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.19.31 Kernel Configuration
+# Linux/x86 4.19.32 Kernel Configuration
#
#
diff --git a/source/k/kernel-configs/config-huge-4.19.31 b/source/k/kernel-configs/config-huge-4.19.32
index fd58141bb..a7f3bfa18 100644
--- a/source/k/kernel-configs/config-huge-4.19.31
+++ b/source/k/kernel-configs/config-huge-4.19.32
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.19.31 Kernel Configuration
+# Linux/x86 4.19.32 Kernel Configuration
#
#
diff --git a/source/k/kernel-configs/config-huge-4.19.31.x64 b/source/k/kernel-configs/config-huge-4.19.32.x64
index 834146880..482f9911d 100644
--- a/source/k/kernel-configs/config-huge-4.19.31.x64
+++ b/source/k/kernel-configs/config-huge-4.19.32.x64
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.19.31 Kernel Configuration
+# Linux/x86 4.19.32 Kernel Configuration
#
#
diff --git a/source/k/kernel-configs/config-huge-smp-4.19.31-smp b/source/k/kernel-configs/config-huge-smp-4.19.32-smp
index 11755f883..6b747f3a6 100644
--- a/source/k/kernel-configs/config-huge-smp-4.19.31-smp
+++ b/source/k/kernel-configs/config-huge-smp-4.19.32-smp
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.19.31 Kernel Configuration
+# Linux/x86 4.19.32 Kernel Configuration
#
#
diff --git a/source/n/curl/curl.SlackBuild b/source/n/curl/curl.SlackBuild
index e7a4e0a44..c11540346 100755
--- a/source/n/curl/curl.SlackBuild
+++ b/source/n/curl/curl.SlackBuild
@@ -24,7 +24,7 @@ cd $(dirname $0) ; CWD=$(pwd)
PKGNAM=curl
VERSION=${VERSION:-$(echo curl-*.tar.xz | rev | cut -f 3- -d . | cut -f 1 -d - | rev)}
-BUILD=${BUILD:-3}
+BUILD=${BUILD:-1}
# Automatically determine the architecture we're building on:
if [ -z "$ARCH" ]; then
@@ -80,8 +80,6 @@ find . \
\( -perm 666 -o -perm 664 -o -perm 600 -o -perm 444 -o -perm 440 -o -perm 400 \) \
-exec chmod 644 {} \;
-zcat $CWD/curl.aabc7ae5ecf70973add429b5acbc86d6a57e4da5.patch.gz | patch -p1 --verbose || exit 1
-
CFLAGS="$SLKCFLAGS" \
./configure \
--prefix=/usr \
diff --git a/source/n/curl/curl.aabc7ae5ecf70973add429b5acbc86d6a57e4da5.patch b/source/n/curl/curl.aabc7ae5ecf70973add429b5acbc86d6a57e4da5.patch
deleted file mode 100644
index 27de31167..000000000
--- a/source/n/curl/curl.aabc7ae5ecf70973add429b5acbc86d6a57e4da5.patch
+++ /dev/null
@@ -1,27 +0,0 @@
-From aabc7ae5ecf70973add429b5acbc86d6a57e4da5 Mon Sep 17 00:00:00 2001
-From: Daniel Stenberg <daniel@haxx.se>
-Date: Mon, 11 Feb 2019 22:57:33 +0100
-Subject: [PATCH] multi: remove verbose "Expire in" ... messages
-
-Reported-by: James Brown
-Bug: https://curl.haxx.se/mail/archive-2019-02/0013.html
-Closes #3558
----
- lib/multi.c | 3 ---
- 1 file changed, 3 deletions(-)
-
-diff --git a/lib/multi.c b/lib/multi.c
-index 6b891620f6..cd9d758ca4 100644
---- a/lib/multi.c
-+++ b/lib/multi.c
-@@ -3032,9 +3032,6 @@ void Curl_expire(struct Curl_easy *data, time_t milli, expire_id id)
-
- DEBUGASSERT(id < EXPIRE_LAST);
-
-- infof(data, "Expire in %ld ms for %x (transfer %p)\n",
-- (long)milli, id, data);
--
- set = Curl_now();
- set.tv_sec += milli/1000;
- set.tv_usec += (unsigned int)(milli%1000)*1000;
-
diff --git a/source/n/gnutls/gnutls.SlackBuild b/source/n/gnutls/gnutls.SlackBuild
index 40e523c25..2a87b9698 100755
--- a/source/n/gnutls/gnutls.SlackBuild
+++ b/source/n/gnutls/gnutls.SlackBuild
@@ -24,7 +24,7 @@ cd $(dirname $0) ; CWD=$(pwd)
PKGNAM=gnutls
VERSION=${VERSION:-$(echo gnutls-*.tar.xz | rev | cut -f 3- -d . | cut -f 1 -d - | rev)}
-BUILD=${BUILD:-2}
+BUILD=${BUILD:-1}
# Automatically determine the architecture we're building on:
if [ -z "$ARCH" ]; then