diff options
author | Patrick J Volkerding <volkerdi@slackware.com> | 2024-04-04 20:49:23 +0000 |
---|---|---|
committer | Eric Hameleers <alien@slackware.com> | 2024-04-04 23:55:21 +0200 |
commit | e0375de323e06c97669ffcca2033f414e460c413 (patch) | |
tree | 0f113c9618f635095a779e2b8f69c22b16aeb4ab /source | |
parent | ddf1c99d252a85272748efb5e6a9bf49c08207c0 (diff) | |
download | current-e0375de323e06c97669ffcca2033f414e460c413.tar.gz current-e0375de323e06c97669ffcca2033f414e460c413.tar.xz |
Thu Apr 4 20:49:23 UTC 202420240404204923
a/hwdata-0.381-noarch-1.txz: Upgraded.
a/kernel-generic-6.6.25-x86_64-1.txz: Upgraded.
a/kernel-huge-6.6.25-x86_64-1.txz: Upgraded.
a/kernel-modules-6.6.25-x86_64-1.txz: Upgraded.
d/cmake-3.29.1-x86_64-1.txz: Upgraded.
d/kernel-headers-6.6.25-x86-1.txz: Upgraded.
d/llvm-18.1.3-x86_64-1.txz: Upgraded.
k/kernel-source-6.6.25-noarch-1.txz: Upgraded.
kde/kstars-3.7.0-x86_64-1.txz: Upgraded.
l/enchant-2.6.9-x86_64-1.txz: Upgraded.
l/libclc-18.1.3-x86_64-1.txz: Upgraded.
l/sof-firmware-2024.03-noarch-1.txz: Upgraded.
n/gnutls-3.8.5-x86_64-1.txz: Upgraded.
n/httpd-2.4.59-x86_64-1.txz: Upgraded.
This update fixes security issues:
HTTP/2 DoS by memory exhaustion on endless continuation frames.
HTTP Response Splitting in multiple modules.
HTTP response splitting.
For more information, see:
https://downloads.apache.org/httpd/CHANGES_2.4.59
https://www.cve.org/CVERecord?id=CVE-2024-27316
https://www.cve.org/CVERecord?id=CVE-2024-24795
https://www.cve.org/CVERecord?id=CVE-2023-38709
(* Security fix *)
n/nghttp2-1.61.0-x86_64-1.txz: Upgraded.
This update fixes security issues:
nghttp2 library keeps reading the unbounded number of HTTP/2 CONTINUATION
frames even after a stream is reset to keep HPACK context in sync. This
causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates
this vulnerability by limiting the number of CONTINUATION frames it can
accept after a HEADERS frame.
For more information, see:
https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q
https://www.kb.cert.org/vuls/id/421644
https://www.cve.org/CVERecord?id=CVE-2024-28182
(* Security fix *)
x/xdg-desktop-portal-1.18.3-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
Diffstat (limited to 'source')
17 files changed, 31 insertions, 48 deletions
diff --git a/source/a/nvi/nvi.SlackBuild b/source/a/nvi/nvi.SlackBuild index d752ab28e..ea7859e52 100755 --- a/source/a/nvi/nvi.SlackBuild +++ b/source/a/nvi/nvi.SlackBuild @@ -98,7 +98,7 @@ cd build.unix --libdir=/usr/lib${LIBDIRSUFFIX} \ --sysconfdir=/etc \ --mandir=/usr/man \ - --docdir=/usr/doc/$PRGNAM-$VERSION \ + --docdir=/usr/doc/$PKGNAM-$VERSION \ --enable-widechar \ --disable-static \ --program-prefix="n" \ diff --git a/source/d/cmake/cmake.url b/source/d/cmake/cmake.url index ff6187767..a3dbc5c2f 100644 --- a/source/d/cmake/cmake.url +++ b/source/d/cmake/cmake.url @@ -1,2 +1,2 @@ https://github.com/Kitware/CMake/releases -https://github.com/Kitware/CMake/releases/download/v3.29.0/cmake-3.29.0.tar.gz +https://github.com/Kitware/CMake/releases/download/v3.29.1/cmake-3.29.1.tar.gz diff --git a/source/d/llvm/llvm.SlackBuild b/source/d/llvm/llvm.SlackBuild index 2cfa53b38..aab67ce71 100755 --- a/source/d/llvm/llvm.SlackBuild +++ b/source/d/llvm/llvm.SlackBuild @@ -27,7 +27,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=llvm VERSION=${VERSION:-$(echo llvm-*.tar.xz | rev | cut -f 4- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-2} +BUILD=${BUILD:-1} # For the two options below, either set both to OFF or *only one* to ON: diff --git a/source/d/llvm/llvm.url b/source/d/llvm/llvm.url index 493f26074..463ea5a9b 100644 --- a/source/d/llvm/llvm.url +++ b/source/d/llvm/llvm.url @@ -1,15 +1,15 @@ -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/llvm-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/clang-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/clang-tools-extra-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/compiler-rt-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/flang-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/lldb-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/openmp-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/polly-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/libcxx-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/libcxxabi-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/lld-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/libunwind-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/cmake-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/third-party-18.1.2.src.tar.xz -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/runtimes-18.1.2.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/llvm-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/clang-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/clang-tools-extra-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/compiler-rt-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/flang-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/lldb-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/openmp-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/polly-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/libcxx-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/libcxxabi-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/lld-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/libunwind-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/cmake-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/third-party-18.1.3.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/runtimes-18.1.3.src.tar.xz diff --git a/source/k/kernel-configs/config-generic-6.6.24 b/source/k/kernel-configs/config-generic-6.6.25 index 9d4112e14..bb645231a 100644 --- a/source/k/kernel-configs/config-generic-6.6.24 +++ b/source/k/kernel-configs/config-generic-6.6.25 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.6.24 Kernel Configuration +# Linux/x86 6.6.25 Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/source/k/kernel-configs/config-generic-6.6.24.x64 b/source/k/kernel-configs/config-generic-6.6.25.x64 index 3970e4c0e..7bf4acfb2 100644 --- a/source/k/kernel-configs/config-generic-6.6.24.x64 +++ b/source/k/kernel-configs/config-generic-6.6.25.x64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.6.24 Kernel Configuration +# Linux/x86 6.6.25 Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/source/k/kernel-configs/config-huge-6.6.24 b/source/k/kernel-configs/config-huge-6.6.25 index ab50ed97b..c8a2da44f 100644 --- a/source/k/kernel-configs/config-huge-6.6.24 +++ b/source/k/kernel-configs/config-huge-6.6.25 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.6.24 Kernel Configuration +# Linux/x86 6.6.25 Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/source/k/kernel-configs/config-huge-6.6.24.x64 b/source/k/kernel-configs/config-huge-6.6.25.x64 index db988cceb..384e52a72 100644 --- a/source/k/kernel-configs/config-huge-6.6.24.x64 +++ b/source/k/kernel-configs/config-huge-6.6.25.x64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.6.24 Kernel Configuration +# Linux/x86 6.6.25 Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/source/l/enchant/enchant.url b/source/l/enchant/enchant.url index 9d2ccb228..8c731a50c 100644 --- a/source/l/enchant/enchant.url +++ b/source/l/enchant/enchant.url @@ -1,2 +1,2 @@ https://github.com/AbiWord/enchant -https://github.com/AbiWord/enchant/releases/download/v2.6.8/enchant-2.6.8.tar.gz +https://github.com/AbiWord/enchant/releases/download/v2.6.9/enchant-2.6.9.tar.gz diff --git a/source/l/libclc/libclc.url b/source/l/libclc/libclc.url index ae4394d3c..a4d0a11e5 100644 --- a/source/l/libclc/libclc.url +++ b/source/l/libclc/libclc.url @@ -1 +1 @@ -https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.2/libclc-18.1.2.src.tar.xz +https://github.com/llvm/llvm-project/releases/download/llvmorg-18.1.3/libclc-18.1.3.src.tar.xz diff --git a/source/l/libseccomp/libseccomp.SlackBuild b/source/l/libseccomp/libseccomp.SlackBuild index 5ab046097..b2b2abd82 100755 --- a/source/l/libseccomp/libseccomp.SlackBuild +++ b/source/l/libseccomp/libseccomp.SlackBuild @@ -103,7 +103,7 @@ CXXFLAGS="$SLKCFLAGS" \ --localstatedir=/var \ --mandir=/usr/man \ --enable-static=no \ - --docdir=/usr/doc/$PRGNAM-$VERSION \ + --docdir=/usr/doc/$PKGNAM-$VERSION \ --build=$ARCH-slackware-linux || exit 1 make $NUMJOBS || make || exit 1 make install DESTDIR=$PKG || exit 1 diff --git a/source/l/sof-firmware/sof-firmware.url b/source/l/sof-firmware/sof-firmware.url index f7ff05b76..fd1bba8b5 100644 --- a/source/l/sof-firmware/sof-firmware.url +++ b/source/l/sof-firmware/sof-firmware.url @@ -1,2 +1,2 @@ -https://github.com/thesofproject/sof-bin/releases -https://github.com/thesofproject/sof-bin/releases/download/v2023.12.1/sof-bin-2023.12.1.tar.gz +https://github.com/thesofproject/sof-bin +https://github.com/thesofproject/sof-bin/releases/download/v2024.03/sof-bin-2024.03.tar.gz diff --git a/source/n/httpd/httpd-2.4.58-r1914013.patch b/source/n/httpd/httpd-2.4.58-r1914013.patch deleted file mode 100644 index f9e078632..000000000 --- a/source/n/httpd/httpd-2.4.58-r1914013.patch +++ /dev/null @@ -1,14 +0,0 @@ -# ./pullrev.sh 1914013 -http://svn.apache.org/viewvc?view=revision&revision=1914013 - ---- httpd-2.4.58/modules/filters/mod_xml2enc.c -+++ httpd-2.4.58/modules/filters/mod_xml2enc.c -@@ -209,7 +209,7 @@ - - /* to sniff, first we look for BOM */ - if (ctx->xml2enc == XML_CHAR_ENCODING_NONE) { -- ctx->xml2enc = xmlDetectCharEncoding((const xmlChar*)ctx->buf, -+ ctx->xml2enc = xmlDetectCharEncoding((const unsigned char*)ctx->buf, - ctx->bytes); - if (HAVE_ENCODING(ctx->xml2enc)) { - ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01432) diff --git a/source/n/httpd/httpd.SlackBuild b/source/n/httpd/httpd.SlackBuild index 904450cfb..ccd121e91 100755 --- a/source/n/httpd/httpd.SlackBuild +++ b/source/n/httpd/httpd.SlackBuild @@ -114,9 +114,6 @@ sed -i -e "s#lib/httpd#lib${LIBDIRSUFFIX}/httpd#" config.layout # Just use /var/run rather than /var/run/httpd. sed -i -e "s#/run/httpd#/run#" config.layout -# Fix FTBFS with recent libxml2: -cat $CWD/httpd-2.4.58-r1914013.patch | patch -p1 --verbose || exit 1 - # Configure: CFLAGS="$SLKCFLAGS" \ CXXFLAGS="$SLKCFLAGS" \ diff --git a/source/n/httpd/httpd.url b/source/n/httpd/httpd.url index fdbabad99..c60672025 100644 --- a/source/n/httpd/httpd.url +++ b/source/n/httpd/httpd.url @@ -1,2 +1,2 @@ -http://www.apache.org/dist/httpd/httpd-2.4.58.tar.bz2 -http://www.apache.org/dist/httpd/httpd-2.4.58.tar.bz2.asc +http://www.apache.org/dist/httpd/httpd-2.4.59.tar.bz2 +http://www.apache.org/dist/httpd/httpd-2.4.59.tar.bz2.asc diff --git a/source/n/nghttp2/nghttp2.url b/source/n/nghttp2/nghttp2.url index 289c251ca..9175dce90 100644 --- a/source/n/nghttp2/nghttp2.url +++ b/source/n/nghttp2/nghttp2.url @@ -1,2 +1,2 @@ https://github.com/nghttp2/nghttp2 -https://github.com/nghttp2/nghttp2/releases/download/v1.60.0/nghttp2-1.60.0.tar.xz +https://github.com/nghttp2/nghttp2/releases/download/v1.61.0/nghttp2-1.61.0.tar.xz diff --git a/source/xfce/mousepad/mousepad.SlackBuild b/source/xfce/mousepad/mousepad.SlackBuild index fa3e8bc11..ce1a38534 100755 --- a/source/xfce/mousepad/mousepad.SlackBuild +++ b/source/xfce/mousepad/mousepad.SlackBuild @@ -93,7 +93,7 @@ CXXFLAGS="$SLKCFLAGS" \ --sysconfdir=/etc \ --localstatedir=/var \ --mandir=/usr/man \ - --docdir=/usr/doc/$PRGNAM-$VERSION \ + --docdir=/usr/doc/$PKGNAM-$VERSION \ --disable-debug \ --build=$ARCH-slackware-linux || exit 1 |