summaryrefslogtreecommitdiffstats
path: root/ChangeLog.txt
diff options
context:
space:
mode:
Diffstat (limited to 'ChangeLog.txt')
-rw-r--r--ChangeLog.txt58
1 files changed, 58 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt
index 71c769df5..633cc9c9b 100644
--- a/ChangeLog.txt
+++ b/ChangeLog.txt
@@ -1,3 +1,61 @@
+Thu Feb 18 20:47:35 UTC 2021
+xap/mozilla-firefox-78.7.1esr-x86_64-1.txz: Upgraded.
+ It looks like rebuilding Firefox with Rust 1.50.0 causes it to crash on
+ HTML5 streams, so let's drop back to this build. 78.8.0 is coming soon
+ and hopefully it'll fix this.
++--------------------------+
+Thu Feb 18 19:29:30 UTC 2021
+a/kernel-generic-5.10.17-x86_64-1.txz: Upgraded.
+a/kernel-huge-5.10.17-x86_64-1.txz: Upgraded.
+a/kernel-modules-5.10.17-x86_64-1.txz: Upgraded.
+a/lrzip-0.640-x86_64-1.txz: Upgraded.
+a/pkgtools-15.0-noarch-37.txz: Rebuilt.
+ installpkg: in --terse mode, fix formatting for the uncommon situation
+ where numfmt produces a 5 character output e.g. 1000K.
+ Thanks to Karl Magnus Kolstø.
+ap/mariadb-10.5.9-x86_64-1.txz: Upgraded.
+d/kernel-headers-5.10.17-x86-1.txz: Upgraded.
+d/llvm-11.1.0-x86_64-1.txz: Upgraded.
+ Shared library .so-version bump.
+d/rust-1.50.0-x86_64-1.txz: Upgraded.
+d/strace-5.11-x86_64-1.txz: Upgraded.
+k/kernel-source-5.10.17-noarch-1.txz: Upgraded.
+kde/kdevelop-5.6.2-x86_64-3.txz: Rebuilt.
+ Recompiled against llvm-11.1.0.
+l/libedit-20210216_3.1-x86_64-1.txz: Upgraded.
+l/libiodbc-3.52.14-x86_64-1.txz: Upgraded.
+l/pipewire-0.3.22-x86_64-1.txz: Upgraded.
+l/qt5-5.15.2-x86_64-5.txz: Rebuilt.
+ Recompiled against llvm-11.1.0.
+l/vte-0.62.3-x86_64-1.txz: Upgraded.
+n/bind-9.16.12-x86_64-1.txz: Upgraded.
+ This update fixes a security issue:
+ When tkey-gssapi-keytab or tkey-gssapi-credential was configured, a
+ specially crafted GSS-TSIG query could cause a buffer overflow in the
+ ISC implementation of SPNEGO (a protocol enabling negotiation of the
+ security mechanism to use for GSSAPI authentication). This flaw could
+ be exploited to crash named. Theoretically, it also enabled remote code
+ execution, but achieving the latter is very difficult in real-world
+ conditions.
+ For more information, see:
+ https://kb.isc.org/docs/cve-2020-8625
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8625
+ (* Security fix *)
+n/libgcrypt-1.9.2-x86_64-1.txz: Upgraded.
+n/nettle-3.7.1-x86_64-1.txz: Upgraded.
+n/s-nail-14.9.21-x86_64-3.txz: Rebuilt.
+ The dotlock utility doesn't work with glibc-2.33 (another case where changes
+ to sandboxed functions are needed), but we really don't need it anyway so
+ just rebuild without it. Thanks to Paulo2.
+x/mesa-20.3.4-x86_64-3.txz: Rebuilt.
+ Recompiled against llvm-11.1.0.
+xap/mozilla-firefox-78.7.1esr-x86_64-2.txz: Rebuilt.
+xap/mozilla-thunderbird-78.7.1-x86_64-2.txz: Rebuilt.
+xap/seamonkey-2.53.6-x86_64-2.txz: Rebuilt.
+isolinux/initrd.img: Rebuilt.
+kernels/*: Upgraded.
+usb-and-pxe-installers/usbboot.img: Rebuilt.
++--------------------------+
Tue Feb 16 20:57:36 UTC 2021
a/aaa_libraries-15.0-x86_64-3.txz: Rebuilt.
Moved libzstd to /lib{,64}. Thanks to slackwhere and TommyC7.