| Commit message (Expand) | Author | Files | Lines |
2019-04-23 | Mon Apr 22 20:00:44 UTC 2019...a/aaa_terminfo-6.1_20190420-x86_64-1.txz: Upgraded.
l/ncurses-6.1_20190420-x86_64-1.txz: Upgraded.
n/wpa_supplicant-2.8-x86_64-1.txz: Upgraded.
xap/xpdf-4.00-x86_64-4.txz: Rebuilt.
Recompiled with -DSYSTEM_XPDFRC="/etc/xpdfrc". Thanks to J_W.
20190422200044 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 11 | -144/+147 |
2019-04-22 | Sun Apr 21 18:45:54 UTC 2019...a/bash-5.0.007-x86_64-1.txz: Upgraded.
d/parallel-20190422-noarch-1.txz: Upgraded.
n/NetworkManager-1.18.1-x86_64-1.txz: Upgraded.
20190421184554 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 12 | -64/+385 |
2019-04-21 | Sun Apr 21 03:36:58 UTC 2019...a/kernel-generic-4.19.36-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.36-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.36-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.36-x86-1.txz: Upgraded.
k/kernel-source-4.19.36-noarch-1.txz: Upgraded.
l/imagemagick-6.9.10_41-x86_64-1.txz: Upgraded.
l/pycairo-1.18.1-x86_64-1.txz: Upgraded.
l/pygobject3-3.32.1-x86_64-1.txz: Upgraded.
l/v4l-utils-1.16.5-x86_64-2.txz: Rebuilt.
Reverted commit from upstream git that broke DVB. Thanks to Andrea Peluso.
x/libdrm-2.4.98-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190421033658 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 20 | -124/+271 |
2019-04-20 | Fri Apr 19 20:26:12 UTC 2019...d/perl-5.28.2-x86_64-1.txz: Upgraded.
Modules upgraded:
DBD-mysql-4.050, IO-Socket-SSL-2.066, TermReadKey-2.38, URI-1.76.
l/gst-plugins-base-1.16.0-x86_64-1.txz: Upgraded.
l/gst-plugins-good-1.16.0-x86_64-1.txz: Upgraded.
l/gst-plugins-libav-1.16.0-x86_64-1.txz: Upgraded.
l/gstreamer-1.16.0-x86_64-1.txz: Upgraded.
l/python-urllib3-1.24.2-x86_64-1.txz: Upgraded.
extra/pure-alsa-system/gst-plugins-good-1.16.0-x86_64-1_alsa.txz: Upgraded.
20190419202612 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 9 | -109/+121 |
2019-04-19 | Thu Apr 18 21:13:58 UTC 2019...ap/ksh93-20190416_7d7bba3e-x86_64-1.txz: Upgraded.
ap/sysstat-12.1.4-x86_64-1.txz: Upgraded.
l/gvfs-1.40.1-x86_64-2.txz: Rebuilt.
Recompiled against libcdio-2.1.0.
l/icu4c-64.2-x86_64-1.txz: Upgraded.
l/libcddb-1.3.2-x86_64-6.txz: Rebuilt.
Recompiled against libcdio-2.1.0.
l/libcdio-2.1.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libcdio-paranoia-10.2+2.0.0-x86_64-2.txz: Rebuilt.
Recompiled against libcdio-2.1.0.
l/zstd-1.4.0-x86_64-1.txz: Upgraded.
n/dhcpcd-7.2.0-x86_64-1.txz: Upgraded.
n/dovecot-2.3.5.2-x86_64-1.txz: Upgraded.
This update fixes a security issue:
Trying to login with 8bit username containing invalid UTF8 input causes
auth process to crash if auth policy is enabled. This could be used rather
easily to cause a DoS. Similar crash also happens during mail delivery
when using invalid UTF8 in From or Subject header when OX push
notification driver is used.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10691
(* Security fix *)
n/nghttp2-1.38.0-x86_64-1.txz: Upgraded.
n/openssh-8.0p1-x86_64-1.txz: Upgraded.
This release contains a mitigation for a weakness in the scp(1) tool
and protocol (CVE-2019-6111): when copying files from a remote system
to a local directory, scp(1) did not verify that the filenames that
the server sent matched those requested by the client. This could
allow a hostile server to create or clobber unexpected local files
with attacker-controlled content.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111
(* Security fix *)
xap/MPlayer-20190418-x86_64-1.txz: Upgraded.
Compiled against libcdio-2.1.0.
xap/audacious-plugins-3.10.1-x86_64-2.txz: Rebuilt.
Recompiled against libcdio-2.1.0.
extra/pure-alsa-system/MPlayer-20190418-x86_64-1_alsa.txz: Upgraded.
Compiled against libcdio-2.1.0.
extra/pure-alsa-system/audacious-plugins-3.10.1-x86_64-2_alsa.txz: Rebuilt.
Recompiled against libcdio-2.1.0.
20190418211358 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 14 | -133/+232 |
2019-04-18 | Wed Apr 17 20:27:23 UTC 2019...a/kernel-generic-4.19.35-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.35-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.35-x86_64-1.txz: Upgraded.
ap/sqlite-3.28.0-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.35-x86-1.txz: Upgraded.
d/meson-0.50.1-x86_64-1.txz: Upgraded.
d/ruby-2.6.3-x86_64-1.txz: Upgraded.
k/kernel-source-4.19.35-noarch-1.txz: Upgraded.
l/Mako-1.0.9-x86_64-1.txz: Upgraded.
l/libcap-2.27-x86_64-1.txz: Upgraded.
l/libpng-1.6.37-x86_64-1.txz: Upgraded.
This update fixes security issues:
Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
Fixed a memory leak in pngtest.c.
Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
contrib/pngminus; refactor.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14048
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14550
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7317
(* Security fix *)
l/libpsl-0.21.0-x86_64-1.txz: Upgraded.
l/pcre2-10.33-x86_64-1.txz: Upgraded.
l/pyparsing-2.4.0-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190417202723 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 23 | -207/+403 |
2019-04-16 | Mon Apr 15 19:46:20 UTC 2019...ap/nano-4.1-x86_64-1.txz: Upgraded.
l/giflib-5.1.9-x86_64-2.txz: Rebuilt.
Restore GifQuantizeBuffer and other deprecated functions to the shared
library. Thanks to Skaendo.
l/glib2-2.60.1-x86_64-1.txz: Upgraded.
l/orc-0.4.29-x86_64-1.txz: Upgraded.
20190415194620 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 7 | -47/+92 |
2019-04-15 | Sun Apr 14 18:30:06 UTC 2019...d/Cython-0.29.7-x86_64-1.txz: Upgraded.
20190414183006 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 5 | -28/+51 |
2019-04-14 | Sat Apr 13 19:44:43 UTC 2019...l/imagemagick-6.9.10_40-x86_64-1.txz: Upgraded.
l/opus-1.3.1-x86_64-1.txz: Upgraded.
n/libqmi-1.22.4-x86_64-1.txz: Upgraded.
20190413194443 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 7 | -42/+119 |
2019-04-13 | Fri Apr 12 22:13:09 UTC 2019...a/gawk-5.0.0-x86_64-1.txz: Upgraded.
ap/pamixer-1.4-x86_64-2.txz: Rebuilt.
Recompiled against boost-1.70.0.
ap/vim-8.1.1157-x86_64-1.txz: Upgraded.
d/cmake-3.14.2-x86_64-1.txz: Upgraded.
e/emacs-26.2-x86_64-1.txz: Upgraded.
kde/calligra-2.9.11-x86_64-30.txz: Rebuilt.
Recompiled against boost-1.70.0.
l/akonadi-1.13.0-x86_64-12.txz: Rebuilt.
Recompiled against boost-1.70.0.
l/boost-1.70.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
Note: Boost now provides its own BoostConfig.cmake config file, and it may
not work with all existing code (here, calligra stumbled over it). At this
point it's not clear if the included cmake config files are buggy, or if
affected projects need to change something in order to use them, but there's
an easy workaround to use cmake's FindBoost.cmake (as was used previously).
Add this to the call to cmake from any affected project (if cmake fails with
an error: "No suitable build variant has been found."):
-DBoost_NO_BOOST_CMAKE=ON
n/libmbim-1.18.2-x86_64-1.txz: Upgraded.
n/nfs-utils-2.3.3-x86_64-3.txz: Rebuilt.
rc.nfsd: don't try to create the nfsv4recoverydir - the build script will
determine the directory to use and include it in the package.
rc.nfsd: drop 2.4 kernel support, and use better code for mounting the nfsd
filesystem.
Thanks to shasta.
x/libwacom-0.33-x86_64-1.txz: Upgraded.
xap/vim-gvim-8.1.1157-x86_64-1.txz: Upgraded.
20190412221309 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 12 | -114/+185 |
2019-04-12 | Thu Apr 11 21:59:35 UTC 2019...d/rust-1.34.0-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.8-x86_64-1.txz: Upgraded.
n/stunnel-5.53-x86_64-1.txz: Upgraded.
x/mesa-19.0.2-x86_64-1.txz: Upgraded.
20190411215935 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 5 | -57/+77 |
2019-04-11 | Wed Apr 10 21:34:05 UTC 2019...a/kernel-firmware-20190409_260cb35-noarch-1.txz: Upgraded.
x/libva-utils-2.4.1-x86_64-1.txz: Upgraded.
x/pixman-0.38.4-x86_64-1.txz: Upgraded.
20190410213405 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 3 | -34/+52 |
2019-04-10 | Tue Apr 9 17:56:00 UTC 2019...a/util-linux-2.33.2-x86_64-1.txz: Upgraded.
d/vala-0.44.3-x86_64-1.txz: Upgraded.
l/apr-1.7.0-x86_64-1.txz: Upgraded.
l/at-spi2-core-2.32.1-x86_64-1.txz: Upgraded.
l/gvfs-1.40.1-x86_64-1.txz: Upgraded.
l/libbluray-1.1.1-x86_64-1.txz: Upgraded.
l/libsoup-2.66.1-x86_64-1.txz: Upgraded.
l/vte-0.56.1-x86_64-1.txz: Upgraded.
n/stunnel-5.52-x86_64-1.txz: Upgraded.
x/libinput-1.13.1-x86_64-1.txz: Upgraded.
20190409175600 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 8 | -119/+117 |
2019-04-09 | Mon Apr 8 20:39:32 UTC 2019...a/glibc-zoneinfo-2019a-noarch-1.txz: Upgraded.
a/grub-2.02-x86_64-5.txz: Rebuilt.
Support F2FS filesystem. Thanks to Nille_kungen.
ap/cups-filters-1.22.5-x86_64-1.txz: Upgraded.
ap/itstool-2.0.6-x86_64-1.txz: Upgraded.
d/python-setuptools-41.0.0-x86_64-1.txz: Upgraded.
l/gobject-introspection-1.60.1-x86_64-1.txz: Upgraded.
l/imagemagick-6.9.10_39-x86_64-1.txz: Upgraded.
l/libcroco-0.6.13-x86_64-1.txz: Upgraded.
l/libnotify-0.7.8-x86_64-1.txz: Upgraded.
n/cifs-utils-6.9-x86_64-1.txz: Upgraded.
n/nfs-utils-2.3.3-x86_64-2.txz: Rebuilt.
Include recovery directory. Thanks to upnort.
n/samba-4.10.2-x86_64-1.txz: Upgraded.
This is a security release in order to address the following defects:
World writable files in Samba AD DC private/ dir.
Save registry file outside share as unprivileged user.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3870
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3880
(* Security fix *)
x/libva-2.4.1-x86_64-1.txz: Upgraded.
x/pixman-0.38.2-x86_64-1.txz: Upgraded.
xap/gimp-2.10.10-x86_64-1.txz: Upgraded.
20190408203932 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 13 | -257/+1863 |
2019-04-07 | Sat Apr 6 17:21:20 UTC 2019...a/kernel-generic-4.19.34-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.34-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.34-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.34-x86-1.txz: Upgraded.
k/kernel-source-4.19.34-noarch-1.txz: Upgraded.
SPEAKUP y -> m
SPEAKUP_SYNTH_ACNTPC y -> m
SPEAKUP_SYNTH_ACNTSA y -> m
SPEAKUP_SYNTH_APOLLO y -> m
SPEAKUP_SYNTH_AUDPTR y -> m
SPEAKUP_SYNTH_BNS y -> m
SPEAKUP_SYNTH_DECEXT y -> m
SPEAKUP_SYNTH_DECTLK y -> m
SPEAKUP_SYNTH_DTLK y -> m
SPEAKUP_SYNTH_DUMMY y -> m
SPEAKUP_SYNTH_KEYPC y -> m
SPEAKUP_SYNTH_LTLK y -> m
SPEAKUP_SYNTH_SOFT y -> m
SPEAKUP_SYNTH_SPKOUT y -> m
SPEAKUP_SYNTH_TXPRT y -> m
Thanks to Didier Spaier.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190406172120 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 16 | -133/+211 |
2019-04-06 | Fri Apr 5 20:26:51 UTC 2019...ap/vim-8.1.1119-x86_64-1.txz: Upgraded.
l/openjpeg-2.3.1-x86_64-1.txz: Upgraded.
Includes many bug fixes (including security fixes).
(* Security fix *)
n/links-2.19-x86_64-1.txz: Upgraded.
n/stunnel-5.51-x86_64-1.txz: Upgraded.
n/wget-1.20.3-x86_64-1.txz: Upgraded.
Fixed a buffer overflow vulnerability:
src/iri.c(do_conversion): Reallocate the output buffer to a larger
size if it is already full.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5953
(* Security fix *)
xap/vim-gvim-8.1.1119-x86_64-1.txz: Upgraded.
20190405202651 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 5 | -59/+99 |
2019-04-05 | Thu Apr 4 19:06:36 UTC 2019...ap/ghostscript-9.27-x86_64-1.txz: Upgraded.
d/python-setuptools-40.9.0-x86_64-1.txz: Upgraded.
l/imagemagick-6.9.10_37-x86_64-1.txz: Upgraded.
l/readline-8.0.000-x86_64-2.txz: Rebuilt.
Recompiled to link rlfe against the new libreadline. Thanks to Toutatis.
20190404190636 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 12 | -1543/+82 |
2019-04-04 | Thu Apr 4 00:45:18 UTC 2019...a/aaa_elflibs-15.0-x86_64-7.txz: Rebuilt.
Added: libhistory.so.8.0, libreadline.so.8.0.
a/gawk-4.2.1-x86_64-3.txz: Rebuilt.
Recompiled against readline-8.0.000.
a/kernel-generic-4.19.33-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.33-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.33-x86_64-1.txz: Upgraded.
a/util-linux-2.33.1-x86_64-3.txz: Rebuilt.
Recompiled against readline-8.0.000.
ap/bc-1.07.1-x86_64-3.txz: Rebuilt.
Recompiled against readline-8.0.000.
ap/gphoto2-2.5.20-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
ap/gutenprint-5.3.1-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
ap/mariadb-10.3.14-x86_64-1.txz: Upgraded.
ap/xorriso-1.5.0-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
d/clisp-2.49_20181112_df3b9f6fd-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
d/gdb-8.2.1-x86_64-3.txz: Rebuilt.
Recompiled against readline-8.0.000.
d/guile-2.2.4-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
d/kernel-headers-4.19.33-x86-1.txz: Upgraded.
d/python-2.7.16-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
d/python3-3.7.3-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
d/ruby-2.6.2-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
k/kernel-source-4.19.33-noarch-1.txz: Upgraded.
kde/analitza-4.14.3-x86_64-5.txz: Rebuilt.
Recompiled against readline-8.0.000.
l/fluidsynth-1.1.11-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
l/gdbm-1.18.1-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
l/hunspell-1.6.2-x86_64-3.txz: Rebuilt.
Recompiled against readline-8.0.000.
l/mozjs52-52.9.0esr-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
l/parted-3.2-x86_64-5.txz: Rebuilt.
Recompiled against readline-8.0.000.
l/pcre2-10.32-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
l/pilot-link-0.12.5-x86_64-14.txz: Rebuilt.
Recompiled against readline-8.0.000.
l/readline-8.0.000-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
n/NetworkManager-1.16.0-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
n/bluez-5.50-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
n/gnupg-1.4.23-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
n/gnupg2-2.2.15-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
n/gnutls-3.6.7.1-x86_64-1.txz: Upgraded.
n/lftp-4.8.4-x86_64-4.txz: Rebuilt.
Recompiled against readline-8.0.000.
n/netkit-ftp-0.17-x86_64-5.txz: Rebuilt.
Recompiled against readline-8.0.000.
n/nftables-0.9.0-x86_64-3.txz: Rebuilt.
Recompiled against readline-8.0.000.
n/php-7.2.17-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
rename() across the device may allow unwanted access during processing.
(* Security fix *)
n/samba-4.10.1-x86_64-1.txz: Upgraded.
Compiled against readline-8.0.000.
n/tftp-hpa-5.2-x86_64-5.txz: Rebuilt.
Recompiled against readline-8.0.000.
n/wpa_supplicant-2.7-x86_64-4.txz: Rebuilt.
Recompiled against readline-8.0.000.
xap/fvwm-2.6.8-x86_64-2.txz: Rebuilt.
Recompiled against readline-8.0.000.
xap/gftp-2.0.19-x86_64-8.txz: Rebuilt.
Recompiled against readline-8.0.000.
xap/gnuchess-6.2.5-x86_64-4.txz: Rebuilt.
xap/xine-ui-0.99.10-x86_64-3.txz: Rebuilt.
Recompiled against readline-8.0.000.
extra/pure-alsa-system/fluidsynth-1.1.11-x86_64-2_alsa.txz: Rebuilt.
Recompiled against readline-8.0.000.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190404004518 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 62 | -685/+560 |
2019-04-03 | Tue Apr 2 20:30:22 UTC 2019...a/hwdata-0.322-noarch-1.txz: Upgraded.
a/kernel-firmware-20190402_67b7579-noarch-1.txz: Upgraded.
a/shadow-4.6-x86_64-2.txz: Rebuilt.
adduser: reprompt on invalid user input. Thanks to ttk.
ap/ghostscript-9.26-x86_64-2.txz: Rebuilt.
Fixes security issues:
A specially crafted PostScript file could have access to the file system
outside of the constrains imposed by -dSAFER.
Transient procedures can allow access to system operators, leading to
remote code execution.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3835
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3838
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6116
(* Security fix *)
d/vala-0.44.2-x86_64-1.txz: Upgraded.
l/glib-networking-2.60.1-x86_64-1.txz: Upgraded.
l/imagemagick-6.9.10_36-x86_64-1.txz: Upgraded.
l/python-pillow-6.0.0-x86_64-1.txz: Upgraded.
n/wget-1.20.2-x86_64-1.txz: Upgraded.
Fixed an unspecified buffer overflow vulnerability.
(* Security fix *)
20190402203022 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 13 | -95/+1641 |
2019-04-01 | Sun Mar 31 18:51:16 UTC 2019...a/quota-4.05-x86_64-1.txz: Upgraded.
d/cmake-3.14.1-x86_64-1.txz: Upgraded.
d/patchelf-0.10-x86_64-1.txz: Upgraded.
l/harfbuzz-2.4.0-x86_64-1.txz: Upgraded.
l/utf8proc-2.3.0-x86_64-1.txz: Upgraded.
n/httpd-2.4.39-x86_64-1.txz: Upgraded.
n/iputils-20190324-x86_64-1.txz: Upgraded.
n/postfix-3.4.5-x86_64-1.txz: Upgraded.
20190331185116 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 11 | -140/+137 |
2019-03-30 | Fri Mar 29 18:24:36 UTC 2019...a/aaa_elflibs-15.0-x86_64-6.txz: Rebuilt.
Upgraded: libelf-0.176.so, libpcre.so.1.2.11, libglib-2.0.so.0.6000.0,
libgmodule-2.0.so.0.6000.0, libgobject-2.0.so.0.6000.0,
libgthread-2.0.so.0.6000.0, libtdb.so.1.4.0.
Temporarily added: libicudata.so.63.1, libicui18n.so.63.1, libicuio.so.63.1,
libicutest.so.63.1, libicutu.so.63.1, libicuuc.so.63.1.
a/xfsprogs-4.20.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-64.1.
ap/sqlite-3.27.2-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-64.1.
kde/calligra-2.9.11-x86_64-29.txz: Rebuilt.
Recompiled against icu4c-64.1.
kde/kdepimlibs-4.14.10-x86_64-7.txz: Rebuilt.
Recompiled to pull in new gpgme++ header files.
l/boost-1.69.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-64.1.
l/ffmpeg-3.4.6-x86_64-1.txz: Upgraded.
l/giflib-5.1.9-x86_64-1.txz: Upgraded.
l/harfbuzz-2.3.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-64.1.
l/icu4c-64.1-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libical-3.0.4-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-64.1.
l/libvisio-0.1.6-x86_64-6.txz: Rebuilt.
Recompiled against icu4c-64.1.
l/qt-4.8.7-x86_64-12.txz: Rebuilt.
Recompiled against icu4c-64.1.
l/raptor2-2.0.15-x86_64-7.txz: Rebuilt.
Recompiled against icu4c-64.1.
l/v4l-utils-1.16.5-x86_64-1.txz: Upgraded.
n/dovecot-2.3.5.1-x86_64-1.txz: Upgraded.
Missing input buffer size validation leads into arbitrary buffer overflow
when reading fts or pop3 uidl header from Dovecot index. Exploiting this
requires direct write access to the index files.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7524
(* Security fix *)
Compiled against icu4c-64.1.
n/gpgme-1.13.0-x86_64-1.txz: Upgraded.
n/php-7.2.16-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-64.1.
n/postfix-3.4.4-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-64.1.
n/tin-2.4.3-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-64.1.
n/whois-5.4.2-x86_64-1.txz: Upgraded.
t/texlive-2018.180822-x86_64-5.txz: Rebuilt.
Recompiled against icu4c-64.1.
x/libinput-1.13.0-x86_64-1.txz: Upgraded.
x/mesa-19.0.1-x86_64-1.txz: Upgraded.
x/vulkan-sdk-1.1.101.0-x86_64-1.txz: Upgraded.
extra/pure-alsa-system/ffmpeg-3.4.6-x86_64-1_alsa.txz: Upgraded.
20190329182436 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 26 | -203/+333 |
2019-03-28 | Wed Mar 27 20:37:56 UTC 2019...a/kernel-generic-4.19.32-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.32-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.32-x86_64-1.txz: Upgraded.
ap/hplip-3.19.3-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.32-x86-1.txz: Upgraded.
d/python3-3.7.3-x86_64-1.txz: Upgraded.
Fixed bugs and the following security issues:
bpo-36216: Changes urlsplit() to raise ValueError when the URL contains
characters that decompose under IDNA encoding (NFKC-normalization) into
characters that affect how the URL is parsed.
bpo-35746: [CVE-2019-5010] Fix a NULL pointer deref in ssl module. The
cert parser did not handle CRL distribution points with empty DP or URI
correctly. A malicious or buggy certificate can result into segfault.
Vulnerability (TALOS-2018-0758) reported by Colin Read and Nicolas Edet
of Cisco.
bpo-35121: Don't send cookies of domain A without Domain attribute to
domain B when domain A is a suffix match of domain B while using a
cookiejar with http.cookiejar.DefaultCookiePolicy policy.
Patch by Karthikeyan Singaravelan.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5010
(* Security fix *)
d/scons-3.0.5-x86_64-1.txz: Upgraded.
k/kernel-source-4.19.32-noarch-1.txz: Upgraded.
n/curl-7.64.1-x86_64-1.txz: Upgraded.
n/gnutls-3.6.7-x86_64-1.txz: Upgraded.
Fixes security issues:
libgnutls, gnutls tools: Every gnutls_free() will automatically set
the free'd pointer to NULL. This prevents possible use-after-free and
double free issues. Use-after-free will be turned into NULL dereference.
The counter-measure does not extend to applications using gnutls_free().
libgnutls: Fixed a memory corruption (double free) vulnerability in the
certificate verification API. Reported by Tavis Ormandy; addressed with
the change above. [GNUTLS-SA-2019-03-27, #694]
libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async
messages; Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704]
libgnutls: enforce key usage limitations on certificates more actively.
Previously we would enforce it for TLS1.2 protocol, now we enforce it
even when TLS1.3 is negotiated, or on client certificates as well. When
an inappropriate for TLS1.3 certificate is seen on the credentials
structure GnuTLS will disable TLS1.3 support for that session (#690).
libgnutls: enforce the equality of the two signature parameters fields
in a certificate. We were already enforcing the signature algorithm,
but there was a bug in parameter checking code.
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190327203756 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 21 | -3508/+3585 |
2019-03-27 | Tue Mar 26 23:04:49 UTC 2019...ap/cups-filters-1.22.3-x86_64-1.txz: Upgraded.
ap/lsscsi-0.30-x86_64-1.txz: Upgraded.
ap/soma-3.2.3-noarch-1.txz: Upgraded.
ap/vim-8.1.1053-x86_64-1.txz: Upgraded.
l/libssh2-1.8.2-x86_64-1.txz: Upgraded.
n/gnupg2-2.2.15-x86_64-1.txz: Upgraded.
xap/vim-gvim-8.1.1053-x86_64-1.txz: Upgraded.
20190326230449 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 15 | -3428/+3555 |
2019-03-26 | Mon Mar 25 22:36:26 UTC 2019...ap/nano-4.0-x86_64-1.txz: Upgraded.
l/Mako-1.0.8-x86_64-1.txz: Upgraded.
l/imagemagick-6.9.10_35-x86_64-1.txz: Upgraded.
l/libedit-20190324_3.1-x86_64-1.txz: Upgraded.
l/shared-mime-info-1.12-x86_64-1.txz: Upgraded.
x/xcompmgr-1.1.8-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-60.6.1-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/60.6.1/releasenotes/
https://www.mozilla.org/security/known-vulnerabilities/thunderbird.html
(* Security fix *)
20190325223626 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 12 | -106/+158 |
2019-03-24 | Sun Mar 24 03:53:12 UTC 2019...a/kernel-generic-4.19.31-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.31-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.31-x86_64-1.txz: Upgraded.
ap/cups-2.2.11-x86_64-1.txz: Upgraded.
ap/sysstat-12.1.3-x86_64-1.txz: Upgraded.
d/help2man-1.47.10-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.31-x86-1.txz: Upgraded.
k/kernel-source-4.19.31-noarch-1.txz: Upgraded.
n/samba-4.10.0-x86_64-2.txz: Rebuilt.
Recompile dropping python2 support, since talloc no longer supports it.
Thanks to ponce.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190324035312 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 18 | -118/+157 |
2019-03-23 | Fri Mar 22 20:41:23 UTC 2019...d/parallel-20190322-noarch-1.txz: Upgraded.
n/bind-9.14.0-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-60.6.1esr-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements. The patched flaws
are considered critical, and could be used to run attacker code and install
software, requiring no user interaction beyond normal browsing.
For more information, see:
https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
https://www.mozilla.org/en-US/security/advisories/mfsa2019-10/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9810i
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9813
(* Security fix *)
20190322204123 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 4 | -44/+80 |
2019-03-22 | Thu Mar 21 21:18:49 UTC 2019...l/talloc-2.2.0-x86_64-1.txz: Upgraded.
l/tdb-1.4.0-x86_64-1.txz: Upgraded.
l/tevent-0.10.0-x86_64-1.txz: Upgraded.
x/mkfontscale-1.2.1-x86_64-1.txz: Upgraded.
20190321211849 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 6 | -53/+70 |
2019-03-21 | Thu Mar 21 04:48:24 UTC 2019...ap/lxc-2.0.11_8c238670-x86_64-1.txz: Upgraded.
d/llvm-8.0.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
d/mercurial-4.9.1-x86_64-1.txz: Upgraded.
l/glibmm-2.60.0-x86_64-1.txz: Upgraded.
l/gtkmm3-3.24.1-x86_64-1.txz: Upgraded.
n/iproute2-5.0.0-x86_64-1.txz: Upgraded.
x/mesa-19.0.0-x86_64-2.txz: Rebuilt.
Recompiled against llvm-8.0.0.
x/xf86-video-amdgpu-19.0.1-x86_64-1.txz: Upgraded.
x/xf86-video-ati-19.0.1-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-60.6.0-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/60.6.0/releasenotes/
20190321044824 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 9 | -126/+159 |
2019-03-20 | Tue Mar 19 20:06:28 UTC 2019...a/bash-5.0.003-x86_64-1.txz: Upgraded.
a/kernel-firmware-20190314_7bc2464-noarch-1.txz: Upgraded.
a/kernel-generic-4.19.30-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.30-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.30-x86_64-1.txz: Upgraded.
d/help2man-1.47.9-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.30-x86-1.txz: Upgraded.
d/strace-5.0-x86_64-1.txz: Upgraded.
k/kernel-source-4.19.30-noarch-1.txz: Upgraded.
n/gnupg2-2.2.14-x86_64-1.txz: Upgraded.
n/libgpg-error-1.36-x86_64-1.txz: Upgraded.
n/samba-4.10.0-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190319200628 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 21 | -141/+424 |
2019-03-19 | Mon Mar 18 22:53:51 UTC 2019...ap/cups-filters-1.22.2-x86_64-1.txz: Upgraded.
kde/calligra-2.9.11-x86_64-28.txz: Rebuilt.
Patched to fix Calligra Plan crash. Thanks to Olek.
l/adwaita-icon-theme-3.32.0-noarch-1.txz: Upgraded.
l/giflib-5.1.8-x86_64-1.txz: Upgraded.
l/libssh2-1.8.1-x86_64-1.txz: Upgraded.
Fixed several security issues.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3855
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3856
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3857
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3858
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3859
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3860
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3861
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3862
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3863
(* Security fix *)
x/scim-1.4.18-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-60.6.0esr-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/60.6.0/releasenotes/
20190318225351 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 19 | -91/+1080 |
2019-03-18 | Sun Mar 17 20:40:15 UTC 2019...Saint Patrick was a gentleman
Who through strategy and stealth
Drove all the snakes from Ireland
Here's toasting to his health -
But not too many toastings
Lest you lose yourself, and then,
Forget the good Saint Patrick
And see all those snakes again.
a/eudev-3.2.7-x86_64-3.txz: Rebuilt.
Added tqmx86_wdt to watchdog.conf. Thanks to Robby Workman.
d/vala-0.44.1-x86_64-1.txz: Upgraded.
kde/ktorrent-4.3.1-x86_64-4.txz: Rebuilt.
Embed a copy of the GeoIP database since the download link no longer works.
l/glibmm-2.58.1-x86_64-1.txz: Upgraded.
l/mozilla-nss-3.43-x86_64-1.txz: Upgraded.
x/imake-1.0.8-x86_64-1.txz: Upgraded.
x/libXdmcp-1.1.3-x86_64-1.txz: Upgraded.
x/libXext-1.3.4-x86_64-1.txz: Upgraded.
x/libXft-2.3.3-x86_64-1.txz: Upgraded.
x/libXmu-1.1.3-x86_64-1.txz: Upgraded.
x/libXrandr-1.5.2-x86_64-1.txz: Upgraded.
x/libXvMC-1.0.11-x86_64-1.txz: Upgraded.
x/libXxf86dga-1.1.5-x86_64-1.txz: Upgraded.
x/libxkbfile-1.1.0-x86_64-1.txz: Upgraded.
x/makedepend-1.0.6-x86_64-1.txz: Upgraded.
x/x11perf-1.6.1-x86_64-1.txz: Upgraded.
x/xf86-video-intel-20190301_6afed33b-x86_64-1.txz: Upgraded.
x/xf86-video-savage-20190128_8579718-x86_64-1.txz: Upgraded.
x/xf86-video-sis-20181217_22d3c79-x86_64-1.txz: Upgraded.
x/xtrans-1.4.0-noarch-1.txz: Upgraded.
20190317204015 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 29 | -367/+271 |
2019-03-17 | Sat Mar 16 19:00:57 UTC 2019...l/freetype-2.10.0-x86_64-2.txz: Rebuilt.
Removed unneeded freetype.this.is.not.a.windows.system.diff.gz patch.
Rebased freetype.subpixel.rendering.diff.gz patch.
Thanks to Daedra.
l/imagemagick-6.9.10_34-x86_64-1.txz: Upgraded.
n/NetworkManager-1.16.0-x86_64-1.txz: Upgraded.
20190316190057 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 7 | -94/+72 |
2019-03-16 | Fri Mar 15 21:21:57 UTC 2019...l/freetype-2.10.0-x86_64-1.txz: Upgraded.
n/postfix-3.4.4-x86_64-1.txz: Upgraded.
20190315212157 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 5 | -35/+51 |
2019-03-15 | Thu Mar 14 21:22:54 UTC 2019...ap/cgmanager-0.42-x86_64-1.txz: Upgraded.
d/cmake-3.14.0-x86_64-1.txz: Upgraded.
l/gexiv2-0.12.0-x86_64-1.txz: Upgraded.
l/gsettings-desktop-schemas-3.32.0-x86_64-2.txz: Rebuilt.
Don't override the system font defaults (especially with fonts that we don't
include). Thanks to Markus Wiesner.
l/libyaml-0.2.2-x86_64-1.txz: Upgraded.
l/libzip-1.5.2-x86_64-1.txz: Upgraded.
20190314212254 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 10 | -66/+131 |
2019-03-14 | Thu Mar 14 03:41:42 UTC 2019...a/kernel-firmware-20190313_efd2c1c-noarch-1.txz: Upgraded.
a/kernel-generic-4.19.29-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.29-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.29-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.29-x86-1.txz: Upgraded.
k/kernel-source-4.19.29-noarch-1.txz: Upgraded.
n/crda-3.18-x86_64-9.txz: Rebuilt.
Upgraded to wireless-regdb-2019.03.01.
n/ethtool-5.0-x86_64-1.txz: Upgraded.
x/mesa-19.0.0-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190314034142 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 18 | -119/+158 |
2019-03-13 | Wed Mar 13 17:41:58 UTC 2019...d/ruby-2.6.2-x86_64-1.txz: Upgraded.
l/glib-networking-2.60.0.1-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.7-x86_64-1.txz: Upgraded.
l/jasper-2.0.16-x86_64-1.txz: Upgraded.
n/mutt-1.11.4-x86_64-1.txz: Upgraded.
xap/gucharmap-12.0.1-x86_64-1.txz: Upgraded.
20190313174158 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 8 | -77/+83 |
2019-03-13 | Tue Mar 12 20:03:46 UTC 2019...a/kernel-firmware-20190312_b0d9583-noarch-1.txz: Upgraded.
l/at-spi2-atk-2.32.0-x86_64-1.txz: Upgraded.
l/at-spi2-core-2.32.0-x86_64-1.txz: Upgraded.
l/atk-2.32.0-x86_64-1.txz: Upgraded.
l/dconf-0.32.0-x86_64-1.txz: Upgraded.
l/dconf-editor-3.32.0-x86_64-1.txz: Upgraded.
l/glib-networking-2.60.0-x86_64-1.txz: Upgraded.
l/gsettings-desktop-schemas-3.32.0-x86_64-1.txz: Upgraded.
l/gvfs-1.40.0-x86_64-1.txz: Upgraded.
l/libsoup-2.66.0-x86_64-1.txz: Upgraded.
l/vte-0.56.0-x86_64-1.txz: Upgraded.
n/mobile-broadband-provider-info-20190116-x86_64-1.txz: Upgraded.
n/samba-4.9.5-x86_64-1.txz: Upgraded.
x/liberation-fonts-ttf-2.00.5-noarch-1.txz: Upgraded.
xap/gucharmap-12.0.0-x86_64-1.txz: Upgraded.
20190312200346 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 15 | -133/+283 |
2019-03-12 | Mon Mar 11 19:03:50 UTC 2019...a/coreutils-8.31-x86_64-1.txz: Upgraded.
d/meson-0.50.0-x86_64-1.txz: Upgraded.
l/giflib-5.1.7-x86_64-1.txz: Upgraded.
l/python-certifi-2019.3.9-x86_64-1.txz: Upgraded.
n/postfix-3.4.3-x86_64-1.txz: Upgraded.
x/libFS-1.0.8-x86_64-1.txz: Upgraded.
x/libXcomposite-0.4.5-x86_64-1.txz: Upgraded.
x/libXcursor-1.2.0-x86_64-1.txz: Upgraded.
x/libXdamage-1.1.5-x86_64-1.txz: Upgraded.
20190311190350 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 11 | -86/+116 |
2019-03-11 | Sun Mar 10 21:02:41 UTC 2019...a/kernel-generic-4.19.28-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.28-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.28-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.28-x86-1.txz: Upgraded.
d/vala-0.44.0-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
k/kernel-source-4.19.28-noarch-1.txz: Upgraded.
l/gobject-introspection-1.60.0-x86_64-1.txz: Upgraded.
l/imagemagick-6.9.10_33-x86_64-1.txz: Upgraded.
l/pygobject3-3.32.0-x86_64-1.txz: Upgraded.
x/xfd-1.1.3-x86_64-1.txz: Upgraded.
x/xprop-1.2.4-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190310210241 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 21 | -262/+258 |
2019-03-10 | Sat Mar 9 21:33:33 UTC 2019...a/e2fsprogs-1.45.0-x86_64-2.txz: Rebuilt.
Removed /etc/cron.d/e2scrub_all file (systemd related junk).
ap/vim-8.1.1002-x86_64-1.txz: Upgraded.
xap/vim-gvim-8.1.1002-x86_64-1.txz: Upgraded.
20190309213333 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 4 | -35/+58 |
2019-03-09 | Fri Mar 8 18:28:40 UTC 2019...a/bash-5.0.002-x86_64-3.txz: Rebuilt.
Fix applying patches. Thanks to saahriktu.
a/e2fsprogs-1.45.0-x86_64-1.txz: Upgraded.
n/ca-certificates-20190308-noarch-1.txz: Upgraded.
n/nghttp2-1.37.0-x86_64-1.txz: Upgraded.
n/ntp-4.2.8p13-x86_64-1.txz: Upgraded.
This release fixes a bug that allows an attacker with access to an explicitly
trusted source to send a crafted malicious mode 6 (ntpq) packet that can
trigger a NULL pointer dereference, crashing ntpd.
It also provides 17 other bugfixes and 1 other improvement.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8936
(* Security fix *)
n/postfix-3.4.1-x86_64-2.txz: Rebuilt.
n/s-nail-14.9.13-x86_64-1.txz: Upgraded.
20190308182840 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 9 | -71/+788 |
2019-03-08 | Thu Mar 7 21:26:58 UTC 2019...a/e2fsprogs-1.44.6-x86_64-1.txz: Upgraded.
ap/man-pages-5.00-noarch-1.txz: Upgraded.
ap/most-5.1.0-x86_64-1.txz: Upgraded.
n/php-7.2.16-x86_64-1.txz: Upgraded.
x/xf86-video-amdgpu-19.0.0-x86_64-1.txz: Upgraded.
x/xf86-video-ati-19.0.0-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-60.5.3-x86_64-1.txz: Upgraded.
xap/pavucontrol-4.0-x86_64-1.txz: Upgraded.
20190307212658 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 10 | -112/+119 |
2019-03-06 | Tue Mar 5 22:54:06 UTC 2019...a/hwdata-0.321-noarch-1.txz: Upgraded.
a/kernel-generic-4.19.27-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.27-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.27-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.27-x86-1.txz: Upgraded.
k/kernel-source-4.19.27-noarch-1.txz: Upgraded.
l/M2Crypto-0.32.0-x86_64-1.txz: Upgraded.
l/imagemagick-6.9.10_32-x86_64-1.txz: Upgraded.
n/dovecot-2.3.5-x86_64-1.txz: Upgraded.
x/xdm-1.1.11-x86_64-9.txz: Rebuilt.
Reverted to xdm-1.1.11, as the new release after 7 years has some issues.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190305225406 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 24 | -241/+378 |
2019-03-05 | Tue Mar 5 00:17:16 UTC 2019...d/gcc-8.3.0-x86_64-2.txz: Rebuilt.
Reverted backported asm inline patches that broke "asm volatile".
Thanks to nobodino.
d/gcc-brig-8.3.0-x86_64-2.txz: Rebuilt.
d/gcc-g++-8.3.0-x86_64-2.txz: Rebuilt.
d/gcc-gfortran-8.3.0-x86_64-2.txz: Rebuilt.
d/gcc-gnat-8.3.0-x86_64-2.txz: Rebuilt.
d/gcc-go-8.3.0-x86_64-2.txz: Rebuilt.
d/gcc-objc-8.3.0-x86_64-2.txz: Rebuilt.
l/at-spi2-atk-2.30.1-x86_64-1.txz: Upgraded.
l/at-spi2-core-2.30.1-x86_64-1.txz: Upgraded.
l/gc-8.0.4-x86_64-1.txz: Upgraded.
l/glib2-2.60.0-x86_64-1.txz: Upgraded.
l/imagemagick-6.9.10_31-x86_64-1.txz: Upgraded.
n/postfix-3.4.0-x86_64-2.txz: Rebuilt.
Prevent the install script from making noise.
x/xinit-1.4.1-x86_64-1.txz: Upgraded.
x/xlogo-1.0.5-x86_64-1.txz: Upgraded.
x/xmore-1.0.3-x86_64-1.txz: Upgraded.
extra/fltk/fltk-1.3.5-x86_64-1.txz: Upgraded.
20190305001716 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 23 | -677/+2366 |
2019-03-04 | Sun Mar 3 22:03:39 UTC 2019...a/mkinitrd-1.4.11-x86_64-12.txz: Rebuilt.
Updated to busybox-1.30.1.
mkinitrd: allow a colon-delimited list of kernel versions with -k
mkinitrd_command_generator.sh: allow a colon-delimited list of kernel
versions with -k
setup.01.mkinitrd: simplify script by using -k with a version list
ap/pamixer-1.4-x86_64-1.txz: Upgraded.
d/python-2.7.16-x86_64-1.txz: Upgraded.
Updated to the latest 2.7.x release, which fixes a few security issues.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14647
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5010
(* Security fix *)
d/vala-0.42.6-x86_64-1.txz: Upgraded.
l/gegl-0.4.14-x86_64-1.txz: Upgraded.
l/libsecret-0.18.8-x86_64-1.txz: Upgraded.
l/xapian-core-1.4.11-x86_64-1.txz: Upgraded.
x/mkfontscale-1.2.0-x86_64-1.txz: Upgraded.
x/xditview-1.0.5-x86_64-1.txz: Upgraded.
x/xdm-1.1.12-x86_64-1.txz: Upgraded.
20190303220339 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 28 | -829/+1166 |
2019-03-02 | Fri Mar 1 23:44:12 UTC 2019...a/eudev-3.2.7-x86_64-2.txz: Rebuilt.
Don't require kvm group.
20190301234412 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 54 | -669/+3553 |
2019-03-01 | Thu Feb 28 23:05:08 UTC 2019...d/Cython-0.29.6-x86_64-1.txz: Upgraded.
d/rust-1.33.0-x86_64-1.txz: Upgraded.
l/imagemagick-6.9.10_29-x86_64-1.txz: Upgraded.
l/qjson-0.9.0-x86_64-1.txz: Upgraded.
n/postfix-3.4.0-x86_64-1.txz: Upgraded.
20190228230508 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 8 | -74/+96 |
2019-02-28 | Wed Feb 27 23:21:15 UTC 2019...a/aaa_terminfo-6.1_20190223-x86_64-1.txz: Upgraded.
a/kernel-firmware-20190221_9ee52be-noarch-1.txz: Upgraded.
a/kernel-generic-4.19.26-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.26-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.26-x86_64-1.txz: Upgraded.
ap/vim-8.1.0984-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.26-x86-1.txz: Upgraded.
k/kernel-source-4.19.26-noarch-1.txz: Upgraded.
l/ncurses-6.1_20190223-x86_64-1.txz: Upgraded.
n/curl-7.64.0-x86_64-3.txz: Rebuilt.
Applied upstream patch to fix log spam:
[PATCH] multi: remove verbose "Expire in" ... messages
Thanks to compassnet.
n/postfix-3.3.3-x86_64-1.txz: Upgraded.
xap/vim-gvim-8.1.0984-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
20190227232115 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 19 | -126/+205 |
2019-02-27 | Wed Feb 27 03:09:41 UTC 2019...a/btrfs-progs-4.20.2-x86_64-1.txz: Upgraded.
a/openssl-solibs-1.1.1b-x86_64-1.txz: Upgraded.
ap/ddrescue-1.24-x86_64-1.txz: Upgraded.
ap/sqlite-3.27.2-x86_64-1.txz: Upgraded.
l/libssh-0.8.7-x86_64-1.txz: Upgraded.
l/talloc-2.1.16-x86_64-1.txz: Upgraded.
l/tdb-1.3.18-x86_64-1.txz: Upgraded.
l/tevent-0.9.39-x86_64-1.txz: Upgraded.
n/ca-certificates-20181210-noarch-2.txz: Rebuilt.
Use "c_rehash" rather than "openssl rehash" for compatibility with all
versions of OpenSSL.
n/epic5-2.1.1-x86_64-1.txz: Upgraded.
n/openssl-1.1.1b-x86_64-1.txz: Upgraded.
x/xorg-server-1.20.4-x86_64-1.txz: Upgraded.
x/xorg-server-xephyr-1.20.4-x86_64-1.txz: Upgraded.
x/xorg-server-xnest-1.20.4-x86_64-1.txz: Upgraded.
x/xorg-server-xvfb-1.20.4-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-60.5.2-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/60.5.2/releasenotes/
20190227030941 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 14 | -215/+203 |
2019-02-25 | Sun Feb 24 21:32:51 UTC 2019...a/xfsprogs-4.20.0-x86_64-1.txz: Upgraded.
d/git-2.21.0-x86_64-1.txz: Upgraded.
l/pcre-8.43-x86_64-1.txz: Upgraded.
n/getmail-5.13-x86_64-1.txz: Upgraded.
extra/brltty/brltty-6.0-x86_64-1.txz: Upgraded.
20190224213251 | ![](//www.gravatar.com/avatar/8dcf3a503b805585b3af9ce61d7f9c41?s=13&d=retro) Patrick J Volkerding | 6 | -63/+87 |