summaryrefslogtreecommitdiffstats
path: root/source/n (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Mon May 18 19:17:21 UTC 202020200518191721 Patrick J Volkerding2020-05-1827-14/+560
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Greetings! After three months in /testing, the PAM merge into the main tree is now complete. When updating, be sure to install the new pam, cracklib, and libpwquality packages or you may find yourself locked out of your machine. Otherwise, these changes should be completely transparent and you shouldn't notice any obvious operational differences. Be careful if you make any changes in /etc/pam.d/ - leaving an extra console logged in while testing PAM config changes is a recommended standard procedure. Thanks again to Robby Workman, Vincent Batts, Phantom X, and ivandi for help implementing this. It's not done yet and there will be more fine-tuning of the config files, but now we can move on to build some other updates. Enjoy! a/cracklib-2.9.7-x86_64-1.txz: Added. a/kernel-firmware-20200517_f8d32e4-noarch-1.txz: Upgraded. a/libcgroup-0.41-x86_64-7.txz: Rebuilt. Rebuilt to add PAM support. a/libpwquality-1.4.2-x86_64-1.txz: Added. a/lilo-24.2-x86_64-9.txz: Rebuilt. Enable the "compact" option by default. liloconfig: correctly set the root partition. a/pam-1.3.1-x86_64-1.txz: Added. a/shadow-4.8.1-x86_64-7.txz: Rebuilt. Rebuilt to add PAM support. a/utempter-1.2.0-x86_64-1.txz: Upgraded. a/util-linux-2.35.1-x86_64-6.txz: Rebuilt. Rebuilt to add PAM support. a/xfsprogs-5.6.0-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. ap/at-3.2.1-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/cups-2.3.3-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/hplip-3.20.5-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/mariadb-10.4.13-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/screen-4.8.0-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/soma-3.3.0-noarch-1.txz: Upgraded. Thanks to David Woodfall. ap/sqlite-3.31.1-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. ap/sudo-1.9.0-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. ap/vim-8.2.0788-x86_64-1.txz: Upgraded. d/bison-3.6.2-x86_64-1.txz: Upgraded. d/meson-0.54.2-x86_64-1.txz: Upgraded. d/python-setuptools-46.4.0-x86_64-1.txz: Upgraded. d/vala-0.48.6-x86_64-1.txz: Upgraded. kde/calligra-2.9.11-x86_64-36.txz: Rebuilt. Recompiled against icu4c-67.1. kde/kde-workspace-4.11.22-x86_64-7.txz: Rebuilt. Rebuilt to add PAM support. l/ConsoleKit2-1.2.1-x86_64-4.txz: Rebuilt. Rebuilt to add PAM support. l/boost-1.73.0-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. l/gnome-keyring-3.36.0-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. l/harfbuzz-2.6.6-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. l/icu4c-67.1-x86_64-1.txz: Upgraded. Shared library .so-version bump. l/imagemagick-7.0.10_13-x86_64-1.txz: Upgraded. l/libcap-2.34-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. l/libical-3.0.8-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. l/libuv-1.38.0-x86_64-1.txz: Upgraded. l/libvisio-0.1.7-x86_64-3.txz: Rebuilt. Recompiled against icu4c-67.1. l/polkit-0.116-x86_64-3.txz: Rebuilt. Rebuilt to add PAM support. l/qt-4.8.7-x86_64-16.txz: Rebuilt. Recompiled against icu4c-67.1. l/qt5-5.13.2-x86_64-4.txz: Rebuilt. Recompiled against icu4c-67.1. l/qt5-webkit-5.212.0_alpha4-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. l/raptor2-2.0.15-x86_64-9.txz: Rebuilt. Recompiled against icu4c-67.1. l/system-config-printer-1.5.12-x86_64-4.txz: Rebuilt. Rebuilt to add PAM support. l/vte-0.60.2-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. n/cifs-utils-6.10-x86_64-4.txz: Rebuilt. Rebuilt to add PAM support. n/cyrus-sasl-2.1.27-x86_64-4.txz: Rebuilt. Rebuilt to add PAM support. n/dovecot-2.3.10.1-x86_64-1.txz: Upgraded. Rebuilt to add PAM support. Compiled against icu4c-67.1. This update fixes several denial-of-service vulnerabilities. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10957 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10958 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10967 (* Security fix *) n/mutt-1.14.1-x86_64-1.txz: Upgraded. n/netatalk-3.1.12-x86_64-3.txz: Rebuilt. Rebuilt to add PAM support. n/netkit-rsh-0.17-x86_64-3.txz: Rebuilt. Rebuilt to add PAM support. n/nss-pam-ldapd-0.9.11-x86_64-1.txz: Added. n/openssh-8.2p1-x86_64-3.txz: Rebuilt. Rebuilt to add PAM support. n/openvpn-2.4.9-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. n/pam-krb5-4.9-x86_64-1.txz: Added. n/php-7.4.6-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. n/popa3d-1.0.3-x86_64-4.txz: Rebuilt. Rebuilt to add PAM support. n/postfix-3.5.2-x86_64-1.txz: Upgraded. Compiled against icu4c-67.1. n/ppp-2.4.8-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. n/proftpd-1.3.6c-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. n/samba-4.12.2-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. Recompiled against icu4c-67.1. n/tin-2.4.4-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. n/vsftpd-3.0.3-x86_64-6.txz: Rebuilt. Rebuilt to add PAM support. t/texlive-2019.190626-x86_64-4.txz: Rebuilt. Recompiled against icu4c-67.1. x/vulkan-sdk-1.2.135.0-x86_64-1.txz: Upgraded. x/xdm-1.1.11-x86_64-10.txz: Rebuilt. Rebuilt to add PAM support. x/xisxwayland-1-x86_64-1.txz: Added. xap/sane-1.0.30-x86_64-1.txz: Upgraded. This update fixes several security issues. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12867 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12862 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12863 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12865 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12866 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12861 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12864 (* Security fix *) xap/vim-gvim-8.2.0788-x86_64-1.txz: Upgraded. xap/xlockmore-5.63-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. xap/xscreensaver-5.44-x86_64-2.txz: Rebuilt. Rebuilt to add PAM support. extra/brltty/brltty-6.1-x86_64-2.txz: Rebuilt. Recompiled against icu4c-67.1. extra/pure-alsa-system/qt5-5.13.2-x86_64-4_alsa.txz: Rebuilt. Recompiled against icu4c-67.1. isolinux/initrd.img: Rebuilt. Added PAM libraries, security modules, and config files. usb-and-pxe-installers/usbboot.img: Rebuilt. Added PAM libraries, security modules, and config files.
* Fri May 15 07:28:15 UTC 202020200515072815 Patrick J Volkerding2020-05-159-198/+413
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Hey folks, just a heads-up that PAM is about to be merged into the main tree. We can't have it blocking other upgrades any longer. The config files could be improved (adding support for pam_krb5 and pam_ldap, for example), but they'll do for now. Have a good weekend, and enjoy these updates! :-) a/aaa_elflibs-15.0-x86_64-23.txz: Rebuilt. Upgraded: libcap.so.2.34, libelf-0.179.so, liblzma.so.5.2.5, libglib-2.0.so.0.6400.2, libgmodule-2.0.so.0.6400.2, libgobject-2.0.so.0.6400.2, libgthread-2.0.so.0.6400.2, liblber-2.4.so.2.10.13, libldap-2.4.so.2.10.13, libpcre2-8.so.0.10.0. Added temporarily in preparation for upgrading icu4c: libicudata.so.65.1, libicui18n.so.65.1, libicuio.so.65.1, libicutest.so.65.1, libicutu.so.65.1, libicuuc.so.65.1. a/etc-15.0-x86_64-11.txz: Rebuilt. /etc/passwd: Added ldap (UID 330). /etc/group: Added ldap (GID 330). a/kernel-generic-5.4.41-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.41-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.41-x86_64-1.txz: Upgraded. a/pkgtools-15.0-noarch-33.txz: Rebuilt. setup.services: added support for rc.openldap and rc.openvpn. ap/hplip-3.20.5-x86_64-1.txz: Upgraded. d/kernel-headers-5.4.41-x86-1.txz: Upgraded. d/python-setuptools-46.3.0-x86_64-1.txz: Upgraded. d/python3-3.8.3-x86_64-1.txz: Upgraded. k/kernel-source-5.4.41-noarch-1.txz: Upgraded. n/openldap-2.4.50-x86_64-1.txz: Added. This is a complete OpenLDAP package with both client and server support. Thanks to Giuseppe Di Terlizzi for help with the server parts. n/openldap-client-2.4.50-x86_64-1.txz: Removed. x/mesa-20.0.7-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/hplip-3.20.5-x86_64-1_pam.txz: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
* Tue May 12 23:49:47 UTC 202020200512234947 Patrick J Volkerding2020-05-134-11/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ap/mariadb-10.4.13-x86_64-1.txz: Upgraded. This update fixes potential denial-of-service vulnerabilities. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2752 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2812 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2814 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2760 (* Security fix *) ap/sudo-1.9.0-x86_64-1.txz: Upgraded. l/harfbuzz-2.6.6-x86_64-1.txz: Upgraded. l/tidy-html5-5.6.0-x86_64-1.txz: Added. n/epic5-2.1.2-x86_64-1.txz: Upgraded. n/php-7.4.6-x86_64-1.txz: Upgraded. Built using --with-tidy=shared. Thanks to Thom1b. This update fixes bugs and security issues: Core: Long variables cause OOM and temp files are not cleaned. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11048 (* Security fix *) x/libmypaint-1.6.1-x86_64-1.txz: Upgraded. Shared library .so-version bump. xap/gimp-2.10.18-x86_64-2.txz: Rebuilt. Recompiled against libmypaint-1.6.1. testing/packages/PAM/mariadb-10.4.13-x86_64-1_pam.txz: Upgraded. This update fixes potential denial-of-service vulnerabilities. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2752 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2812 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2814 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2760 (* Security fix *) testing/packages/PAM/sudo-1.9.0-x86_64-1_pam.txz: Upgraded.
* Sat May 9 20:49:43 UTC 202020200509204943 Patrick J Volkerding2020-05-109-96/+0
| | | | | | | | | | | | | | | | | | | ap/pamixer-1.4-x86_64-5.txz: Rebuilt. Recompiled against boost-1.73.0. d/Cython-0.29.17-x86_64-2.txz: Rebuilt. Added cython3 symlink. kde/calligra-2.9.11-x86_64-35.txz: Rebuilt. Recompiled against boost-1.73.0. l/akonadi-1.13.0-x86_64-15.txz: Rebuilt. Recompiled against boost-1.73.0. l/boost-1.73.0-x86_64-1.txz: Upgraded. Shared library .so-version bump. l/freetype-2.10.2-x86_64-1.txz: Upgraded. l/imagemagick-7.0.10_11-x86_64-1.txz: Upgraded. n/libqmi-1.24.12-x86_64-1.txz: Upgraded. xap/blueman-2.1.3-x86_64-1.txz: Upgraded. testing/packages/PAM/pam-krb5-4.9-x86_64-1_pam.txz: Added. Thanks to Bart van der Hall for the packaging hints.
* Tue May 5 20:21:27 UTC 202020200505202127 Patrick J Volkerding2020-05-062-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a/hwdata-0.335-noarch-1.txz: Upgraded. ap/tmux-3.1b-x86_64-1.txz: Upgraded. l/libcap-2.34-x86_64-1.txz: Upgraded. n/mutt-1.14.0-x86_64-1.txz: Upgraded. n/nfs-utils-2.4.3-x86_64-3.txz: Rebuilt. Added /var/lib/nfs/nfsdcltrack database directory for nfsdcltrack. Thanks to upnort. x/xterm-356-x86_64-1.txz: Upgraded. xap/NetworkManager-openvpn-1.8.12-x86_64-1.txz: Added. Thanks to Robby Workman. xap/mozilla-firefox-68.8.0esr-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/firefox/68.8.0/releasenotes/ https://www.mozilla.org/security/advisories/mfsa2020-17/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12387 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12388 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12389 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6831 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12392 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12393 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12395 (* Security fix *) xap/mozilla-thunderbird-68.8.0-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/68.8.0/releasenotes/ (* Security fix *) testing/packages/PAM/libcap-2.34-x86_64-1_pam.txz: Upgraded.
* Fri May 1 18:05:38 UTC 202020200501180538 Patrick J Volkerding2020-05-022-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a/cryptsetup-2.3.2-x86_64-1.txz: Upgraded. a/sysvinit-scripts-2.1-noarch-30.txz: Rebuilt. rc.S: contents of mounts below /run or /var/run should be visible in both /run and /var/run. Thanks to Markus Wiesner. d/Cython-0.29.17-x86_64-1.txz: Upgraded. Dropped python2 support. d/python-pip-20.1-x86_64-1.txz: Upgraded. Dropped python2 support. d/python-setuptools-46.1.3-x86_64-1.txz: Upgraded. Dropped python2 support. l/M2Crypto-0.35.2-x86_64-5.txz: Rebuilt. Dropped python2 support. l/Mako-1.1.2-x86_64-2.txz: Rebuilt. Dropped python2 support. l/gsettings-desktop-schemas-3.36.1-x86_64-1.txz: Upgraded. l/libzip-1.6.1-x86_64-2.txz: Rebuilt. Recompiled against nettle-3.6. l/oniguruma-6.9.5_rev1-x86_64-1.txz: Upgraded. l/pycairo-1.19.1-x86_64-1.txz: Upgraded. Dropped python2 support. l/pycups-2.0.1-x86_64-1.txz: Upgraded. Dropped python2 support. l/pycurl-7.43.0.5-x86_64-1.txz: Upgraded. Dropped python2 support. l/pyparsing-2.4.7-x86_64-1.txz: Upgraded. Dropped python2 support. l/python-appdirs-1.4.3-x86_64-5.txz: Rebuilt. Dropped python2 support. l/python-certifi-2020.4.5.1-x86_64-1.txz: Upgraded. Dropped python2 support. l/python-chardet-3.0.4-x86_64-5.txz: Rebuilt. Dropped python2 support. l/python-docutils-0.16-x86_64-3.txz: Rebuilt. Dropped python2 support. l/python-enum34-1.1.10-x86_64-1.txz: Removed. l/python-future-0.18.2-x86_64-2.txz: Rebuilt. Dropped python2 support. l/python-idna-2.9-x86_64-2.txz: Rebuilt. Dropped python2 support. l/python-notify2-0.3.1-x86_64-5.txz: Rebuilt. Dropped python2 support. l/python-packaging-20.3-x86_64-2.txz: Rebuilt. Dropped python2 support. l/python-ply-3.11-x86_64-3.txz: Rebuilt. Dropped python2 support. l/python-pygments-2.6.1-x86_64-1.txz: Upgraded. Dropped python2 support. l/python-requests-2.23.0-x86_64-2.txz: Rebuilt. Dropped python2 support. l/python-sane-2.8.3-x86_64-5.txz: Rebuilt. Dropped python2 support. l/python-six-1.14.0-x86_64-2.txz: Rebuilt. Dropped python2 support. l/python-urllib3-1.25.9-x86_64-1.txz: Upgraded. Dropped python2 support. l/python2-module-collection-2.7.18-x86_64-1.txz: Added. Time to quarantine these python2 modules and pin the versions where they are (or in the case of setuptools, downgrade to the last version that doesn't complain). This will keep most of the standard python2 add-ons in one package so that we can upgrade modules for python3 without having to worry about python2 support getting dropped upstream. n/dnsmasq-2.81-x86_64-2.txz: Rebuilt. Recompiled against nettle-3.6. n/gnutls-3.6.13-x86_64-2.txz: Rebuilt. Recompiled against nettle-3.6. n/nettle-3.6-x86_64-1.txz: Upgraded. Shared library .so-version bump. x/mesa-20.0.6-x86_64-1.txz: Upgraded. x/pyxdg-0.26-x86_64-3.txz: Rebuilt. Dropped python2 support. x/ttf-tlwg-0.7.2-noarch-1.txz: Upgraded. x/xorg-server-1.20.8-x86_64-2.txz: Rebuilt. Recompiled against nettle-3.6. x/xorg-server-xephyr-1.20.8-x86_64-2.txz: Rebuilt. Recompiled against nettle-3.6. x/xorg-server-xnest-1.20.8-x86_64-2.txz: Rebuilt. Recompiled against nettle-3.6. x/xorg-server-xvfb-1.20.8-x86_64-2.txz: Rebuilt. Recompiled against nettle-3.6. x/xorg-server-xwayland-1.20.8-x86_64-2.txz: Rebuilt. Recompiled against nettle-3.6. x/xterm-355-x86_64-1.txz: Upgraded. xap/rdesktop-1.9.0-x86_64-2.txz: Rebuilt. Recompiled against nettle-3.6. extra/tigervnc/tigervnc-1.10.1-x86_64-3.txz: Rebuilt. Recompiled against nettle-3.6.
* Wed Apr 29 20:19:12 UTC 202020200429201912 Patrick J Volkerding2020-04-301-1/+1
| | | | | | | | | | ap/tmux-3.1a-x86_64-1.txz: Upgraded. d/cmake-3.17.2-x86_64-1.txz: Upgraded. n/curl-7.70.0-x86_64-1.txz: Upgraded. n/openldap-client-2.4.50-x86_64-1.txz: Upgraded. xap/audacious-4.0.3-x86_64-1.txz: Upgraded. xap/audacious-plugins-4.0.3-x86_64-1.txz: Upgraded. extra/pure-alsa-system/audacious-plugins-4.0.3-x86_64-1_alsa.txz: Upgraded.
* Tue Apr 28 20:18:40 UTC 202020200428201840 Patrick J Volkerding2020-04-291-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ap/cups-2.3.3-x86_64-1.txz: Upgraded. This update fixes two security issues: The ppdOpen function did not handle invalid UI constraint. ppdcSource::get_resolution function did not handle invalid resolution strings. The ippReadIO function may under-read an extension. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3898 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8842 (* Security fix *) l/imagemagick-7.0.10_10-x86_64-1.txz: Upgraded. n/samba-4.12.2-x86_64-1.txz: Upgraded. This update fixes two security issues: A client combining the 'ASQ' and 'Paged Results' LDAP controls can cause a use-after-free in Samba's AD DC LDAP server. A deeply nested filter in an un-authenticated LDAP search can exhaust the LDAP server's stack memory causing a SIGSEGV. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10700 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10704 (* Security fix *) testing/packages/PAM/cups-2.3.3-x86_64-1_pam.txz: Upgraded. This update fixes two security issues: The ppdOpen function did not handle invalid UI constraint. ppdcSource::get_resolution function did not handle invalid resolution strings. The ippReadIO function may under-read an extension. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3898 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8842 (* Security fix *) testing/packages/PAM/samba-4.12.2-x86_64-1_pam.txz: Upgraded. This update fixes two security issues: A client combining the 'ASQ' and 'Paged Results' LDAP controls can cause a use-after-free in Samba's AD DC LDAP server. A deeply nested filter in an un-authenticated LDAP search can exhaust the LDAP server's stack memory causing a SIGSEGV. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10700 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10704 (* Security fix *)
* Mon Apr 27 20:27:30 UTC 202020200427202730 Patrick J Volkerding2020-04-282-2/+16
| | | | | | | | | | | | | | | | | | | | | | a/mkinitrd-1.4.11-x86_64-15.txz: Rebuilt. Use the standard mktemp utility from GNU coreutils, not the old tempfile. d/help2man-1.47.15-x86_64-1.txz: Upgraded. l/aspell-en-2019.10.06_0-x86_64-1.txz: Upgraded. l/gtk+3-3.24.20-x86_64-1.txz: Upgraded. l/imagemagick-7.0.10_9-x86_64-1.txz: Upgraded. n/irssi-1.2.2-x86_64-2.txz: Rebuilt. Fixed ctrl-space killing input with recent glib. Thanks to tramtrist and Urchlay. x/xterm-354-x86_64-1.txz: Upgraded. extra/aspell-word-lists/aspell-de-20161207_7_0-x86_64-1.txz: Upgraded. extra/aspell-word-lists/aspell-ga-5.1_0-x86_64-1.txz: Upgraded. extra/aspell-word-lists/aspell-it-2.4_20070901_0-x86_64-1.txz: Upgraded. extra/aspell-word-lists/aspell-ml-0.04_1-x86_64-1.txz: Upgraded. extra/aspell-word-lists/aspell-pl-6.0_20200327_0-x86_64-1.txz: Upgraded. extra/aspell-word-lists/aspell-pt_BR-20131030_12_0-x86_64-1.txz: Upgraded. extra/aspell-word-lists/aspell-pt_PT-20190329_1_0-x86_64-1.txz: Upgraded. extra/aspell-word-lists/aspell-sk-2.02_0-x86_64-1.txz: Upgraded. extra/aspell-word-lists/aspell-tl-0.4_0-x86_64-1.txz: Upgraded.
* Sun Apr 26 18:28:01 UTC 202020200426182801 Patrick J Volkerding2020-04-271-2/+2
| | | | | | | d/meson-0.54.1-x86_64-1.txz: Upgraded. l/vte-0.60.2-x86_64-1.txz: Upgraded. n/fetchmail-6.4.4-x86_64-1.txz: Upgraded. n/s-nail-14.9.19-x86_64-1.txz: Upgraded.
* Fri Apr 24 18:54:41 UTC 202020200424185441 Patrick J Volkerding2020-04-252-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | a/bash-5.0.017-x86_64-1.txz: Upgraded. a/kernel-generic-5.4.35-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.35-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.35-x86_64-1.txz: Upgraded. a/mcelog-169-x86_64-1.txz: Upgraded. ap/nvme-cli-1.11.1-x86_64-1.txz: Upgraded. ap/powertop-2.12-x86_64-1.txz: Upgraded. ap/tmux-3.1-x86_64-1.txz: Upgraded. d/kernel-headers-5.4.35-x86-1.txz: Upgraded. d/parallel-20200422-noarch-1.txz: Upgraded. d/rust-1.43.0-x86_64-1.txz: Upgraded. d/vala-0.48.5-x86_64-1.txz: Upgraded. k/kernel-source-5.4.35-noarch-1.txz: Upgraded. l/gmm-5.4-noarch-1.txz: Upgraded. l/librsvg-2.48.4-x86_64-1.txz: Upgraded. l/sip-4.19.22-x86_64-1.txz: Upgraded. n/dhcpcd-8.1.9-x86_64-1.txz: Upgraded. x/mesa-20.0.5-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
* Sun Apr 19 21:06:43 UTC 202020200419210643 Patrick J Volkerding2020-04-201-2/+2
| | | | | | | l/neon-0.31.1-x86_64-1.txz: Upgraded. n/postfix-3.5.1-x86_64-1.txz: Upgraded. n/s-nail-14.9.18-x86_64-1.txz: Upgraded. xap/gnuchess-6.2.6-x86_64-1.txz: Upgraded.
* Tue Apr 14 22:26:11 UTC 202020200414222611 Patrick J Volkerding2020-04-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | a/gawk-5.1.0-x86_64-1.txz: Upgraded. a/gettext-0.20.2-x86_64-1.txz: Upgraded. d/gettext-tools-0.20.2-x86_64-1.txz: Upgraded. d/git-2.26.1-x86_64-1.txz: Upgraded. This update fixes a security issue: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has been made impossible by forbidding a newline character in any value passed via the credential protocol. Credit for finding the vulnerability goes to Felix Wilhelm of Google Project Zero. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5260 (* Security fix *) l/glib-networking-2.64.2-x86_64-1.txz: Upgraded. l/libsecret-0.20.3-x86_64-1.txz: Upgraded. n/php-7.4.5-x86_64-1.txz: Upgraded. x/xorgproto-2020.1-x86_64-1.txz: Upgraded. xap/audacious-4.0.2-x86_64-1.txz: Upgraded. xap/audacious-plugins-4.0.2-x86_64-1.txz: Upgraded. extra/pure-alsa-system/audacious-plugins-4.0.2-x86_64-1_alsa.txz: Upgraded.
* Mon Apr 13 22:16:49 UTC 202020200413221649 Patrick J Volkerding2020-04-142-1/+1
| | | | | | | | | | | | | | | a/kernel-firmware-20200413_64dba0f-noarch-1.txz: Upgraded. a/kernel-generic-5.4.32-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.32-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.32-x86_64-1.txz: Upgraded. d/doxygen-1.8.18-x86_64-1.txz: Upgraded. d/kernel-headers-5.4.32-x86-1.txz: Upgraded. k/kernel-source-5.4.32-noarch-1.txz: Upgraded. n/dhcpcd-8.1.8-x86_64-1.txz: Upgraded. x/libvdpau-1.4-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
* Sun Apr 12 20:02:28 UTC 202020200412200228 Patrick J Volkerding2020-04-132-24/+1
| | | | | | | ap/man-pages-5.06-noarch-1.txz: Upgraded. l/libyaml-0.2.3-x86_64-1.txz: Upgraded. n/dnsmasq-2.81-x86_64-1.txz: Upgraded. x/libinput-1.15.5-x86_64-1.txz: Upgraded.
* Fri Apr 10 20:33:06 UTC 202020200410203306 Patrick J Volkerding2020-04-111-1/+1
| | | | | | | | | | ap/cups-filters-1.27.4-x86_64-1.txz: Upgraded. ap/qpdf-10.0.1-x86_64-1.txz: Upgraded. ap/sysstat-12.3.2-x86_64-1.txz: Upgraded. l/gtk+3-3.24.18-x86_64-1.txz: Upgraded. l/librsvg-2.48.3-x86_64-1.txz: Upgraded. n/libqmi-1.24.10-x86_64-1.txz: Upgraded. n/libtirpc-1.2.6-x86_64-1.txz: Upgraded.
* Tue Apr 7 22:23:02 UTC 202020200407222302 Patrick J Volkerding2020-04-081-2/+2
| | | | testing/packages/PAM/samba-4.12.1-x86_64-1_pam.txz: Upgraded.
* Sun Apr 5 21:02:32 UTC 202020200405210232 Patrick J Volkerding2020-04-062-14/+0
| | | | | | | | | | | | | | | | | | | | | | | | d/bison-3.5.4-x86_64-1.txz: Upgraded. kde/k3b-2.0.3-x86_64-7.txz: Rebuilt. Recompiled against libdvdread-6.1.1. l/gobject-introspection-1.64.1-x86_64-1.txz: Upgraded. l/imagemagick-7.0.10_4-x86_64-1.txz: Upgraded. l/libdvdnav-6.1.0-x86_64-2.txz: Rebuilt. Recompiled against libdvdread-6.1.1. Who bumps an .soname and only boosts the version number by 0.0.1? Anyway, sorry to drop the ball a second time. I'll try to avoid this. Thanks to gmgf for the bug report. n/fetchmail-6.4.3-x86_64-1.txz: Upgraded. tcl/tclx-8.4.4-x86_64-1.txz: Upgraded. xap/MPlayer-20200103-x86_64-2.txz: Rebuilt. Recompiled against libdvdread-6.1.1. xap/windowmaker-0.95.9-x86_64-1.txz: Upgraded. xap/xine-lib-1.2.10-x86_64-2.txz: Rebuilt. Recompiled against libdvdread-6.1.1. extra/pure-alsa-system/MPlayer-20200103-x86_64-2_alsa.txz: Rebuilt. Recompiled against libdvdread-6.1.1. extra/pure-alsa-system/xine-lib-1.2.10-x86_64-2_alsa.txz: Rebuilt. Recompiled against libdvdread-6.1.1.
* Fri Apr 3 23:07:16 UTC 202020200403230716 Patrick J Volkerding2020-04-042-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | ap/lsof-4.93.2-x86_64-2.txz: Rebuilt. Fixed the manpage. Thanks to kaott. ap/sc-7.16-x86_64-7.txz: Rebuilt. Brought back the classic SC. Thanks to dive. d/Cython-0.29.16-x86_64-1.txz: Upgraded. d/mercurial-5.3.2-x86_64-1.txz: Upgraded. l/gtk+3-3.24.17-x86_64-1.txz: Upgraded. n/dhcpcd-8.1.7-x86_64-1.txz: Upgraded. n/iproute2-5.6.0-x86_64-1.txz: Upgraded. x/libdrm-2.4.101-x86_64-1.txz: Upgraded. x/mesa-20.0.4-x86_64-1.txz: Upgraded. xap/mozilla-firefox-68.6.1esr-x86_64-1.txz: Upgraded. This release contains critical security fixes and improvements. "Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw." "Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw." For more information, see: https://www.mozilla.org/en-US/firefox/68.6.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820 (* Security fix *)
* Thu Apr 2 22:13:11 UTC 202020200402221311 Patrick J Volkerding2020-04-032-0/+2
| | | | | | | | | | | | | | | | | | | | a/kernel-generic-5.4.30-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.30-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.30-x86_64-1.txz: Upgraded. d/kernel-headers-5.4.30-x86-1.txz: Upgraded. k/kernel-source-5.4.30-noarch-1.txz: Upgraded. l/atk-2.36.0-x86_64-1.txz: Upgraded. l/libunwind-1.4.0-x86_64-1.txz: Upgraded. n/conntrack-tools-1.4.6-x86_64-1.txz: Upgraded. n/libnetfilter_conntrack-1.0.8-x86_64-1.txz: Upgraded. n/libnftnl-1.1.6-x86_64-1.txz: Upgraded. n/nftables-0.9.4-x86_64-1.txz: Upgraded. x/mesa-20.0.3-x86_64-1.txz: Upgraded. xap/network-manager-applet-1.16.0-x86_64-2.txz: Rebuilt. Rebuilt using meson. Thanks to bassmadrigal. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
* Tue Mar 31 19:01:17 UTC 202020200331190117 Patrick J Volkerding2020-04-012-3/+3
| | | | | | | | | | | | | | | | a/dialog-1.3_20200327-x86_64-1.txz: Upgraded. a/openssl-solibs-1.1.1f-x86_64-1.txz: Upgraded. ap/nano-4.9.1-x86_64-1.txz: Upgraded. l/elfutils-0.179-x86_64-1.txz: Upgraded. n/gnutls-3.6.13-x86_64-1.txz: Upgraded. This update fixes a security issue: libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support), since 3.6.3. The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol. [GNUTLS-SA-2020-03-31, CVSS: high] (* Security fix *) n/httpd-2.4.43-x86_64-1.txz: Upgraded. n/openssl-1.1.1f-x86_64-1.txz: Upgraded.
* Sun Mar 29 23:05:46 UTC 202020200329230546 Patrick J Volkerding2020-03-301-1/+2
| | | | | | | | | | | | | | | | | d/ccache-3.7.9-x86_64-1.txz: Upgraded. d/llvm-10.0.0-x86_64-2.txz: Rebuilt. Ensure that lit-cpuid is built and installed. Thanks to jkh2cpu. l/imagemagick-7.0.10_3-x86_64-1.txz: Upgraded. l/netpbm-10.90.00-x86_64-1.txz: Upgraded. n/mutt-1.13.5-x86_64-1.txz: Upgraded. n/nfs-utils-2.4.3-x86_64-2.txz: Rebuilt. Rebuilt with --with-pluginpath=/usr/lib${LIBDIRSUFFIX}/libnfsidmap. Thanks to lecho. x/xorg-server-1.20.8-x86_64-1.txz: Upgraded. x/xorg-server-xephyr-1.20.8-x86_64-1.txz: Upgraded. x/xorg-server-xnest-1.20.8-x86_64-1.txz: Upgraded. x/xorg-server-xvfb-1.20.8-x86_64-1.txz: Upgraded. x/xorg-server-xwayland-1.20.8-x86_64-1.txz: Upgraded.
* Tue Mar 24 05:08:25 UTC 202020200324050825 Patrick J Volkerding2020-03-243-3478/+3
| | | | | | n/curl-7.69.1-x86_64-3.txz: Rebuilt. Removed --with-ca-bundle=/usr/share/curl/ca-bundle.crt and added --without-ca-bundle. Thanks to drgibbon and Willy Sudiarto Raharjo.
* Thu Mar 19 22:01:05 UTC 202020200319220105 Patrick J Volkerding2020-03-201-3/+2
| | | | | | | | | | | ap/ghostscript-9.52-x86_64-1.txz: Upgraded. l/PyQt5-5.13.2-x86_64-1.txz: Added. l/QScintilla-2.11.4-x86_64-3.txz: Rebuilt. Added PyQt5 support. Thanks to alienBOB. l/sip-4.19.21-x86_64-2.txz: Rebuilt. Recompiled to pick up Qt5 support. n/gpgme-1.13.1-x86_64-3.txz: Rebuilt. Added Qt5 bindings. Thanks to alienBOB.
* Thu Mar 19 01:45:30 UTC 202020200319014530 Patrick J Volkerding2020-03-194-350/+6
| | | | | | | | | | | | | | | Don't bother with 5.4.26 folks, just wait for the next one. Trust me. a/tcsh-6.22.02-x86_64-2.txz: Rebuilt. Fixed merging history from multiple shells. Thanks to jmccue. a/xz-5.2.5-x86_64-1.txz: Upgraded. d/git-2.25.2-x86_64-1.txz: Upgraded. l/glibmm-2.64.1-x86_64-1.txz: Upgraded. n/bind-9.16.1-x86_64-1.txz: Upgraded. n/dovecot-2.3.10-x86_64-2.txz: Rebuilt. x/libinput-1.15.4-x86_64-1.txz: Upgraded. x/mesa-20.0.2-x86_64-1.txz: Upgraded. testing/packages/PAM/dovecot-2.3.10-x86_64-2_pam.txz: Rebuilt. Recompiled using --with-pam. Thanks to HQuest.
* Tue Mar 17 22:11:07 UTC 202020200317221107 Patrick J Volkerding2020-03-182-52/+45
| | | | | | | | | | | | | | | | | | | | | | | Happy Feast of Saint Patrick. Stay safe everyone. a/openssl-solibs-1.1.1e-x86_64-1.txz: Upgraded. d/ccache-3.7.8-x86_64-1.txz: Upgraded. l/glibmm-2.64.0-x86_64-1.txz: Upgraded. n/openssl-1.1.1e-x86_64-1.txz: Upgraded. Fixed an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1551 (* Security fix *) n/php-7.4.4-x86_64-1.txz: Upgraded. This update fixes bugs and security issues: Core: get_headers() silently truncates after a null byte EXIF: Use-of-uninitialized-value in exif MBstring: mb_strtolower: stack-buffer-overflow at php_unicode_tolower_full For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7066 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7064 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7065 (* Security fix *)
* Mon Mar 16 21:20:17 UTC 202020200316212017 Patrick J Volkerding2020-03-172-25/+1
| | | | | | | | a/kernel-firmware-20200316_8eb0b28-noarch-1.txz: Upgraded. l/imagemagick-7.0.10_1-x86_64-1.txz: Upgraded. l/qt5-webkit-5.212.0_alpha4-x86_64-1.txz: Upgraded. n/libqmi-1.24.8-x86_64-1.txz: Upgraded. n/postfix-3.5.0-x86_64-1.txz: Upgraded.
* Tue Mar 10 19:53:39 UTC 202020200310195339 Patrick J Volkerding2020-03-111-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | d/guile-3.0.1-x86_64-1.txz: Upgraded. l/SDL2-2.0.10-x86_64-2.txz: Rebuilt. Rebuilt to pick up wayland support. Thanks to franzen. l/dconf-0.36.0-x86_64-1.txz: Upgraded. l/dconf-editor-3.36.0-x86_64-1.txz: Upgraded. l/gsettings-desktop-schemas-3.36.0-x86_64-1.txz: Upgraded. l/python-pygments-2.5.2-x86_64-1.txz: Upgraded. It seems like the pragmatic thing to do here is to revert this one to fix the python2 programs and modules that depend on it. We'll have to do a bit more research to determine what the best course of action is regarding python2 in general, though. Certainly we shouldn't be requiring python2 for anything important moving forward, but even that will take some work. Plasma 5 as currently built has multiple dependencies on python2, for example. n/bind-9.16.0-x86_64-4.txz: Rebuilt. Drop python2 support and switch to python3. x/liberation-fonts-ttf-2.1.0-noarch-1.txz: Upgraded. xap/mozilla-firefox-68.6.0esr-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/firefox/68.6.0/releasenotes/ https://www.mozilla.org/security/advisories/mfsa2020-09/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6805 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6806 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6807 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6811 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20503 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6812 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6814 (* Security fix *)
* Sat Mar 7 20:25:36 UTC 202020200307202536 Patrick J Volkerding2020-03-081-1/+1
| | | | | | | | | | | | | | | l/gobject-introspection-1.64.0-x86_64-1.txz: Upgraded. l/imagemagick-7.0.10_0-x86_64-1.txz: Upgraded. l/libical-3.0.8-x86_64-1.txz: Upgraded. l/librsvg-2.48.0-x86_64-1.txz: Upgraded. l/libsoup-2.70.0-x86_64-1.txz: Upgraded. l/mozilla-nss-3.51-x86_64-1.txz: Upgraded. xap/libnma-1.8.28-x86_64-1.txz: Added. This is the NetworkManager GUI client library, which was previously provided by network-manager-applet. It's now a standalone project, and is required by network-manager-applet and other NetworkManager frontends. xap/network-manager-applet-1.16.0-x86_64-1.txz: Upgraded. This requires the new libnma package.
* Fri Mar 6 22:10:25 UTC 202020200306221025 Patrick J Volkerding2020-03-074-3/+346
| | | | | | | | | | | | | | | | | | | | | | | | | | a/cryptsetup-2.3.0-x86_64-2.txz: Rebuilt. Include some additional documentation. Thanks to regdub. a/sdparm-1.11-x86_64-1.txz: Upgraded. ap/moc-2.5.2-x86_64-6.txz: Rebuilt. Fixed docs permissions. Thanks to regdub. l/glib-networking-2.64.0-x86_64-1.txz: Upgraded. l/glib2-2.64.0-x86_64-1.txz: Upgraded. l/gvfs-1.44.0-x86_64-1.txz: Upgraded. l/libnl-1.1.4-x86_64-3.txz: Rebuilt. Fixed docs permissions. Thanks to regdub. l/tdb-1.4.3-x86_64-3.txz: Rebuilt. Fixed docs permissions. Thanks to regdub. l/tevent-0.10.2-x86_64-3.txz: Rebuilt. Fixed docs permissions. Thanks to regdub. n/bind-9.16.0-x86_64-3.txz: Rebuilt. Applied upstream patch to fix a discrepancy in the quota code that can result in a situation where the count is not properly decremented in some cases. n/dovecot-2.3.10-x86_64-1.txz: Upgraded. n/rp-pppoe-3.13-x86_64-2.txz: Rebuilt. This needed a rebuild for ppp-2.4.8. Thanks to regdub. x/libinput-1.15.3-x86_64-1.txz: Upgraded. testing/packages/PAM/dovecot-2.3.10-x86_64-1_pam.txz: Upgraded.
* Fri Mar 6 02:45:42 UTC 202020200306024542 Patrick J Volkerding2020-03-061-1/+1
| | | | | | | | | | | | | | | | | | a/coreutils-8.32-x86_64-1.txz: Upgraded. a/kernel-generic-5.4.24-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.24-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.24-x86_64-1.txz: Upgraded. a/kmod-27-x86_64-1.txz: Upgraded. d/kernel-headers-5.4.24-x86-1.txz: Upgraded. d/mercurial-5.3.1-x86_64-1.txz: Upgraded. k/kernel-source-5.4.24-noarch-1.txz: Upgraded. -HEADER_TEST n l/python-packaging-20.3-x86_64-1.txz: Upgraded. l/vte-0.60.0-x86_64-1.txz: Upgraded. x/mesa-20.0.1-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
* Wed Mar 4 22:03:30 UTC 202020200304220330 Patrick J Volkerding2020-03-059-127/+59
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a/sdparm-1.10-x86_64-3.txz: Rebuilt. Recompiled against sg3_utils-1.45. a/udisks-1.0.5-x86_64-5.txz: Rebuilt. Recompiled against sg3_utils-1.45. d/cmake-3.16.5-x86_64-1.txz: Upgraded. l/libgpod-0.8.3-x86_64-6.txz: Rebuilt. Recompiled against sg3_utils-1.45. n/curl-7.69.0-x86_64-1.txz: Upgraded. n/cyrus-sasl-2.1.27-x86_64-3.txz: Rebuilt. Added SQL support via MariaDB. Thanks to niksoggia. n/ntp-4.2.8p14-x86_64-1.txz: Upgraded. n/ppp-2.4.8-x86_64-1.txz: Upgraded. This update fixes a security issue: By sending an unsolicited EAP packet to a vulnerable ppp client or server, an unauthenticated remote attacker could cause memory corruption in the pppd process, which may allow for arbitrary code execution. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8597 (* Security fix *) testing/packages/PAM/cyrus-sasl-2.1.27-x86_64-3_pam.txz: Rebuilt. Added SQL support via MariaDB. Thanks to niksoggia. testing/packages/PAM/ppp-2.4.8-x86_64-1_pam.txz: Upgraded. This update fixes a security issue: By sending an unsolicited EAP packet to a vulnerable ppp client or server, an unauthenticated remote attacker could cause memory corruption in the pppd process, which may allow for arbitrary code execution. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8597 (* Security fix *)
* Wed Mar 4 01:39:54 UTC 202020200304013954 Patrick J Volkerding2020-03-045-735/+3
| | | | | xap/seamonkey-2.53.1-x86_64-2.txz: Rebuilt. Fixed $LIBDIRSUFFIX for 32-bit. Thanks to ljb643.
* Mon Mar 2 19:05:10 UTC 202020200302190510 Patrick J Volkerding2020-03-032-7/+10
| | | | | | | | | | | | | | | | | | a/dialog-1.3_20200228-x86_64-1.txz: Upgraded. l/Mako-1.1.2-x86_64-1.txz: Upgraded. l/imagemagick-7.0.9_27-x86_64-1.txz: Upgraded. l/libcap-2.33-x86_64-1.txz: Upgraded. n/bind-9.16.0-x86_64-2.txz: Rebuilt. rc.bind: ensure /var/run/named exists before starting named. Thanks to MarcT. rc.bind: when stopping named, only kill processes in the current namespace. x/libevdev-1.9.0-x86_64-1.txz: Upgraded. x/wayland-protocols-1.20-noarch-1.txz: Upgraded. xap/seamonkey-2.53.1-x86_64-1.txz: Upgraded. This update contains security fixes and improvements. For more information, see: https://www.seamonkey-project.org/releases/seamonkey2.53.1 (* Security fix *) testing/packages/PAM/libcap-2.33-x86_64-1_pam.txz: Upgraded.
* Sat Feb 22 19:31:36 UTC 202020200222193136 Patrick J Volkerding2020-02-232-4/+29
| | | | | | | | | | | ap/lsscsi-0.31-x86_64-1.txz: Upgraded. l/libxkbcommon-0.10.0-x86_64-2.txz: Rebuilt. Rebuilt to add wayland support. n/dnsmasq-2.80-x86_64-4.txz: Rebuilt. Rebuilt with: -DHAVE_DNSSEC -DHAVE_DBUS -DHAVE_LIBIDN2 -DHAVE_CONNTRACK x/intel-vaapi-driver-2.4.0-x86_64-2.txz: Rebuilt. Rebuilt to add wayland support. x/libglvnd-1.3.1-x86_64-1.txz: Upgraded.
* Thu Feb 20 23:40:12 UTC 202020200220234012 Patrick J Volkerding2020-02-213-12/+22
| | | | | | | | | | | | | | | | | | | | | | | a/ed-1.16-x86_64-1.txz: Upgraded. l/gtk+3-3.24.14-x86_64-3.txz: Rebuilt. Rebuilt to add wayland backend. l/libuv-1.34.2-x86_64-1.txz: Added. This is needed by bind-9.16.0. l/qt5-5.13.2-x86_64-2.txz: Rebuilt. Rebuilt to add wayland support. Use the system ffmpeg, not the bundled one. n/bind-9.16.0-x86_64-1.txz: Upgraded. rc.bind: don't change file ownerships in /var/named. Thanks to voegelas. n/proftpd-1.3.6c-x86_64-1.txz: Upgraded. No CVEs assigned, but this sure looks like a security issue: Use-after-free vulnerability in memory pools during data transfer. (* Security fix *) x/libinput-1.15.2-x86_64-1.txz: Upgraded. x/xkbcomp-1.4.3-x86_64-1.txz: Upgraded. testing/packages/PAM/proftpd-1.3.6c-x86_64-1_pam.txz: Upgraded. No CVEs assigned, but this sure looks like a security issue: Use-after-free vulnerability in memory pools during data transfer. (* Security fix *)
* Thu Feb 20 04:50:54 UTC 202020200220045054 Patrick J Volkerding2020-02-205-14/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a/gptfdisk-1.0.5-x86_64-1.txz: Upgraded. a/kernel-firmware-20200219_2277987-noarch-1.txz: Upgraded. a/kernel-generic-5.4.21-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.21-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.21-x86_64-1.txz: Upgraded. a/shadow-4.8.1-x86_64-5.txz: Rebuilt. a/util-linux-2.35.1-x86_64-4.txz: Rebuilt. ap/cdparanoia-III_10.2-x86_64-3.txz: Rebuilt. Moved man page from /usr/man/jp/man1/ to /usr/man/ja/man1/. Thanks to Xsane. Don't ship the static libraries. d/kernel-headers-5.4.21-x86-1.txz: Upgraded. k/kernel-source-5.4.21-noarch-1.txz: Upgraded. SND_SOC n -> m SPI n -> y VFIO_PCI_VGA n -> y +ADE7854_SPI m +ADT7316_SPI m +BMC150_ACCEL_SPI m +BMG160_SPI m +BMP280_SPI m +FXAS21002C_SPI m +HTS221_SPI m +IIO_ST_ACCEL_SPI_3AXIS m +IIO_ST_GYRO_SPI_3AXIS m +IIO_ST_MAGN_SPI_3AXIS m +IIO_ST_PRESS_SPI m +IIO_ST_SENSORS_SPI m +INPUT_AD714X_SPI m +INPUT_ADXL34X_SPI m +KXSD9_SPI m +REGMAP_SPI m +SND_COMPRESS_OFFLOAD m +SND_DESIGNWARE_I2S m +SND_DESIGNWARE_PCM y +SND_DMAENGINE_PCM m +SND_HDA_EXT_CORE m +SND_I2S_HI6210_I2S m +SND_PCM_ELD y +SND_PCM_IEC958 y +SND_SIMPLE_CARD m +SND_SIMPLE_CARD_UTILS m +SND_SOC_AC97_BUS y +SND_SOC_AC97_CODEC m +SND_SOC_ACPI m +SND_SOC_ACPI_INTEL_MATCH m +SND_SOC_ADAU1761 m +SND_SOC_ADAU1761_I2C m +SND_SOC_ADAU1761_SPI m +SND_SOC_ADAU17X1 m +SND_SOC_ADAU7002 m +SND_SOC_ADAU_UTILS m +SND_SOC_AMD_ACP m +SND_SOC_AMD_ACP3x m +SND_SOC_AMD_CZ_DA7219MX98357_MACH m +SND_SOC_AMD_CZ_RT5645_MACH m +SND_SOC_BD28623 m +SND_SOC_COMPRESS y +SND_SOC_CROS_EC_CODEC m +SND_SOC_CS35L34 m +SND_SOC_CS35L35 m +SND_SOC_CS35L36 m +SND_SOC_CS42L42 m +SND_SOC_CS43130 m +SND_SOC_CX2072X m +SND_SOC_DA7213 m +SND_SOC_DA7219 m +SND_SOC_DMIC m +SND_SOC_ES7134 m +SND_SOC_ES7241 m +SND_SOC_ES8316 m +SND_SOC_ES8328 m +SND_SOC_ES8328_I2C m +SND_SOC_ES8328_SPI m +SND_SOC_GENERIC_DMAENGINE_PCM y +SND_SOC_HDAC_HDA m +SND_SOC_HDAC_HDMI m +SND_SOC_HDMI_CODEC m +SND_SOC_I2C_AND_SPI m +SND_SOC_INTEL_APL m +SND_SOC_INTEL_BDW_RT5677_MACH m +SND_SOC_INTEL_BROADWELL_MACH m +SND_SOC_INTEL_BXT_DA7219_MAX98357A_MACH m +SND_SOC_INTEL_BXT_RT298_MACH m +SND_SOC_INTEL_BYTCR_RT5640_MACH m +SND_SOC_INTEL_BYTCR_RT5651_MACH m +SND_SOC_INTEL_BYT_CHT_CX2072X_MACH m +SND_SOC_INTEL_BYT_CHT_DA7213_MACH m +SND_SOC_INTEL_BYT_CHT_ES8316_MACH m +SND_SOC_INTEL_BYT_CHT_NOCODEC_MACH m +SND_SOC_INTEL_CFL m +SND_SOC_INTEL_CHT_BSW_MAX98090_TI_MACH m +SND_SOC_INTEL_CHT_BSW_NAU8824_MACH m +SND_SOC_INTEL_CHT_BSW_RT5645_MACH m +SND_SOC_INTEL_CHT_BSW_RT5672_MACH m +SND_SOC_INTEL_CML_H m +SND_SOC_INTEL_CML_LP m +SND_SOC_INTEL_CNL m +SND_SOC_INTEL_DA7219_MAX98357A_GENERIC m +SND_SOC_INTEL_GLK m +SND_SOC_INTEL_GLK_RT5682_MAX98357A_MACH m +SND_SOC_INTEL_HASWELL m +SND_SOC_INTEL_HASWELL_MACH m +SND_SOC_INTEL_KBL m +SND_SOC_INTEL_KBL_DA7219_MAX98357A_MACH m +SND_SOC_INTEL_KBL_DA7219_MAX98927_MACH m +SND_SOC_INTEL_KBL_RT5660_MACH m +SND_SOC_INTEL_KBL_RT5663_MAX98927_MACH m +SND_SOC_INTEL_MACH y +SND_SOC_INTEL_SKL m +SND_SOC_INTEL_SKL_NAU88L25_MAX98357A_MACH m +SND_SOC_INTEL_SKL_NAU88L25_SSM4567_MACH m +SND_SOC_INTEL_SKL_RT286_MACH m +SND_SOC_INTEL_SKYLAKE m +SND_SOC_INTEL_SKYLAKE_COMMON m +SND_SOC_INTEL_SKYLAKE_FAMILY m +SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC y +SND_SOC_INTEL_SKYLAKE_SSP_CLK m +SND_SOC_INTEL_SST m +SND_SOC_INTEL_SST_ACPI m +SND_SOC_INTEL_SST_FIRMWARE m +SND_SOC_INTEL_SST_TOPLEVEL y +SND_SOC_MAX9759 m +SND_SOC_MAX98088 m +SND_SOC_MAX98090 m +SND_SOC_MAX98357A m +SND_SOC_MAX98373 m +SND_SOC_MAX9867 m +SND_SOC_MAX98927 m +SND_SOC_NAU8540 m +SND_SOC_NAU8824 m +SND_SOC_NAU8825 m +SND_SOC_PCM1789 m +SND_SOC_PCM1789_I2C m +SND_SOC_PCM186X m +SND_SOC_PCM186X_I2C m +SND_SOC_PCM186X_SPI m +SND_SOC_PCM3060 m +SND_SOC_PCM3060_I2C m +SND_SOC_PCM3060_SPI m +SND_SOC_RL6231 m +SND_SOC_RL6347A m +SND_SOC_RT286 m +SND_SOC_RT298 m +SND_SOC_RT5640 m +SND_SOC_RT5645 m +SND_SOC_RT5651 m +SND_SOC_RT5660 m +SND_SOC_RT5663 m +SND_SOC_RT5670 m +SND_SOC_RT5677 m +SND_SOC_RT5677_SPI m +SND_SOC_RT5682 m +SND_SOC_SIGMADSP m +SND_SOC_SIGMADSP_REGMAP m +SND_SOC_SIMPLE_AMPLIFIER m +SND_SOC_SOF m +SND_SOC_SOF_ACPI m +SND_SOC_SOF_APOLLOLAKE m +SND_SOC_SOF_APOLLOLAKE_SUPPORT y +SND_SOC_SOF_BAYTRAIL m +SND_SOC_SOF_BAYTRAIL_SUPPORT y +SND_SOC_SOF_CANNONLAKE m +SND_SOC_SOF_CANNONLAKE_SUPPORT y +SND_SOC_SOF_COFFEELAKE m +SND_SOC_SOF_COFFEELAKE_SUPPORT y +SND_SOC_SOF_COMETLAKE_H m +SND_SOC_SOF_COMETLAKE_H_SUPPORT y +SND_SOC_SOF_COMETLAKE_LP m +SND_SOC_SOF_COMETLAKE_LP_SUPPORT y +SND_SOC_SOF_ELKHARTLAKE m +SND_SOC_SOF_ELKHARTLAKE_SUPPORT y +SND_SOC_SOF_GEMINILAKE m +SND_SOC_SOF_GEMINILAKE_SUPPORT y +SND_SOC_SOF_HDA m +SND_SOC_SOF_HDA_AUDIO_CODEC y +SND_SOC_SOF_HDA_COMMON m +SND_SOC_SOF_HDA_LINK y +SND_SOC_SOF_HDA_LINK_BASELINE m +SND_SOC_SOF_ICELAKE m +SND_SOC_SOF_ICELAKE_SUPPORT y +SND_SOC_SOF_INTEL_ACPI m +SND_SOC_SOF_INTEL_ATOM_HIFI_EP m +SND_SOC_SOF_INTEL_COMMON m +SND_SOC_SOF_INTEL_HIFI_EP_IPC m +SND_SOC_SOF_INTEL_PCI m +SND_SOC_SOF_INTEL_TOPLEVEL y +SND_SOC_SOF_MERRIFIELD m +SND_SOC_SOF_MERRIFIELD_SUPPORT y +SND_SOC_SOF_OPTIONS m +SND_SOC_SOF_PCI m +SND_SOC_SOF_PROBE_WORK_QUEUE y +SND_SOC_SOF_TIGERLAKE m +SND_SOC_SOF_TIGERLAKE_SUPPORT y +SND_SOC_SOF_TOPLEVEL y +SND_SOC_SOF_XTENSA m +SND_SOC_SPDIF m +SND_SOC_SSM4567 m +SND_SOC_TAS6424 m +SND_SOC_TDA7419 m +SND_SOC_TLV320AIC32X4 m +SND_SOC_TLV320AIC32X4_I2C m +SND_SOC_TLV320AIC32X4_SPI m +SND_SOC_TOPOLOGY y +SND_SOC_TS3A227E m +SND_SOC_TSCS42XX m +SND_SOC_WM8524 m +SND_SPI y +SND_SST_ATOM_HIFI2_PLATFORM m +SND_SST_ATOM_HIFI2_PLATFORM_ACPI m +SND_SST_ATOM_HIFI2_PLATFORM_PCI m +SND_SST_IPC m +SND_SST_IPC_ACPI m +SND_SST_IPC_PCI m +SPI_MASTER y +ST_UVIS25_SPI m l/gegl-0.4.22-x86_64-1.txz: Upgraded. l/glib2-2.62.5-x86_64-1.txz: Upgraded. l/python-requests-2.23.0-x86_64-1.txz: Upgraded. n/NetworkManager-1.22.8-x86_64-1.txz: Upgraded. n/openssh-8.2p1-x86_64-2.txz: Rebuilt. n/php-7.4.3-x86_64-1.txz: Upgraded. This update fixes bugs and security issues: Phar: Files added to tar with Phar::buildFromIterator have all-access permissions. Phar: heap-buffer-overflow in phar_extract_file. Session: Null Pointer Dereference in PHP Session Upload Progress. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7063 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7061 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7062 (* Security fix *) x/mesa-20.0.0-x86_64-1.txz: Upgraded. Added Wayland platform support. x/wayland-1.18.0-x86_64-1.txz: Added. x/wayland-protocols-1.18-noarch-1.txz: Added. x/xorg-server-1.20.7-x86_64-2.txz: Rebuilt. x/xorg-server-xephyr-1.20.7-x86_64-2.txz: Rebuilt. x/xorg-server-xnest-1.20.7-x86_64-2.txz: Rebuilt. x/xorg-server-xvfb-1.20.7-x86_64-2.txz: Rebuilt. x/xorg-server-xwayland-1.20.7-x86_64-2.txz: Added. xap/gimp-2.10.16-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/openssh-8.2p1-x86_64-2_pam.txz: Rebuilt. /etc/pam.d/sshd: add commented out pam_tally2 example. testing/packages/PAM/shadow-4.8.1-x86_64-5_pam.txz: Rebuilt. /etc/pam.d/system-auth: add support for pam_group, remove pam_tally2. Thanks to ivandi. /etc/pam.d/*: Don't use tabs. testing/packages/PAM/util-linux-2.35.1-x86_64-4_pam.txz: Rebuilt. /etc/pam.d/login: add commented out pam_tally2 example. /etc/pam.d/*: Don't use tabs. usb-and-pxe-installers/usbboot.img: Rebuilt.
* Tue Feb 18 05:20:50 UTC 202020200218052050 Patrick J Volkerding2020-02-183-15/+40
| | | | | | | | | | | | | l/gtk+3-3.24.14-x86_64-2.txz: Rebuilt. Rebuilt with -DG_ENABLE_DEBUG. Thanks to Bindestreck. Also built with -DG_DISABLE_CAST_CHECKS and -Dbroadway_backend=true. l/imagemagick-7.0.9_24-x86_64-1.txz: Upgraded. n/bind-9.14.10-x86_64-2.txz: Rebuilt. rc.bind: make sure it works with a non-root user specified in $NAMED_OPTIONS. Thanks to Luigi Trovato. n/tin-2.4.4-x86_64-1.txz: Upgraded. xap/blackbox-0.76-x86_64-1.txz: Upgraded. testing/packages/PAM/libcap-2.32-x86_64-1_pam.txz: Upgraded.
* Mon Feb 17 06:03:43 UTC 202020200217060343 Patrick J Volkerding2020-02-177-1/+891
| | | | | | | | | | | | | | | | | | | | | ap/ksh93-20200131_e4fea8c5-x86_64-1.txz: Upgraded. ap/zsh-5.8-x86_64-1.txz: Upgraded. l/brotli-1.0.7-x86_64-1.txz: Added. l/gmime-3.2.6-x86_64-1.txz: Upgraded. l/hyphen-2.8.8-x86_64-1.txz: Added. l/openal-soft-1.20.1-x86_64-1.txz: Upgraded. Thanks to Skaendo and Willy Sudiarto Raharjo. l/qt5-webkit-5.212.0_alpha3-x86_64-1.txz: Added. Thanks to alienBOB. l/woff2-20180531_a0d0ed7-x86_64-1.txz: Added. n/bluez-5.53-x86_64-1.txz: Upgraded. n/mutt-1.13.4-x86_64-1.txz: Upgraded. n/samba-4.11.6-x86_64-3.txz: Rebuilt. n/socat-1.7.3.4-x86_64-1.txz: Added. n/whois-5.5.6-x86_64-1.txz: Upgraded. testing/packages/PAM/samba-4.11.6-x86_64-3_pam.txz: Rebuilt. Added patches to fix joining a DC when using krb5. Looks like the patches are already upstreamed in the latest 4.12.0-rc. Thanks to camerabambai.
* Sat Feb 15 22:57:25 UTC 202020200215225725 Patrick J Volkerding2020-02-165-14/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a/libcgroup-0.41-x86_64-6.txz: Rebuilt. ap/mariadb-10.4.12-x86_64-2.txz: Rebuilt. d/Cython-0.29.15-x86_64-1.txz: Upgraded. d/cmake-3.16.4-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. d/doxygen-1.8.17-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. l/ConsoleKit2-1.2.1-x86_64-3.txz: Rebuilt. l/gnome-keyring-3.34.0-x86_64-2.txz: Rebuilt. l/imagemagick-7.0.9_23-x86_64-1.txz: Upgraded. l/polkit-0.116-x86_64-2.txz: Rebuilt. l/python-future-0.18.2-x86_64-1.txz: Added. This is needed by fetchmailconf and will probably see additional use as projects jump off of the sinking Python 2 ship. l/v4l-utils-1.18.0-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. n/cifs-utils-6.10-x86_64-3.txz: Rebuilt. n/fetchmail-6.4.2-x86_64-1.txz: Upgraded. n/pinentry-1.1.0-x86_64-3.txz: Rebuilt. Recompiled against qt5-5.13.2. n/samba-4.11.6-x86_64-2.txz: Rebuilt. n/wpa_supplicant-2.9-x86_64-2.txz: Rebuilt. Recompiled against qt5-5.13.2. xap/xpdf-4.02-x86_64-3.txz: Rebuilt. Recompiled against qt5-5.13.2. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-3_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/cifs-utils-6.10-x86_64-3_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/libcgroup-0.41-x86_64-6_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/libpwquality-1.4.2-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. Remove .la files in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/mariadb-10.4.12-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security. testing/packages/PAM/pam-1.3.1-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security to support multilib. Thanks to GazL. testing/packages/PAM/polkit-0.116-x86_64-2_pam.txz: Rebuilt. Rebuilt using --with-pam-module-dir=/lib${LIBDIRSUFFIX}/security. testing/packages/PAM/samba-4.11.6-x86_64-2_pam.txz: Rebuilt. Put the pam security modules in /lib${LIBDIRSUFFIX}/security.
* Sat Feb 15 02:42:28 UTC 202020200215024228 Patrick J Volkerding2020-02-152-15/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a/kernel-generic-5.4.20-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.20-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.20-x86_64-1.txz: Upgraded. a/shadow-4.8.1-x86_64-3.txz: Rebuilt. a/util-linux-2.35.1-x86_64-3.txz: Rebuilt. d/kernel-headers-5.4.20-x86-1.txz: Upgraded. k/kernel-source-5.4.20-noarch-1.txz: Upgraded. l/ConsoleKit2-1.2.1-x86_64-2.txz: Rebuilt. l/dconf-editor-3.34.4-x86_64-1.txz: Upgraded. l/libxkbcommon-0.10.0-x86_64-1.txz: Added. l/openal-soft-1.19.1-x86_64-1.txz: Added. l/qt5-5.13.2-x86_64-1.txz: Added. Thanks to alienBOB. n/openssh-8.2p1-x86_64-1.txz: Upgraded. Potentially incompatible changes: * ssh(1), sshd(8): the removal of "ssh-rsa" from the accepted CASignatureAlgorithms list. * ssh(1), sshd(8): this release removes diffie-hellman-group14-sha1 from the default key exchange proposal for both the client and server. * ssh-keygen(1): the command-line options related to the generation and screening of safe prime numbers used by the diffie-hellman-group-exchange-* key exchange algorithms have changed. Most options have been folded under the -O flag. * sshd(8): the sshd listener process title visible to ps(1) has changed to include information about the number of connections that are currently attempting authentication and the limits configured by MaxStartups. x/mesa-19.3.4-x86_64-2.txz: Rebuilt. Reverted "[PATCH] swr: Fix GCC 4.9 checks." which makes X fail to start with an illegal instruction on some hardware. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-2_pam.txz: Rebuilt. Rebuilt with --disable-libcgmanager to fix setting limits on PAM. Thanks to gattocarlo. testing/packages/PAM/openssh-8.2p1-x86_64-1_pam.txz: Upgraded. testing/packages/PAM/shadow-4.8.1-x86_64-3_pam.txz: Rebuilt. Moved some of the /etc/pam.d/ file to the util-linux package where they more properly belong. testing/packages/PAM/util-linux-2.35.1-x86_64-3_pam.txz: Rebuilt. Added some /etc/pam.d/ files previously in the shadow package. Changed /etc/pam.d/{chfn,chsh} and made chfn/chsh setuid root to fix them. Added /etc/pam.d/{runuser,runuser-l}. usb-and-pxe-installers/usbboot.img: Rebuilt.
* Wed Feb 12 21:51:35 UTC 202020200212215135 Patrick J Volkerding2020-02-134-3/+19
| | | | | | | | | | | | | | | | | | | | a/aaa_terminfo-6.2-x86_64-1.txz: Upgraded. d/git-2.25.0-x86_64-2.txz: Rebuilt. Fixed uncompressed Git.3pm man page. Thanks to Xsane. d/gnucobol-2.2-x86_64-3.txz: Rebuilt. Fixed uncompressed man pages. Thanks to Xsane. l/libarchive-3.4.2-x86_64-1.txz: Upgraded. This update includes security fixes in the RAR5 reader. (* Security fix *) l/ncurses-6.2-x86_64-1.txz: Upgraded. l/sdl-1.2.15-x86_64-8.txz: Rebuilt. Added SDL_sound-1.0.3. n/ModemManager-1.12.6-x86_64-1.txz: Upgraded. n/NetworkManager-1.22.6-x86_64-2.txz: Rebuilt. Fixed hardlinked/uncompressed man pages. Thanks to Xsane. n/dovecot-2.3.9.3-x86_64-1.txz: Upgraded. testing/packages/PAM/dovecot-2.3.9.3-x86_64-1_pam.txz: Upgraded. Fixed missing /etc/pam.d/dovecot.
* Wed Feb 12 05:05:50 UTC 202020200212050550 Patrick J Volkerding2020-02-121-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Hey folks! PAM has finally landed in /testing. Some here wanted it to go right into the main tree immediately, and in a more normal development cycle I'd have been inclined to agree (it is -current, after all). But it's probably better for it to appear in /testing first, to make sure we didn't miss any bugs and also to serve as a warning shot that we'll be shaking up the tree pretty good over the next few weeks. I'd like to see this merged into the main tree in a day or two, so any testing is greatly appreciated. Switching to the PAM packages (or reverting from them) is as easy as installing all of them with upgradepkg --install-new, and if reverting then remove the three leftover _pam packages. After reverting, a bit of residue will remain in /etc/pam.d/ and /etc/security/ which can either be manually deleted or simply ignored. While there are many more features available in PAM compared with plain shadow, out of the box about the only noticable change is the use of cracklib and libpwquality to check the quality of a user-supplied password. Hopefully having PAM and krb5 will get us on track to having proper Active Directory integration as well as using code paths that are likely better audited these days. The attack surface *might* be bigger, but it's also a lot better scrutinized. Thanks to Robby Workman and Vincent Batts who did most of the initial heavy lifting on the core PAM packages as a side project for many years. Thanks also to Phantom X whose PAM related SlackBuilds were a valuable reference. And thanks as well to ivandi - I learned a lot from the SlackMATE build scripts and was even occasionally thankful for the amusing ways you would kick my ass on LQ. ;-) You're more than welcome to let us know where we've messed up this time. The binutils and glibc packages in /testing were removed and are off the table for now. I'm not seeing much upside to heading down that rabbit hole at the moment. Next we need to be looking at Xfce 4.14 and Plasma 5.18 LTS and some other things that have been held back since KDE4 couldn't use them. Cheers! :-) a/kernel-generic-5.4.19-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.19-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.19-x86_64-1.txz: Upgraded. a/lvm2-2.03.08-x86_64-1.txz: Upgraded. a/shadow-4.8.1-x86_64-2.txz: Rebuilt. Automatically backup /etc/login.defs and install the new version if incompatible PAM options are detected. d/kernel-headers-5.4.19-x86-1.txz: Upgraded. k/kernel-source-5.4.19-noarch-1.txz: Upgraded. VALIDATE_FS_PARSER y -> n xap/mozilla-thunderbird-68.5.0-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/68.5.0/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6793 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6794 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6797 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6798 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6800 (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/PAM/ConsoleKit2-1.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/at-3.2.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cifs-utils-6.10-x86_64-2_pam.txz: Added. testing/packages/PAM/cracklib-2.9.7-x86_64-1_pam.txz: Added. testing/packages/PAM/cups-2.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/cyrus-sasl-2.1.27-x86_64-2_pam.txz: Added. testing/packages/PAM/dovecot-2.3.9.2-x86_64-1_pam.txz: Added. testing/packages/PAM/gnome-keyring-3.34.0-x86_64-1_pam.txz: Added. testing/packages/PAM/hplip-3.19.12-x86_64-2_pam.txz: Added. testing/packages/PAM/kde-workspace-4.11.22-x86_64-6_pam.txz: Added. testing/packages/PAM/libcap-2.31-x86_64-1_pam.txz: Added. testing/packages/PAM/libcgroup-0.41-x86_64-5_pam.txz: Added. testing/packages/PAM/libpwquality-1.4.2-x86_64-1_pam.txz: Added. testing/packages/PAM/mariadb-10.4.12-x86_64-1_pam.txz: Added. testing/packages/PAM/netatalk-3.1.12-x86_64-2_pam.txz: Added. testing/packages/PAM/netkit-rsh-0.17-x86_64-2_pam.txz: Added. testing/packages/PAM/openssh-8.1p1-x86_64-1_pam.txz: Added. testing/packages/PAM/openvpn-2.4.8-x86_64-1_pam.txz: Added. testing/packages/PAM/pam-1.3.1-x86_64-1_pam.txz: Added. testing/packages/PAM/polkit-0.116-x86_64-1_pam.txz: Added. testing/packages/PAM/popa3d-1.0.3-x86_64-3_pam.txz: Added. testing/packages/PAM/ppp-2.4.7-x86_64-3_pam.txz: Added. testing/packages/PAM/proftpd-1.3.6b-x86_64-1_pam.txz: Added. testing/packages/PAM/samba-4.11.6-x86_64-1_pam.txz: Added. testing/packages/PAM/screen-4.8.0-x86_64-1_pam.txz: Added. testing/packages/PAM/shadow-4.8.1-x86_64-2_pam.txz: Added. testing/packages/PAM/sudo-1.8.31-x86_64-1_pam.txz: Added. testing/packages/PAM/system-config-printer-1.5.12-x86_64-2_pam.txz: Added. testing/packages/PAM/util-linux-2.35.1-x86_64-1_pam.txz: Added. testing/packages/PAM/vsftpd-3.0.3-x86_64-5_pam.txz: Added. testing/packages/PAM/xdm-1.1.11-x86_64-9_pam.txz: Added. testing/packages/PAM/xlockmore-5.62-x86_64-1_pam.txz: Added. testing/packages/PAM/xscreensaver-5.43-x86_64-1_pam.txz: Added. testing/packages/binutils-2.34-x86_64-1.txz: Removed. testing/packages/glibc-2.31-x86_64-1.txz: Removed. testing/packages/glibc-i18n-2.31-x86_64-1.txz: Removed. testing/packages/glibc-profile-2.31-x86_64-1.txz: Removed. testing/packages/glibc-solibs-2.31-x86_64-1.txz: Removed. usb-and-pxe-installers/usbboot.img: Rebuilt.
* Tue Feb 11 04:45:36 UTC 202020200211044536 Patrick J Volkerding2020-02-112-361/+1
| | | | | | | | | | | | ap/man-pages-5.05-noarch-2.txz: Rebuilt. Clean up /usr/man directory moving miscellaneous documentation to /usr/doc/man-pages-5.05. Thanks to Xsane. d/python-setuptools-45.2.0-x86_64-1.txz: Upgraded. n/nfs-utils-2.4.3-x86_64-1.txz: Upgraded. xap/mozilla-firefox-68.5.0esr-x86_64-1.txz: Upgraded. This is a bugfix release. For more information, see: https://www.mozilla.org/en-US/firefox/68.5.0/releasenotes/
* Sat Feb 8 21:20:28 UTC 202020200208212028 Patrick J Volkerding2020-02-093-53/+2
| | | | | | | | | | | | | a/bash-5.0.016-x86_64-1.txz: Upgraded. a/kernel-firmware-20200207_6f89735-noarch-1.txz: Upgraded. ap/nvme-cli-1.10.1-x86_64-1.txz: Added. d/gdb-9.1-x86_64-1.txz: Upgraded. l/ConsoleKit2-1.2.1-x86_64-1.txz: Upgraded. l/imagemagick-7.0.9_22-x86_64-1.txz: Upgraded. l/mozilla-nss-3.50-x86_64-1.txz: Upgraded. Upgraded to nss-3.50 and nspr-4.25. l/readline-8.0.004-x86_64-1.txz: Upgraded. n/libgpg-error-1.37-x86_64-1.txz: Upgraded.
* Fri Feb 7 22:32:38 UTC 202020200207223238 Patrick J Volkerding2020-02-0819-20/+218
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a/kernel-firmware-20200206_5351afe-noarch-1.txz: Upgraded. ap/ghostscript-9.50-x86_64-2.txz: Rebuilt. Recompiled against krb5-1.17.1. ap/gutenprint-5.3.3-x86_64-2.txz: Rebuilt. Recompiled against krb5-1.17.1. ap/nano-4.8-x86_64-1.txz: Upgraded. ap/screen-4.8.0-x86_64-1.txz: Upgraded. ap/vim-8.2.0224-x86_64-1.txz: Upgraded. d/cvs-1.11.23-x86_64-4.txz: Rebuilt. Recompiled against krb5-1.17.1. d/strace-5.5-x86_64-1.txz: Upgraded. kde/kdelibs-4.14.38-x86_64-6.txz: Rebuilt. Recompiled against krb5-1.17.1. l/gtk+2-2.24.32-x86_64-3.txz: Rebuilt. Recompiled against krb5-1.17.1. l/gtk+3-3.24.13-x86_64-2.txz: Rebuilt. Recompiled against krb5-1.17.1. l/libsoup-2.68.3-x86_64-2.txz: Rebuilt. Recompiled against krb5-1.17.1. l/libssh-0.9.3-x86_64-2.txz: Rebuilt. Recompiled against krb5-1.17.1. l/loudmouth-1.5.3-x86_64-4.txz: Rebuilt. Recompiled against krb5-1.17.1. l/neon-0.30.2-x86_64-2.txz: Rebuilt. Recompiled against krb5-1.17.1. n/cifs-utils-6.10-x86_64-2.txz: Rebuilt. Recompiled to build cifs.upcall. n/curl-7.68.0-x86_64-2.txz: Rebuilt. Recompiled against krb5-1.17.1. n/cyrus-sasl-2.1.27-x86_64-2.txz: Rebuilt. Recompiled against krb5-1.17.1. xap/vim-gvim-8.2.0224-x86_64-1.txz: Upgraded.
* Thu Feb 6 01:59:35 UTC 202020200206015935 Patrick J Volkerding2020-02-061-3/+2
| | | | | | | | | | | | | | | | a/hwdata-0.332-noarch-1.txz: Upgraded. a/kernel-firmware-20200204_b791e15-noarch-1.txz: Upgraded. a/kernel-generic-5.4.18-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.18-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.18-x86_64-1.txz: Upgraded. d/cmake-3.16.4-x86_64-1.txz: Upgraded. d/icecream-1.3.1-x86_64-1.txz: Upgraded. d/kernel-headers-5.4.18-x86-1.txz: Upgraded. k/kernel-source-5.4.18-noarch-1.txz: Upgraded. xap/xlockmore-5.62-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
* Mon Feb 3 20:47:44 UTC 202020200203204744 Patrick J Volkerding2020-02-042-10/+7
| | | | | | | | | | | | | | | | a/cryptsetup-2.3.0-x86_64-1.txz: Upgraded. a/kernel-firmware-20200203_6d9f399-noarch-1.txz: Upgraded. ap/xfsdump-3.1.9-x86_64-1.txz: Upgraded. d/mercurial-5.3-x86_64-1.txz: Upgraded. l/libzip-1.6.1-x86_64-1.txz: Upgraded. n/nfs-utils-2.4.2-x86_64-3.txz: Rebuilt. Added /etc/exports.d directory. Removed the bogus sanity checks. Sure, we could try to "fix" them, but this seems to be the path of least resistance. n/postfix-3.4.9-x86_64-1.txz: Upgraded. x/libinput-1.15.1-x86_64-1.txz: Upgraded. x/vulkan-sdk-1.2.131.1-x86_64-1.txz: Upgraded. xap/sane-1.0.29-x86_64-1.txz: Upgraded.
* Sun Feb 2 21:16:47 UTC 202020200202211647 Patrick J Volkerding2020-02-033-4/+4
| | | | | | | | | | | | a/inotify-tools-3.20.2.2-x86_64-1.txz: Upgraded. l/imagemagick-7.0.9_21-x86_64-1.txz: Upgraded. l/libmtp-1.1.17-x86_64-1.txz: Upgraded. l/libtasn1-4.16.0-x86_64-1.txz: Upgraded. n/gnutls-3.6.12-x86_64-1.txz: Upgraded. n/s-nail-14.9.17-x86_64-1.txz: Upgraded. x/xterm-353-x86_64-1.txz: Upgraded. xap/xsane-0.999-x86_64-3.txz: Rebuilt. Added plugin symlink for GIMP. Thanks to Markus Wiesner.
* Sat Feb 1 22:45:14 UTC 202020200201224514 Patrick J Volkerding2020-02-021-0/+1
| | | | | | | | | | | | | | a/inotify-tools-3.20.2.1-x86_64-1.txz: Upgraded. a/kernel-generic-5.4.17-x86_64-1.txz: Upgraded. a/kernel-huge-5.4.17-x86_64-1.txz: Upgraded. a/kernel-modules-5.4.17-x86_64-1.txz: Upgraded. d/kernel-headers-5.4.17-x86-1.txz: Upgraded. k/kernel-source-5.4.17-noarch-1.txz: Upgraded. l/sip-4.19.21-x86_64-1.txz: Upgraded. x/xkeyboard-config-2.29-noarch-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
generated by cgit v1.2.3 (git 2.26.2) at 2024-05-01 03:14:47 +0000