From 00cb38d107c01392f28cb151b5e398fba053a73a Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Fri, 14 Oct 2022 01:39:37 +0000 Subject: Fri Oct 14 01:39:37 UTC 2022 patches/packages/mozilla-thunderbird-102.3.3-x86_64-1_slack15.0.txz: Upgraded. This is a bugfix release. For more information, see: https://www.mozilla.org/en-US/thunderbird/102.3.3/releasenotes/ patches/packages/python3-3.9.15-x86_64-1_slack15.0.txz: Upgraded. This update fixes security issues: Bundled libexpat was upgraded from 2.4.7 to 2.4.9 which fixes a heap use-after-free vulnerability in function doContent. gh-97616: a fix for a possible buffer overflow in list *= int. gh-97612: a fix for possible shell injection in the example script get-remote-certificate.py. gh-96577: a fix for a potential buffer overrun in msilib. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40674 (* Security fix *) --- ChangeLog.rss | 29 +++++++++++- ChangeLog.txt | 17 +++++++ FILELIST.TXT | 54 +++++++++++----------- ...illa-thunderbird-102.3.2-x86_64-1_slack15.0.txt | 11 ----- ...illa-thunderbird-102.3.3-x86_64-1_slack15.0.txt | 11 +++++ .../packages/python3-3.9.14-x86_64-1_slack15.0.txt | 11 ----- .../packages/python3-3.9.15-x86_64-1_slack15.0.txt | 11 +++++ 7 files changed, 93 insertions(+), 51 deletions(-) delete mode 100644 patches/packages/mozilla-thunderbird-102.3.2-x86_64-1_slack15.0.txt create mode 100644 patches/packages/mozilla-thunderbird-102.3.3-x86_64-1_slack15.0.txt delete mode 100644 patches/packages/python3-3.9.14-x86_64-1_slack15.0.txt create mode 100644 patches/packages/python3-3.9.15-x86_64-1_slack15.0.txt diff --git a/ChangeLog.rss b/ChangeLog.rss index 300b9af92..94a30ff01 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,9 +11,34 @@ Tracking Slackware development in git. en-us urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f - Sat, 8 Oct 2022 19:23:31 GMT - Sun, 9 Oct 2022 11:30:54 GMT + Fri, 14 Oct 2022 01:39:37 GMT + Fri, 14 Oct 2022 11:30:28 GMT maintain_current_git.sh v 1.17 + + Fri, 14 Oct 2022 01:39:37 GMT + Fri, 14 Oct 2022 01:39:37 GMT + https://git.slackware.nl/current/tag/?h=20221014013937 + 20221014013937 + + +patches/packages/mozilla-thunderbird-102.3.3-x86_64-1_slack15.0.txz: Upgraded. + This is a bugfix release. + For more information, see: + https://www.mozilla.org/en-US/thunderbird/102.3.3/releasenotes/ +patches/packages/python3-3.9.15-x86_64-1_slack15.0.txz: Upgraded. + This update fixes security issues: + Bundled libexpat was upgraded from 2.4.7 to 2.4.9 which fixes a heap + use-after-free vulnerability in function doContent. + gh-97616: a fix for a possible buffer overflow in list *= int. + gh-97612: a fix for possible shell injection in the example script + get-remote-certificate.py. + gh-96577: a fix for a potential buffer overrun in msilib. + For more information, see: + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40674 + (* Security fix *) + ]]> + + Sat, 8 Oct 2022 19:23:31 GMT Sat, 8 Oct 2022 19:23:31 GMT diff --git a/ChangeLog.txt b/ChangeLog.txt index 13c050bc2..b08a304e2 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,20 @@ +Fri Oct 14 01:39:37 UTC 2022 +patches/packages/mozilla-thunderbird-102.3.3-x86_64-1_slack15.0.txz: Upgraded. + This is a bugfix release. + For more information, see: + https://www.mozilla.org/en-US/thunderbird/102.3.3/releasenotes/ +patches/packages/python3-3.9.15-x86_64-1_slack15.0.txz: Upgraded. + This update fixes security issues: + Bundled libexpat was upgraded from 2.4.7 to 2.4.9 which fixes a heap + use-after-free vulnerability in function doContent. + gh-97616: a fix for a possible buffer overflow in list *= int. + gh-97612: a fix for possible shell injection in the example script + get-remote-certificate.py. + gh-96577: a fix for a potential buffer overrun in msilib. + For more information, see: + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40674 + (* Security fix *) ++--------------------------+ Sat Oct 8 19:23:31 UTC 2022 patches/packages/libksba-1.6.2-x86_64-1_slack15.0.txz: Upgraded. Detect a possible overflow directly in the TLV parser. diff --git a/FILELIST.TXT b/FILELIST.TXT index 20724ffab..521c28c04 100644 --- a/FILELIST.TXT +++ b/FILELIST.TXT @@ -1,20 +1,20 @@ -Sat Oct 8 19:27:09 UTC 2022 +Fri Oct 14 01:45:25 UTC 2022 Here is the file list for this directory. If you are using a mirror site and find missing or extra files in the disk subdirectories, please have the archive administrator refresh the mirror. -drwxr-xr-x 12 root root 4096 2022-10-08 19:23 . +drwxr-xr-x 12 root root 4096 2022-10-14 01:39 . -rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0 -rw-r--r-- 1 root root 16609 2022-03-30 19:03 ./CHANGES_AND_HINTS.TXT --rw-r--r-- 1 root root 1154716 2022-10-07 20:35 ./CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2022-10-07 20:35 ./CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 1155289 2022-10-08 19:27 ./CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2022-10-08 19:27 ./CHECKSUMS.md5.asc -rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING -rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3 -rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT -rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT --rw-r--r-- 1 root root 1938687 2022-10-08 19:23 ./ChangeLog.txt +-rw-r--r-- 1 root root 1939518 2022-10-14 01:39 ./ChangeLog.txt drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi @@ -25,7 +25,7 @@ drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh -rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg -rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg --rw-r--r-- 1 root root 1507277 2022-10-07 20:35 ./FILELIST.TXT +-rw-r--r-- 1 root root 1508047 2022-10-08 19:27 ./FILELIST.TXT -rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY -rw-r--r-- 1 root root 864745 2022-02-02 08:25 ./PACKAGES.TXT -rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT @@ -738,13 +738,13 @@ drwxr-xr-x 2 root root 4096 2008-05-07 05:21 ./pasture/source/php/pear -rwxr-xr-x 1 root root 9448 2018-05-16 22:38 ./pasture/source/php/php.SlackBuild -rw-r--r-- 1 root root 775 2017-07-07 19:25 ./pasture/source/php/php.ini-development.diff.gz -rw-r--r-- 1 root root 830 2005-12-09 05:18 ./pasture/source/php/slack-desc -drwxr-xr-x 4 root root 4096 2022-10-08 19:27 ./patches --rw-r--r-- 1 root root 50884 2022-10-08 19:27 ./patches/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2022-10-08 19:27 ./patches/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 67957 2022-10-08 19:27 ./patches/FILE_LIST --rw-r--r-- 1 root root 11643073 2022-10-08 19:27 ./patches/MANIFEST.bz2 --rw-r--r-- 1 root root 37791 2022-10-08 19:27 ./patches/PACKAGES.TXT -drwxr-xr-x 3 root root 16384 2022-10-08 19:27 ./patches/packages +drwxr-xr-x 4 root root 4096 2022-10-14 01:45 ./patches +-rw-r--r-- 1 root root 50884 2022-10-14 01:45 ./patches/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2022-10-14 01:45 ./patches/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 67957 2022-10-14 01:45 ./patches/FILE_LIST +-rw-r--r-- 1 root root 11630422 2022-10-14 01:45 ./patches/MANIFEST.bz2 +-rw-r--r-- 1 root root 37791 2022-10-14 01:45 ./patches/PACKAGES.TXT +drwxr-xr-x 3 root root 16384 2022-10-14 01:45 ./patches/packages -rw-r--r-- 1 root root 327 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txt -rw-r--r-- 1 root root 10716 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz -rw-r--r-- 1 root root 163 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz.asc @@ -842,9 +842,9 @@ drwxr-xr-x 2 root root 4096 2022-08-26 04:06 ./patches/packages/linux-5.15 -rw-r--r-- 1 root root 570 2022-09-19 21:00 ./patches/packages/mozilla-firefox-102.3.0esr-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 59164804 2022-09-19 21:00 ./patches/packages/mozilla-firefox-102.3.0esr-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-09-19 21:00 ./patches/packages/mozilla-firefox-102.3.0esr-x86_64-1_slack15.0.txz.asc --rw-r--r-- 1 root root 663 2022-10-07 17:43 ./patches/packages/mozilla-thunderbird-102.3.2-x86_64-1_slack15.0.txt --rw-r--r-- 1 root root 56122104 2022-10-07 17:43 ./patches/packages/mozilla-thunderbird-102.3.2-x86_64-1_slack15.0.txz --rw-r--r-- 1 root root 163 2022-10-07 17:43 ./patches/packages/mozilla-thunderbird-102.3.2-x86_64-1_slack15.0.txz.asc +-rw-r--r-- 1 root root 663 2022-10-12 23:37 ./patches/packages/mozilla-thunderbird-102.3.3-x86_64-1_slack15.0.txt +-rw-r--r-- 1 root root 56137276 2022-10-12 23:37 ./patches/packages/mozilla-thunderbird-102.3.3-x86_64-1_slack15.0.txz +-rw-r--r-- 1 root root 163 2022-10-12 23:37 ./patches/packages/mozilla-thunderbird-102.3.3-x86_64-1_slack15.0.txz.asc -rw-r--r-- 1 root root 451 2022-07-21 17:53 ./patches/packages/net-snmp-5.9.3-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 1598024 2022-07-21 17:53 ./patches/packages/net-snmp-5.9.3-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-07-21 17:53 ./patches/packages/net-snmp-5.9.3-x86_64-1_slack15.0.txz.asc @@ -869,9 +869,9 @@ drwxr-xr-x 2 root root 4096 2022-08-26 04:06 ./patches/packages/linux-5.15 -rw-r--r-- 1 root root 533 2022-09-01 18:45 ./patches/packages/poppler-21.12.0-x86_64-2_slack15.0.txt -rw-r--r-- 1 root root 1746808 2022-09-01 18:45 ./patches/packages/poppler-21.12.0-x86_64-2_slack15.0.txz -rw-r--r-- 1 root root 163 2022-09-01 18:45 ./patches/packages/poppler-21.12.0-x86_64-2_slack15.0.txz.asc --rw-r--r-- 1 root root 663 2022-09-07 18:32 ./patches/packages/python3-3.9.14-x86_64-1_slack15.0.txt --rw-r--r-- 1 root root 19187680 2022-09-07 18:32 ./patches/packages/python3-3.9.14-x86_64-1_slack15.0.txz --rw-r--r-- 1 root root 163 2022-09-07 18:32 ./patches/packages/python3-3.9.14-x86_64-1_slack15.0.txz.asc +-rw-r--r-- 1 root root 663 2022-10-13 18:24 ./patches/packages/python3-3.9.15-x86_64-1_slack15.0.txt +-rw-r--r-- 1 root root 19190048 2022-10-13 18:24 ./patches/packages/python3-3.9.15-x86_64-1_slack15.0.txz +-rw-r--r-- 1 root root 163 2022-10-13 18:24 ./patches/packages/python3-3.9.15-x86_64-1_slack15.0.txz.asc -rw-r--r-- 1 root root 260 2022-03-20 22:36 ./patches/packages/qt5-5.15.3_20220318_e507d3e5-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 99025556 2022-03-20 22:36 ./patches/packages/qt5-5.15.3_20220318_e507d3e5-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-03-20 22:36 ./patches/packages/qt5-5.15.3_20220318_e507d3e5-x86_64-1_slack15.0.txz.asc @@ -923,7 +923,7 @@ drwxr-xr-x 2 root root 4096 2022-08-26 04:06 ./patches/packages/linux-5.15 -rw-r--r-- 1 root root 388 2022-08-09 17:48 ./patches/packages/zlib-1.2.12-x86_64-2_slack15.0.txt -rw-r--r-- 1 root root 105196 2022-08-09 17:48 ./patches/packages/zlib-1.2.12-x86_64-2_slack15.0.txz -rw-r--r-- 1 root root 163 2022-08-09 17:48 ./patches/packages/zlib-1.2.12-x86_64-2_slack15.0.txz.asc -drwxr-xr-x 52 root root 4096 2022-10-08 19:06 ./patches/source +drwxr-xr-x 52 root root 4096 2022-10-13 20:14 ./patches/source drwxr-xr-x 2 root root 4096 2022-01-16 05:07 ./patches/source/aaa_base -rw-r--r-- 1 root root 11041 2022-02-15 04:49 ./patches/source/aaa_base/_aaa_base.tar.gz -rwxr-xr-x 1 root root 3894 2022-02-15 05:07 ./patches/source/aaa_base/aaa_base.SlackBuild @@ -1182,7 +1182,7 @@ drwxr-xr-x 2 root root 4096 2022-09-09 19:40 ./patches/source/mozilla-fire -rwxr-xr-x 1 root root 16087 2022-09-06 02:02 ./patches/source/mozilla-firefox/mozilla-firefox.SlackBuild -rw-r--r-- 1 root root 2748 2017-12-04 21:30 ./patches/source/mozilla-firefox/mozilla-firefox.desktop -rw-r--r-- 1 root root 1033 2020-07-07 18:08 ./patches/source/mozilla-firefox/slack-desc -drwxr-xr-x 4 root root 4096 2022-10-07 16:37 ./patches/source/mozilla-thunderbird +drwxr-xr-x 4 root root 4096 2022-10-12 22:31 ./patches/source/mozilla-thunderbird -rw-r--r-- 1 root root 266 2022-08-06 19:40 ./patches/source/mozilla-thunderbird/arc4random_buf.glibc-2.36.diff.gz drwxr-xr-x 2 root root 4096 2016-07-03 18:05 ./patches/source/mozilla-thunderbird/autoconf -rw-r--r-- 1 root root 5869 2016-07-03 18:04 ./patches/source/mozilla-thunderbird/autoconf/autoconf-2.13-consolidated_fixes-1.patch.gz @@ -1208,8 +1208,8 @@ drwxr-xr-x 2 root root 4096 2022-09-29 18:08 ./patches/source/mozilla-thun -rw-r--r-- 1 root root 3378 2005-03-08 05:13 ./patches/source/mozilla-thunderbird/mozilla-thunderbird.desktop -rw-r--r-- 1 root root 1130 2018-02-27 06:47 ./patches/source/mozilla-thunderbird/slack-desc -rw-r--r-- 1 root root 330 2019-08-27 16:35 ./patches/source/mozilla-thunderbird/tb.ui.scrollToClick.diff.gz --rw-r--r-- 1 root root 500105016 2022-10-06 17:59 ./patches/source/mozilla-thunderbird/thunderbird-102.3.2.source.tar.xz --rw-r--r-- 1 root root 833 2022-10-06 17:59 ./patches/source/mozilla-thunderbird/thunderbird-102.3.2.source.tar.xz.asc +-rw-r--r-- 1 root root 504792532 2022-10-12 12:02 ./patches/source/mozilla-thunderbird/thunderbird-102.3.3.source.tar.xz +-rw-r--r-- 1 root root 833 2022-10-12 12:02 ./patches/source/mozilla-thunderbird/thunderbird-102.3.3.source.tar.xz.asc drwxr-xr-x 2 root root 4096 2022-07-21 17:44 ./patches/source/net-snmp -rw-r--r-- 1 root root 356 2021-12-21 18:38 ./patches/source/net-snmp/doinst.sh.gz -rw-r--r-- 1 root root 607 2018-07-20 09:39 ./patches/source/net-snmp/net-snmp-5.7.2-cert-path.patch.gz @@ -1291,11 +1291,11 @@ drwxr-xr-x 2 root root 4096 2022-09-01 18:42 ./patches/source/poppler -rw-r--r-- 1 root root 1798780 2021-12-26 19:51 ./patches/source/poppler/poppler-21.12.0.tar.xz -rwxr-xr-x 1 root root 4628 2022-09-01 18:43 ./patches/source/poppler/poppler.SlackBuild -rw-r--r-- 1 root root 988 2018-02-27 06:12 ./patches/source/poppler/slack-desc -drwxr-xr-x 2 root root 4096 2022-09-07 18:23 ./patches/source/python3 --rw-r--r-- 1 root root 19750176 2022-09-06 18:22 ./patches/source/python3/Python-3.9.14.tar.xz --rw-r--r-- 1 root root 833 2022-09-06 18:22 ./patches/source/python3/Python-3.9.14.tar.xz.asc +drwxr-xr-x 2 root root 4096 2022-10-13 18:22 ./patches/source/python3 +-rw-r--r-- 1 root root 19712208 2022-10-11 15:49 ./patches/source/python3/Python-3.9.15.tar.xz +-rw-r--r-- 1 root root 833 2022-10-11 15:49 ./patches/source/python3/Python-3.9.15.tar.xz.asc -rw-r--r-- 1 root root 890 2017-01-12 20:00 ./patches/source/python3/README --rw-r--r-- 1 root root 2536023 2022-09-06 18:38 ./patches/source/python3/python-3.9.14-docs-text.tar.bz2 +-rw-r--r-- 1 root root 2543729 2022-10-11 15:49 ./patches/source/python3/python-3.9.15-docs-text.tar.bz2 -rw-r--r-- 1 root root 372 2021-11-20 19:27 ./patches/source/python3/python.sysconfig.py.x86_64.diff.gz -rwxr-xr-x 1 root root 6380 2022-03-18 19:40 ./patches/source/python3/python3.SlackBuild -rw-r--r-- 1 root root 495 2020-10-24 22:31 ./patches/source/python3/python3.distutils.x86_64.diff.gz diff --git a/patches/packages/mozilla-thunderbird-102.3.2-x86_64-1_slack15.0.txt b/patches/packages/mozilla-thunderbird-102.3.2-x86_64-1_slack15.0.txt deleted file mode 100644 index 5acb7b92e..000000000 --- a/patches/packages/mozilla-thunderbird-102.3.2-x86_64-1_slack15.0.txt +++ /dev/null @@ -1,11 +0,0 @@ -mozilla-thunderbird: mozilla-thunderbird (Mozilla Thunderbird mail application) -mozilla-thunderbird: -mozilla-thunderbird: Mozilla Thunderbird is a redesign of the Mozilla mail component -mozilla-thunderbird: written using the XUL user interface language. Thunderbird makes -mozilla-thunderbird: emailing safer, faster, and easier than ever before with the -mozilla-thunderbird: industry's best implementations of features such as intelligent spam -mozilla-thunderbird: filters, built-in RSS reader, quick search, and much more. -mozilla-thunderbird: -mozilla-thunderbird: Homepage: http://www.mozilla.org/projects/thunderbird/ -mozilla-thunderbird: -mozilla-thunderbird: diff --git a/patches/packages/mozilla-thunderbird-102.3.3-x86_64-1_slack15.0.txt b/patches/packages/mozilla-thunderbird-102.3.3-x86_64-1_slack15.0.txt new file mode 100644 index 000000000..5acb7b92e --- /dev/null +++ b/patches/packages/mozilla-thunderbird-102.3.3-x86_64-1_slack15.0.txt @@ -0,0 +1,11 @@ +mozilla-thunderbird: mozilla-thunderbird (Mozilla Thunderbird mail application) +mozilla-thunderbird: +mozilla-thunderbird: Mozilla Thunderbird is a redesign of the Mozilla mail component +mozilla-thunderbird: written using the XUL user interface language. Thunderbird makes +mozilla-thunderbird: emailing safer, faster, and easier than ever before with the +mozilla-thunderbird: industry's best implementations of features such as intelligent spam +mozilla-thunderbird: filters, built-in RSS reader, quick search, and much more. +mozilla-thunderbird: +mozilla-thunderbird: Homepage: http://www.mozilla.org/projects/thunderbird/ +mozilla-thunderbird: +mozilla-thunderbird: diff --git a/patches/packages/python3-3.9.14-x86_64-1_slack15.0.txt b/patches/packages/python3-3.9.14-x86_64-1_slack15.0.txt deleted file mode 100644 index 452e9852c..000000000 --- a/patches/packages/python3-3.9.14-x86_64-1_slack15.0.txt +++ /dev/null @@ -1,11 +0,0 @@ -python3: python3 (object-oriented interpreted programming language v3) -python3: -python3: Python is an interpreted, interactive, object-oriented programming -python3: language that combines remarkable power with very clear syntax. -python3: This is a new version of the language that is incompatible with the -python3: 2.x line of releases. The language is mostly the same, but many -python3: details, especially how built-in objects like dictionaries and strings -python3: work, have changed considerably, and a lot of deprecated features have -python3: finally been removed. Also, the standard library has been reorganized -python3: in a few prominent places. -python3: diff --git a/patches/packages/python3-3.9.15-x86_64-1_slack15.0.txt b/patches/packages/python3-3.9.15-x86_64-1_slack15.0.txt new file mode 100644 index 000000000..452e9852c --- /dev/null +++ b/patches/packages/python3-3.9.15-x86_64-1_slack15.0.txt @@ -0,0 +1,11 @@ +python3: python3 (object-oriented interpreted programming language v3) +python3: +python3: Python is an interpreted, interactive, object-oriented programming +python3: language that combines remarkable power with very clear syntax. +python3: This is a new version of the language that is incompatible with the +python3: 2.x line of releases. The language is mostly the same, but many +python3: details, especially how built-in objects like dictionaries and strings +python3: work, have changed considerably, and a lot of deprecated features have +python3: finally been removed. Also, the standard library has been reorganized +python3: in a few prominent places. +python3: -- cgit v1.2.3