Slackwarearm-current ChangeLog (2017-01-18)
Wed Jan 18 23:32:23 UTC 2017
The mini root filesystem for -current has been updated:
ftp://ftp.arm.slackware.com/slackwarearm/slackwarearm-devtools/minirootfs/
Packages
Rebuilt
- a/aaa_elflibs-14.2-arm-4.txz
Upgraded libcap.so.2.25, liblzma.so.5.2.3, and libz.so.1.2.10. - a/bash-4.4.005-arm-2.txz
- a/cryptsetup-1.7.3-arm-2.txz
Recompiled with –enable-cryptsetup-reencrypt option.
Thanks to Jakub Jankowski for the suggestion. - a/gawk-4.1.4-arm-2.txz
- a/gettext-0.19.8.1-arm-2.txz
- a/getty-ps-2.1.0b-arm-2.txz
- a/gpm-1.20.7-arm-2.txz
- a/less-481-arm-2.txz
- ap/bc-1.06.95-arm-2.txz
- ap/bpe-2.01.00-arm-2.txz
- ap/ghostscript-9.20-arm-2.txz
Restored /usr/bin/ijs-config. - ap/gutenprint-5.2.11-arm-2.txz
- ap/ispell-3.4.00-arm-2.txz
- ap/jove-4.16.0.73-arm-2.txz
- ap/pamixer-1.3.1-arm-3.txz
- ap/powertop-2.8-arm-2.txz
- ap/sc-7.16-arm-2.txz
- ap/texinfo-6.3-arm-2.txz
- ap/xfsdump-3.1.6-arm-2.txz
- d/cscope-15.8b-arm-2.txz
- d/gdb-7.12-arm-2.txz
- d/gettext-tools-0.19.8.1-arm-2.txz
- d/gnu-cobol-1.1-arm-2.txz
- d/guile-2.0.13-arm-2.txz
- e/emacs-25.1-arm-2.txz
- kde/analitza-4.14.3-arm-2.txz
- kde/calligra-2.9.11-arm-5.txz
- kde/kig-4.14.3-arm-3.txz
- kde/korundum-4.14.3-arm-2.txz
- kde/lokalize-4.14.3-arm-2.txz
- kde/perlkde-4.14.3-arm-2.txz
- kde/perlqt-4.14.3-arm-2.txz
- kde/qtruby-4.14.3-arm-2.txz
- l/akonadi-1.13.0-arm-4.txz
- l/aspell-0.60.6.1-arm-2.txz
- l/enchant-1.6.0-arm-2.txz
- l/libcdio-0.94-arm-2.txz
- l/parted-3.2-arm-3.txz
- l/pilot-link-0.12.5-arm-3.txz
- l/virtuoso-ose-6.1.8-arm-2.txz
- l/vte-0.28.2-arm-2.txz
- n/NetworkManager-1.2.6-arm-2.txz
- n/alpine-2.20-arm-2.txz
- n/elm-2.5.8-arm-2.txz
- n/gnupg-1.4.21-arm-2.txz
- n/gnupg2-2.0.30-arm-2.txz
- n/imapd-2.20-arm-2.txz
- n/iptraf-ng-1.1.4-arm-2.txz
- n/lynx-2.8.8rel.2-arm-2.txz
- n/mcabber-1.0.4-arm-2.txz
- n/metamail-2.7-arm-2.txz
- n/net-snmp-5.7.3-arm-2.txz
- n/netkit-ftp-0.17-arm-2.txz
- n/netkit-ntalk-0.17-arm-2.txz
- n/netwatch-1.3.1_2-arm-2.txz
- n/ntp-4.2.8p9-arm-2.txz
- n/pinentry-1.0.0-arm-2.txz
- n/proftpd-1.3.5b-arm-2.txz
- n/snownews-1.5.12-arm-2.txz
- n/tftp-hpa-5.2-arm-2.txz
- n/ytalk-3.3.0-arm-2.txz
- x/xf86-video-armsoc-1.4.1-arm-2.txz
- x/xf86-video-fbdev-0.4.4-arm-3.txz
- x/xf86-video-fbturbo-199.f9a6ed7-arm-3.txz
- x/xf86-video-opentegra-0.7.0-arm-2.txz
- xap/MPlayer-20160125-arm-2.txz
Upgraded to ffmpeg-2.8.10. - xap/ddd-3.3.12-arm-2.txz
- xap/gftp-2.0.19-arm-2.txz
- xap/pidgin-2.11.0-arm-2.txz
- xap/xine-lib-1.2.6-arm-2.txz
Upgraded to ffmpeg-2.8.10. - xap/xine-ui-0.99.9-arm-2.txz
- xfce/tumbler-0.1.31-arm-2.txz
- extra/brltty/brltty-5.4-arm-2.txz
Patched /lib/udev/rules.d/40-usb-brltty.rules to fix a syntax error.
Thanks to Willy Sudiarto Raharjo. - extra/tigervnc/tigervnc-1.7.0-arm-2.txz
Recompiled for xorg-server-1.19.1. - isolinux/*
Upgraded
- a/btrfs-progs-4.9-arm-1.txz
- a/dialog-1.3_20160828-arm-1.txz
- a/ed-1.14.1-arm-1.txz
- a/elvis-2.2_0-arm-1.txz
- a/file-5.29-arm-1.txz
- a/gptfdisk-1.0.1-arm-1.txz
- a/hwdata-0.291-arm-1.txz
- a/minicom-2.7-arm-1.txz
- a/procps-ng-3.3.12-arm-1.txz
- a/sed-4.3-arm-1.txz
- a/splitvt-1.6.6-arm-1.txz
- a/tcsh-6.20.00-arm-1.txz
- a/util-linux-2.29-arm-1.txz
- a/xfsprogs-4.8.0-arm-1.txz
- a/xz-5.2.3-arm-1.txz
- ap/alsa-utils-1.1.3-arm-1.txz
- ap/cups-filters-1.13.2-arm-1.txz
- ap/gphoto2-2.5.11-arm-1.txz
- ap/hplip-3.16.11-arm-1.txz
- ap/htop-2.0.2-arm-1.txz
- ap/joe-4.3-arm-1.txz
- ap/mariadb-10.0.29-arm-1.txz
This update fixes several security issues.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6664
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3238
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3243
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3244
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3257
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3258
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3265
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3291
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3312
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3317
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3318
(* Security fix *) - ap/mc-4.8.18-arm-1.txz
- ap/moc-2.5.2-arm-1.txz
- ap/nano-2.7.4-arm-1.txz
- ap/screen-4.5.0-arm-1.txz
- ap/sqlite-3160100-arm-1.txz
- ap/tmux-2.3-arm-1.txz
- ap/vim-8.0.0161-arm-1.txz
- ap/zsh-5.3.1-arm-1.txz
- d/clisp-2.49.20161111hg-arm-1.txz
- d/cmake-3.7.1-arm-1.txz
- d/flex-2.6.3-arm-1.txz
- d/gperf-3.1-arm-1.txz
- d/m4-1.4.18-arm-1.txz
- d/make-4.2.1-arm-1.txz
- d/perl-5.24.0-arm-1.txz
Also upgraded to DBD-mysql-4.041 and TermReadKey-2.37. - d/ruby-2.4.0-arm-1.txz
- d/subversion-1.9.5-arm-1.txz
- kde/kdelibs-4.14.27-arm-1.txz
- l/alsa-lib-1.1.3-arm-1.txz
- l/boost-1.63.0-arm-1.txz
Shared library .so-version bump. - l/elfutils-0.168-arm-1.txz
- l/hunspell-1.6.0-arm-1.txz
Shared library .so-version bump. - l/libcaca-0.99.beta19-arm-1.txz
- l/libcap-2.25-arm-1.txz
- l/libgphoto2-2.5.11-arm-1.txz
- l/libnjb-2.2.7-arm-1.txz
- l/libpng-1.6.27-arm-1.txz
This release fixes an old NULL pointer dereference bug in png_set_text_2()
discovered and patched by Patrick Keshishian. The potential “NULL
dereference” bug has existed in libpng since version 0.71 of June 26, 1995.
To be vulnerable, an application has to load a text chunk into the png
structure, then delete all text, then add another text chunk to the same
png structure, which seems to be an unlikely sequence, but it has happened.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10087
(* Security fix *) - l/libproxy-0.4.13-arm-1.txz
- l/libtasn1-4.10-arm-1.txz
- l/poppler-0.50.0-arm-1.txz
Shared library .so-version bump. - l/seamonkey-solibs-2.46-arm-1.txz
This update contains security fixes and improvements.
For more information, see:
http://www.seamonkey-project.org/releases/seamonkey2.46
(* Security fix *) - l/taglib-1.11.1-arm-1.txz
- l/wavpack-5.0.0-arm-1.txz
- l/zlib-1.2.10-arm-1.txz
- n/bind-9.11.0_P2-arm-1.txz
This update fixes a denial-of-service vulnerability. An error in handling
certain queries can cause an assertion failure when a server is using the
nxdomain-redirect feature to cover a zone for which it is also providing
authoritative service. A vulnerable server could be intentionally stopped
by an attacker if it was using a configuration that met the criteria for
the vulnerability and if the attacker could cause it to accept a query
that possessed the required attributes.
Please note: This vulnerability affects the “nxdomain-redirect” feature,
which is one of two methods of handling NXDOMAIN redirection, and is only
available in certain versions of BIND. Redirection using zones of type
“redirect” is not affected by this vulnerability.
For more information, see:
https://kb.isc.org/article/AA-01442
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9778
(* Security fix *) - n/bluez-5.43-arm-1.txz
- n/epic5-2.0.1-arm-1.txz
- n/gnutls-3.5.8-arm-1.txz
This update fixes some bugs and security issues.
For more information, see:
https://gnutls.org/security.html#GNUTLS-SA-2017-1
https://gnutls.org/security.html#GNUTLS-SA-2017-2
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5334
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5335
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5336
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5337
(* Security fix *) - n/iftop-1.0pre4-arm-1.txz
- n/irssi-0.8.21-arm-1.txz
Fixed security issues that may result in a denial of service.
For more information, see:
https://irssi.org/security/irssi_sa_2017_01.txt
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5193
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5194
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5195
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5196
(* Security fix *) - n/iw-4.9-arm-1.txz
- n/lftp-4.7.5-arm-1.txz
- n/libnftnl-1.0.7-arm-1.txz
- n/links-2.14-arm-1.txz
- n/mtr-0.87-arm-1.txz
- n/mutt-1.7.2-arm-1.txz
- n/ncftp-3.2.6-arm-1.txz
- n/nftables-0.7-arm-1.txz
- n/nn-6.7.3-arm-1.txz
- n/obexftp-0.24.2-arm-1.txz
- n/openobex-1.7.2-arm-1.txz
- n/openvpn-2.4.0-arm-1.txz
- n/tin-2.4.1-arm-1.txz
- n/wpa_supplicant-2.6-arm-1.txz
- x/libdrm-2.4.74-arm-1.txz
- x/mesa-13.0.2-arm-1.txz
- x/scim-1.4.17-arm-1.txz
- x/xorg-server-1.19.1-arm-1.txz
Rename 90-keyboard-layout.conf to 90-keyboard-layout-evdev.conf. - x/xorg-server-xephyr-1.19.1-arm-1.txz
- x/xorg-server-xnest-1.19.1-arm-1.txz
- x/xorg-server-xvfb-1.19.1-arm-1.txz
- x/xterm-327-arm-1.txz
- xap/fvwm-2.6.7-arm-1.txz
- xap/gparted-0.27.0-arm-1.txz
- xap/hexchat-2.12.4-arm-1.txz
- xap/imagemagick-6.9.7_3-arm-1.txz
Shared library .so-version bump. - xap/mozilla-thunderbird-45.6.0-arm-1.txz
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/security/known-vulnerabilities/thunderbird.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9899
(* Security fix *) - xap/seamonkey-2.46-arm-1.txz
This update contains security fixes and improvements.
For more information, see:
http://www.seamonkey-project.org/releases/seamonkey2.46
(* Security fix *) - xap/vim-gvim-8.0.0161-arm-1.txz
- xap/xlockmore-5.50-arm-1.txz
- xfce/xfce4-panel-4.12.1-arm-1.txz
- xfce/xfce4-settings-4.12.1-arm-1.txz
- xfce/xfconf-4.12.1-arm-1.txz
- kernels/*
Removed
+n/trn-3.6-arm-1.txz
Added
- x/libinput-1.5.4-arm-1.txz
This is the new generic X.Org input driver which replaces evdev for most
purposes. It does not (for now) replace xf86-input-synaptics or
xf86-input-vmmouse. If this driver package is missing then X will fall
back to using xf86-input-evdev as before.
Thanks to Robby Workman. - x/libwacom-0.22-arm-1.txz
This is needed for libinput.