Slackwarearm-current ChangeLog (2020-07-14)
Tue Jul 14 08:08:08 UTC 2020
Packages
Upgraded
- a/bash-5.0.018.000-arm-1.txz
- a/btrfs-progs-5.7-arm-1.txz
- a/dbus-1.12.20-arm-1.txz
- a/haveged-1.9.13-arm-1.txz
- a/hwdata-0.337-arm-1.txz
- a/kernel-firmware-20200702_74ac3b5-noarch-1.txz
- a/logrotate-3.17.0-arm-1.txz
- a/sysklogd-2.1.2-arm-1.txz
Make sure to move the .new init script and config into place for this. - a/sysvinit-2.97-arm-1.txz
- ap/dash-0.5.11.1-arm-1.txz
- ap/mariadb-10.5.4-arm-1.txz
rc.mysqld: stop the database by PID to avoid improperly stopping other
instances that were not started by this script. Thanks to denydias. - ap/mpg123-1.26.2-arm-1.txz
- ap/neofetch-20200708_af2c02c-noarch-1.txz
- ap/vim-8.2.1167-arm-1.txz
- d/Cython-0.29.21-arm-1.txz
- d/guile-3.0.4-arm-1.txz
Shared library .so-version bump.
Looks like the previous bump was a mistake:
This release fixes the SONAME of libguile-3.0.so, which was erroneously
bumped in 3.0.3 compared to 3.0.2. Distributions are strongly
encouraged to use 3.0.4 instead of 3.0.3. - d/help2man-1.47.16-arm-1.txz
- d/mercurial-5.4.2-arm-1.txz
- d/nasm-2.15.02-arm-1.txz
- d/python-setuptools-49.1.2-arm-1.txz
- d/vala-0.48.7-arm-1.txz
- l/alsa-lib-1.2.3.2-arm-1.txz
- l/dconf-editor-3.36.4-arm-1.txz
- l/ffmpeg-4.3.1-arm-1.txz
- l/fribidi-1.0.10-arm-1.txz
- l/glib2-2.64.4-arm-1.txz
- l/gtk+3-3.24.21-arm-1.txz
- l/imagemagick-7.0.10_23-arm-1.txz
- l/libcap-2.38-arm-1.txz
- l/libevent-2.1.12-arm-1.txz
- l/libjpeg-turbo-2.0.5-arm-1.txz
This update fixes bugs and a security issue:
Fixed an issue in the PPM reader that caused a buffer overrun in cjpeg,
TJBench, or the `tjLoadImage()` function if one of the values in a binary
PPM/PGM input file exceeded the maximum value defined in the file's header
and that maximum value was less than 255.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13790
(* Security fix *) - l/librsvg-2.48.8-arm-1.txz
- l/libuv-1.38.1-arm-1.txz
- l/libvorbis-1.3.7-arm-1.txz
Fix out-of-bounds read encoding very low sample rates.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10393
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14160
(* Security fix *) - l/mozilla-nss-3.54-arm-1.txz
- l/mpfr-4.1.0-arm-1.txz
- l/netpbm-10.91.00-arm-1.txz
- l/opusfile-0.12-arm-1.txz
- l/popt-1.18-arm-1.txz
- l/python-idna-2.10-arm-1.txz
- l/python-pillow-7.2.0-arm-1.txz
- n/ModemManager-1.14.0-arm-1.txz
- n/bind-9.16.5-arm-1.txz
- n/ca-certificates-20200630-noarch-1.txz
This update provides the latest CA certificates to check for the
authenticity of SSL connections. - n/curl-7.71.1-arm-1.txz
This update fixes security issues:
curl overwrite local file with -J [111]
Partial password leak over DNS on HTTP redirect [48]
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
(* Security fix *) - n/gnupg2-2.2.21-arm-1.txz
- n/libgcrypt-1.8.6-arm-1.txz
- n/libmbim-1.24.2-arm-1.txz
- n/mutt-1.14.5-arm-1.txz
- n/php-7.4.8-arm-1.txz
- n/postfix-3.5.4-arm-1.txz
- n/rsync-3.2.2-arm-1.txz
- n/samba-4.12.5-arm-1.txz
- x/libXaw3dXft-1.6.2g-arm-1.txz
- x/libglvnd-1.3.2-arm-1.txz
- x/libva-2.8.0-arm-1.txz
- x/libva-utils-2.8.0-arm-1.txz
- x/libwacom-1.4.1-arm-1.txz
Fix joystick property matching in udev rule. Thanks to Pixxt. - x/mesa-20.1.3-arm-1.txz
- x/xterm-357-arm-1.txz
- xap/audacious-4.0.5-arm-1.txz
- xap/audacious-plugins-4.0.5-arm-1.txz
- xap/mozilla-firefox-68.10.0esr-arm-1.txz
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/68.10.0/releasenotes/
(* Security fix *) - xap/mozilla-thunderbird-68.10.0-arm-1.txz
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/68.10.0/releasenotes/ - xap/seamonkey-2.53.3-arm-1.txz
This update contains security fixes and improvements.
For more information, see:
https://www.seamonkey-project.org/releases/seamonkey2.53.3
(* Security fix *) - xap/vim-gvim-8.2.1167-arm-1.txz
- extra/sendmail/sendmail-8.16.1-arm-1.txz
- extra/sendmail/sendmail-cf-8.16.1-noarch-1.txz
Rebuilt
- a/util-linux-2.35.2-arm-4.txz
Fix chfn line breaks when libreadline is used. Thanks to gouttegd.
Fix chsh when linked with libreadline. Thanks to Karel Zak. - d/make-4.2.1-arm-8.txz
Recompiled against guile-3.0.4. - n/gnutls-3.6.14-arm-3.txz
Recompiled against guile-3.0.4.
Added
- ap/undervolt-20200612_07d0c70-arm-1.txz
- l/xxHash-0.7.4-arm-1.txz