Slackware64-current ChangeLog (2018-09-06)
Thu Sep 6 23:22:45 UTC 2018
Packages
Rebuilt
- a/pkgtools-15.0-noarch-23.txz
Removed stray cat and loop kludges for lack of reported size, since this
is fixed now in tar. - a/tar-1.30-x86_64-3.txz
Fixed a bug in the nolonezero patch that was evidently causing all of the
issues in installpkg that we'd been kludging around (e.g. the “stray cat”).
Thanks *very* much to NonNonBa for the patch, and to SeB for the initial
analysis of the problem. - ap/ghostscript-9.24-x86_64-2.txz
Applied upstream patch to fix “Filter failed”. Thanks to th_r and bamunds.
Upgraded
Thu Sep 6 06:15:46 UTC 2018
Packages
Upgraded
- ap/ghostscript-9.24-x86_64-1.txz
Patched multiple -dSAFER sandbox bypass vulnerabilities.
Thanks to Tavis Ormandy.
For more information, see:
https://www.ghostscript.com/doc/9.24/News.htm
https://www.kb.cert.org/vuls/id/332928
(* Security fix *) - n/curl-7.61.1-x86_64-1.txz
This update fixes an NTLM password overflow via integer overflow.
For more information, see:
https://curl.haxx.se/docs/CVE-2018-14618.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14618
(* Security fix *) - xap/mozilla-firefox-60.2.0esr-x86_64-1.txz
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
(* Security fix *)
Rebuilt
- a/etc-15.0-x86_64-9.txz
Added support for /etc/ld.so.conf.d/. Thanks to Qury. - a/pkgtools-15.0-noarch-22.txz
installpkg: prevent noise from the “stray cat” if tar hands it a broken
pipe. Thanks to ivandi.
Also (in the comments) provide a possibly better but untested solution.
Thanks to SeB. - a/sysvinit-2.90-x86_64-2.txz
sysvinit-2.90 added an undocumented feature that tries to spawn agetty
if it sees console= in the kernel command line. Avoiding the debate about
whether this code belongs in init at all, at least such a change should
be documented, and probably made opt-in. This patch disables the new
behavior unless “sysvinit_agetty” is also seen in the kernel command line.
It seems like this might have been something added for Hurd, and it might
be wise to stick to what we've got rather than following upstream on this
particular package. If anyone notices any other odd behavior, please let
me know. Thanks to shastah. - a/sysvinit-scripts-2.1-noarch-19.txz
When checking for intel_pstate, direct the stderr to /dev/null in case
the file doesn't exist in /sys. Thanks to ivandi.
Allow forcing an option by editing /etc/default/cpufreq. - d/binutils-2.31.1-x86_64-2.txz
elf.c (_bfd_elf_get_symbol_version_string): Return _(“<corrupt>”) for
corrupt symbol version info.
elflink.c (bfd_elf_record_link_assignment): Always clear h→verinfo.verdef
when overriding a dynamic definition.
Thanks to Michael Short for pointing out the upstream patches. - d/llvm-6.0.1-x86_64-2.txz
Recompiled with -DCLANG_BUILD_SHARED_LIBS=ON to fix issues when multiple
OpenCL drivers are installed. Thanks to Heinz Wiesinger. - n/netatalk-3.1.11-x86_64-2.txz
rc.atalk: fixed errors in status output. Thanks to marav.