Slackwarearm-current ChangeLog (2018-09-15)
Sat Sep 15 08:08:08 UTC 2018
Packages
Upgraded
- a/acpid-2.0.30-arm-1.txz
- a/kernel-firmware-20180904_85c5d90-noarch-1.txz
- a/kernel-modules-armv7-4.17.19_armv7-arm-1.txz
- a/kernel_armv7-4.17.19-arm-1.txz
Reverted to the 4.17 branch. Unfortunately 4.18 was unstable on the OrangePi.
In particular, the date was jumping 100 years and there were numerous Kernel
panics. Linux 4.19rc2 was tried but was also unstable. Slackware ARM 15.0
aims to ship with Linux 4.19, as it contains the drivers for the supported
hardware, and will be an “Longterm release” which makes it suitable for a
Slackware release.
This Kernel also has the following configuration changes:
Thanks to Darth Vader.
+CONFIG_ZSWAP=y
+CONFIG_ZPOOL=y
+CONFIG_ZBUD=y - a/openssl-solibs-1.1.1-arm-1.txz
- a/xfsprogs-4.18.0-arm-1.txz
- ap/cups-filters-1.21.2-arm-1.txz
- ap/ghostscript-9.25-arm-1.txz
This release fixes problems with argument handling, some unintended
results of the security fixes to the SAFER file access restrictions
(specifically accessing ICC profile files), and some additional
security issues over the recent 9.24 release.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16509
(* Security fix *)
Applied upstream patch to fix “Filter failed”. Thanks to th_r and bamunds.
Added two upstream patches to fix PDF printing. Thanks to Petri Kaukasoina.
Patched multiple -dSAFER sandbox bypass vulnerabilities.
Thanks to Tavis Ormandy.
For more information, see:
https://www.ghostscript.com/doc/9.24/News.htm
https://www.kb.cert.org/vuls/id/332928
(* Security fix *) - ap/nano-3.0-arm-1.txz
- ap/squashfs-tools-20180612_6e242dc-arm-1.txz
Linked against libzstd.so.1. Thanks to alienBOB. - ap/sudo-1.8.25p1-arm-1.txz
- d/ccache-3.4.3-arm-1.txz
- d/cmake-3.12.2-arm-1.txz
- d/gdb-8.2-arm-1.txz
- d/git-2.19.0-arm-1.txz
- d/indent-2.2.12-arm-1.txz
- d/kernel-headers-4.17.19-arm-1.txz
- d/mercurial-4.7.1-arm-1.txz
- k/kernel-source-4.17.19-arm-1.txz
- l/freetype-2.9.1-arm-1.txz
Patched to build properly if windres is present on the machine. - l/harfbuzz-1.9.0-arm-1.txz
- l/libarchive-3.3.3-arm-1.txz
- l/librsvg-2.44.2-arm-1.txz
- l/media-player-info-24-arm-1.txz
- l/mozilla-nss-3.39-arm-1.txz
- l/pcre2-10.32-arm-1.txz
- l/sg3_utils-1.44-arm-1.txz
- n/curl-7.61.1-arm-1.txz
This update fixes an NTLM password overflow via integer overflow.
For more information, see:
https://curl.haxx.se/docs/CVE-2018-14618.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14618
(* Security fix *) - n/gnupg2-2.2.10-arm-1.txz
- n/libtirpc-1.1.4-arm-1.txz
- n/links-2.17-arm-1.txz
- n/nghttp2-1.33.0-arm-1.txz
- n/openssl-1.1.1-arm-1.txz
- n/p11-kit-0.23.14-arm-1.txz
- n/stunnel-5.49-arm-1.txz
- x/fontconfig-2.13.1-arm-1.txz
We had problem reports with fontconfig-2.13.0 which led to it being reverted
but we'll try it again. Please let me know if the issues (with Wine iirc)
persist. - x/libdrm-2.4.94-arm-1.txz
- x/libinput-1.12.0-arm-1.txz
- x/mesa-18.2.0-arm-1.txz
- x/xf86-video-ati-20180824_de88ea27-arm-1.txz
- xap/hexchat-2.14.2-arm-1.txz
- xap/mozilla-firefox-60.2.0esr-arm-1.txz
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
(* Security fix *) - xap/xlockmore-5.56-arm-1.txz
- xfce/tumbler-0.2.3-arm-1.txz
- kernels/*
Rebuilt
- a/etc-15.0-arm-9.txz
Added support for /etc/ld.so.conf.d/. Thanks to Qury. - a/pkgtools-15.0-noarch-17.txz
Removed stray cat and loop kludges for lack of reported size, since this
is fixed now in tar.
installpkg: prevent noise from the “stray cat” if tar hands it a broken
pipe. Thanks to ivandi.
Also (in the comments) provide a possibly better but untested solution.
Thanks to SeB. - a/sysvinit-2.90-arm-2.txz
sysvinit-2.90 added an undocumented feature that tries to spawn agetty
if it sees console= in the kernel command line. Avoiding the debate about
whether this code belongs in init at all, at least such a change should
be documented, and probably made opt-in. This patch disables the new
behavior unless “sysvinit_agetty” is also seen in the kernel command line.
It seems like this might have been something added for Hurd, and it might
be wise to stick to what we've got rather than following upstream on this
particular package. If anyone notices any other odd behavior, please let
me know. Thanks to shastah. - a/sysvinit-scripts-2.1-noarch-17.txz
rc.6: it was reported by birdboy that JFS is not properly unmounted unless
the order of unmounting local filesystems followed by remounting the root
filesystem read-only is inverted. I tried that, and although it did get rid
of a “/ filesystem is busy” error during shutdown, the JFS / filesystem was
still checked at boot (and found to be clean). I believe that the existing
order of unmounting non-root filesystems followed by remounting the root
filesystem as read-only is the correct order, and found that putting
another sync between these also gets rid of the error on shutdown, so I've
done that. When using JFS as the root filesystem there's still another
similar error message that's generated earlier in the boot, though. I'm
unable to find any way to shut down a JFS root partition in a way that
leaves it clean enough that fsck will not check it at boot, but it is always
found to be clean so this should only be cosmetic. I recall this behavior of
JFS going all the way back to when it was first added to the kernel. If
anyone has a better fix, I'll take a look at it, but in my opinion it's not
really anything to worry about.
When checking for intel_pstate, direct the stderr to /dev/null in case
the file doesn't exist in /sys. Thanks to ivandi.
Allow forcing an option by editing /etc/default/cpufreq. - a/tar-1.30-arm-3.txz
Fixed a bug in the nolonezero patch that was evidently causing all of the
issues in installpkg that we'd been kludging around (e.g. the “stray cat”).
Thanks *very* much to NonNonBa for the patch, and to SeB for the initial
analysis of the problem. - d/binutils-2.31.1-arm-2.txz
elf.c (_bfd_elf_get_symbol_version_string): Return _(“<corrupt>”) for
corrupt symbol version info.
elflink.c (bfd_elf_record_link_assignment): Always clear h→verinfo.verdef
when overriding a dynamic definition.
Thanks to Michael Short for pointing out the upstream patches. - d/gcc-8.2.0-arm-2.txz
- d/gcc-g++-8.2.0-arm-2.txz
- d/gcc-gfortran-8.2.0-arm-2.txz
- d/gcc-gnat-8.2.0-arm-2.txz
- d/gcc-objc-8.2.0-arm-2.txz
- d/llvm-6.0.1-arm-2.txz
Recompiled with -DCLANG_BUILD_SHARED_LIBS=ON to fix issues when multiple
OpenCL drivers are installed. Thanks to Heinz Wiesinger. - l/glib2-2.56.2-arm-2.txz
Make links in the documentation directory to all of the API documentation
found under /usr/share/gtk-doc/html. Thanks to Didier Spaier. - n/netatalk-3.1.11-arm-2.txz
rc.atalk: fixed errors in status output. Thanks to marav. - testing/packages/gcc-go-8.2.0-arm-2.txz
Moved from the 'd' series.
gcc-go is not working in Slackware ARM - it either hangs when compiling
something, or errors at the assembly stage. See here for more details:
https://www.linuxquestions.org/questions/slackware-arm-108/go-pegs-cpu-does-not-return-gcc-go-4175633577/
This version is not stripped, which helps because at least 'gcc-go' fails
rather than hangs indefinitely, preventing builds from proceeding. - isolinux/*
Removed
d/gcc-go-8.2.0-arm-1.txz
Moved to /testing.
Added
- l/zstd-1.3.5-arm-1.txz
Thanks to alienBOB.