Slackwarearm-current ChangeLog (2020-02-23)
Sun Feb 23 08:08:08 UTC 2020
Packages
Upgraded
- d/git-2.25.1-arm-1.txz
Fixed uncompressed Git.3pm man page. Thanks to Xsane. - l/gtk+3-3.24.14-arm-1.txz
Built with -DG_ENABLE_DEBUG. Thanks to Bindestreck.
Also built with -DG_DISABLE_CAST_CHECKS and -Dbroadway_backend=true.
Add wayland backend. - l/libarchive-3.4.2-arm-1.txz
This update includes security fixes in the RAR5 reader.
(* Security fix *) - n/NetworkManager-1.22.8-arm-1.txz
Fixed hardlinked/uncompressed man pages. Thanks to Xsane. - n/bind-9.16.0-arm-1.txz
rc.bind: don't change file ownerships in /var/named. Thanks to voegelas.
rc.bind: make sure it works with a non-root user specified in $NAMED_OPTIONS.
Thanks to Luigi Trovato. - n/openssh-8.2p1-arm-1.txz
Potentially incompatible changes:
* ssh(1), sshd(8): the removal of “ssh-rsa” from the accepted
CASignatureAlgorithms list.
* ssh(1), sshd(8): this release removes diffie-hellman-group14-sha1
from the default key exchange proposal for both the client and
server.
* ssh-keygen(1): the command-line options related to the generation
and screening of safe prime numbers used by the
diffie-hellman-group-exchange-* key exchange algorithms have
changed. Most options have been folded under the -O flag.
* sshd(8): the sshd listener process title visible to ps(1) has
changed to include information about the number of connections that
are currently attempting authentication and the limits configured
by MaxStartups. - n/php-7.4.3-arm-1.txz
This update fixes bugs and security issues:
Phar: Files added to tar with Phar::buildFromIterator have
all-access permissions.
Phar: heap-buffer-overflow in phar_extract_file.
Session: Null Pointer Dereference in PHP Session Upload Progress.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7063
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7061
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7062
(* Security fix *) - n/proftpd-1.3.6c-arm-1.txz
No CVEs assigned, but this sure looks like a security issue:
Use-after-free vulnerability in memory pools during data transfer.
(* Security fix *) - x/mesa-20.0.0-arm-1.txz
Added Wayland platform support.
Reverted “[PATCH] swr: Fix GCC 4.9 checks.” which makes X fail to start with
an illegal instruction on some hardware. - xap/mozilla-thunderbird-68.5.0-arm-1.txz
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/68.5.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6793
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6794
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6797
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6798
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6800
(* Security fix *)
Rebuilt
- a/shadow-4.8.1-arm-5.txz
Recompiled using –with-group-name-max-length=32. Thanks to Bart van der Hall.
Automatically backup /etc/login.defs and install the new version if
incompatible PAM options are detected. - a/sysvinit-scripts-2.1-noarch-24.txz
rc.S: make /var/run a bind mount to /run. Thanks to Robby Workman.
rc.S: make a few adjustments to temporary file cleanup.
rc.M: drop additional checks on starting rc.syslog. - ap/cdparanoia-III_10.2-arm-4.txz
Moved man page from /usr/man/jp/man1/ to /usr/man/ja/man1/. Thanks to Xsane.
Don't ship the static libraries. - d/cmake-3.16.4-arm-2.txz
Recompiled against qt5-5.13.2. - d/doxygen-1.8.17-arm-2.txz
Recompiled against qt5-5.13.2. - d/gnucobol-2.2-arm-4.txz
Fixed uncompressed man pages. Thanks to Xsane. - l/sdl-1.2.15-arm-6.txz
Added SDL_sound-1.0.3. - l/v4l-utils-1.18.0-arm-2.txz
Recompiled against qt5-5.13.2. - n/dnsmasq-2.80-arm-5.txz
Rebuilt with: -DHAVE_DNSSEC -DHAVE_DBUS -DHAVE_LIBIDN2 -DHAVE_CONNTRACK - n/pinentry-1.1.0-arm-4.txz
Recompiled against qt5-5.13.2. - n/wpa_supplicant-2.9-arm-2.txz
Recompiled against qt5-5.13.2. - x/libva-2.6.1-arm-2.txz
Rebuilt to add libva-wayland. Thanks to hadack. - xap/xpdf-4.02-arm-3.txz
Recompiled against qt5-5.13.2.
Added
- l/libuv-1.34.2-arm-1.txz
This is needed by bind-9.16.0. - l/libxkbcommon-0.10.0-arm-1.txz
Rebuilt to add wayland support. - l/openal-soft-1.19.1-arm-1.txz
Due to build failures of newer releases of this package, this is an older
release than the version included within Slackware.
I'm keeping track of this and will upgrade it when possible. - l/python-future-0.18.2-arm-1.txz
This is needed by fetchmailconf and will probably see additional use as
projects jump off of the sinking Python 2 ship. - l/qt5-5.13.2-arm-1.txz
Thanks to alienBOB. - l/qt5-webkit-5.212.0_alpha3-arm-1.txz
Thanks to alienBOB.
Giuseppe Di Terlizzi