Sun Apr 14 18:35:32 UTC 2024
a/less-653-x86_64-2.txz:  Rebuilt.
  This update patches a security issue:
  less through 653 allows OS command execution via a newline character in the
  name of a file, because quoting is mishandled in filename.c. Exploitation
  typically requires use with attacker-controlled file names, such as the files
  extracted from an untrusted archive. Exploitation also requires the LESSOPEN
  environment variable, but this is set by default in many common cases.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2024-32487
  (* Security fix *)
ap/inxi-3.3.34_1-noarch-1.txz:  Upgraded.
d/python-setuptools-69.5.1-x86_64-1.txz:  Upgraded.
n/bluez-5.74-x86_64-1.txz:  Upgraded.
xfce/xfce4-notifyd-0.9.4-x86_64-1.txz:  Upgraded.
  Almost everyone has jumped to this version, so we'll get with the program.

Mon Apr 15 22:28:37 UTC 2024
ap/linuxdoc-tools-0.9.83-x86_64-1.txz:  Upgraded.
  Upgraded to linuxdoc-tools-0.9.83, gtk-doc-1.34.0, and asciidoc-10.2.0.
  See the ChangeLog in source/ap/linuxdoc-tools for more details.
  Thanks to Stuart Winter.
ap/sqlite-3.45.3-x86_64-1.txz:  Upgraded.
l/Mako-1.3.3-x86_64-1.txz:  Upgraded.
l/pipewire-1.0.5-x86_64-1.txz:  Upgraded.
l/python-hatchling-1.23.0-x86_64-1.txz:  Upgraded.
x/libwacom-2.11.0-x86_64-1.txz:  Upgraded.
x/xcb-proto-1.17.0-x86_64-1.txz:  Upgraded.
x/xf86-input-wacom-1.2.2-x86_64-1.txz:  Upgraded.
xap/pan-0.158-x86_64-1.txz:  Upgraded.
  Let's process the git pull with NOCONFIGURE=1 ./autogen.sh for FTIO. :-)

Tue Apr 16 18:50:13 UTC 2024
a/elogind-255.4_r2-x86_64-1.txz:  Upgraded.
  Prefer SuspendMode=deep. Thanks to LuckyCyborg.
  Make 10-elogind.conf .new (but it will still be forced in this time).
  Fix reading login.conf. Thanks to af7567.
  This branch is feeling a bit alpha to me, but we'll stick with it for now.
ap/groff-1.23.0-x86_64-2.txz:  Rebuilt.
  [PATCH] Revert upstream change of mapping special characters for UTF-8.
  Thanks to Stuart Winter.
l/mozjs115-115.10.0esr-x86_64-1.txz:  Upgraded.
l/python-hatchling-1.24.0-x86_64-1.txz:  Upgraded.
n/bluez-5.75-x86_64-1.txz:  Upgraded.
x/libxcb-1.17.0-x86_64-1.txz:  Upgraded.
xap/mozilla-firefox-115.10.0esr-x86_64-1.txz:  Upgraded.
  This update contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/firefox/115.10.0/releasenotes/
    https://www.mozilla.org/security/advisories/mfsa2024-19/
    https://www.cve.org/CVERecord?id=CVE-2024-3852
    https://www.cve.org/CVERecord?id=CVE-2024-3854
    https://www.cve.org/CVERecord?id=CVE-2024-3857
    https://www.cve.org/CVERecord?id=CVE-2024-2609
    https://www.cve.org/CVERecord?id=CVE-2024-3859
    https://www.cve.org/CVERecord?id=CVE-2024-3861
    https://www.cve.org/CVERecord?id=CVE-2024-3863
    https://www.cve.org/CVERecord?id=CVE-2024-3302
    https://www.cve.org/CVERecord?id=CVE-2024-3864
  (* Security fix *)

Tue Apr 16 21:57:56 UTC 2024
a/aaa_libraries-15.1-x86_64-30.txz:  Rebuilt.
  Upgraded: libcares.so.2.13.1.
  Added (temporarily): libboost_*.so.1.84.0.
ap/pamixer-1.6-x86_64-2.txz:  Rebuilt.
  Recompiled against boost-1.85.0.
kde/kig-23.08.5-x86_64-4.txz:  Rebuilt.
  Recompiled against boost-1.85.0.
kde/kopeninghours-23.08.5-x86_64-4.txz:  Rebuilt.
  Recompiled against boost-1.85.0.
kde/krita-5.2.2-x86_64-8.txz:  Rebuilt.
  Recompiled against boost-1.85.0.
l/boost-1.85.0-x86_64-1.txz:  Upgraded.
  Shared library .so-version bump.
l/cryfs-0.10.3-x86_64-11.txz:  Rebuilt.
  Recompiled against boost-1.85.0.
x/fcitx5-chinese-addons-5.1.4-x86_64-2.txz:  Rebuilt.
  Recompiled against boost-1.85.0.
x/libime-1.1.6-x86_64-2.txz:  Rebuilt.
  Recompiled against boost-1.85.0.

Wed Apr 17 20:35:48 UTC 2024
a/kernel-firmware-20240417_e678699-noarch-1.txz:  Upgraded.
a/kernel-generic-6.6.28-x86_64-1.txz:  Upgraded.
a/kernel-huge-6.6.28-x86_64-1.txz:  Upgraded.
a/kernel-modules-6.6.28-x86_64-1.txz:  Upgraded.
a/xfsprogs-6.7.0-x86_64-1.txz:  Upgraded.
d/kernel-headers-6.6.28-x86-1.txz:  Upgraded.
k/kernel-source-6.6.28-noarch-1.txz:  Upgraded.
l/pycups-2.0.3-x86_64-1.txz:  Upgraded.
l/python-sphinx-7.3.5-x86_64-1.txz:  Upgraded.
n/bluez-5.75-x86_64-2.txz:  Rebuilt.
  Prune duplicate config files. Thanks to audriusk.
x/libXmu-1.2.1-x86_64-1.txz:  Upgraded.
x/util-macros-1.20.1-noarch-1.txz:  Upgraded.
x/wayland-protocols-1.35-noarch-1.txz:  Upgraded.
xap/mozilla-thunderbird-115.10.0-x86_64-1.txz:  Upgraded.
  This release contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/115.10.0/releasenotes/
    https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird115.10
  (* Security fix *)
xfce/xfce4-notifyd-0.9.4-x86_64-2.txz:  Rebuilt.
  Do not install DBus service files, as these cause xfce4-notifyd to start in
  plasma sessions. Thanks to ctrlaltca.
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.

Thu Apr 18 19:17:30 UTC 2024
a/aaa_glibc-solibs-2.39-x86_64-2.txz:  Rebuilt.
ap/vim-9.1.0346-x86_64-1.txz:  Upgraded.
d/llvm-18.1.4-x86_64-1.txz:  Upgraded.
d/nasm-2.16.03-x86_64-1.txz:  Upgraded.
l/glibc-2.39-x86_64-2.txz:  Rebuilt.
  This update fixes a security issue:
  The iconv() function in the GNU C Library versions 2.39 and older may
  overflow the output buffer passed to it by up to 4 bytes when converting
  strings to the ISO-2022-CN-EXT character set, which may be used to crash
  an application or overwrite a neighbouring variable.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2024-2961
  (* Security fix *)
l/glibc-i18n-2.39-x86_64-2.txz:  Rebuilt.
l/glibc-profile-2.39-x86_64-2.txz:  Rebuilt.
l/pycups-2.0.4-x86_64-1.txz:  Upgraded.
l/python-hatchling-1.24.1-x86_64-1.txz:  Upgraded.
l/python-sphinx-7.3.6-x86_64-1.txz:  Upgraded.
n/bind-9.18.26-x86_64-1.txz:  Upgraded.
  This is a bugfix release.
xap/vim-gvim-9.1.0346-x86_64-1.txz:  Upgraded.

Fri Apr 19 05:38:28 UTC 2024
xap/mozilla-thunderbird-115.10.1-x86_64-1.txz:  Upgraded.
  This is a bugfix release.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/115.10.1/releasenotes/

Fri Apr 19 19:36:17 UTC 2024
a/elogind-252.23-x86_64-3.txz:  Rebuilt.
  All right, it's time to stop the bleeding (edge). This has been verified as
  the last working version of elogind, so we'll revert for now while moving the
  newer sources into /testing. We didn't actually *need* the 255 branch for
  libgudev (I was mistakenly under that impression), so this will be fine for
  now. We'll keep an eye on upstream and move forward when things settle down.
d/vala-0.56.17-x86_64-1.txz:  Upgraded.
l/gdk-pixbuf2-2.42.11-x86_64-1.txz:  Upgraded.
l/gtk4-4.14.3-x86_64-1.txz:  Upgraded.
l/polkit-124-x86_64-2.txz:  Rebuilt.
  Recompiled against elogind-252.23.
l/python-sphinx-7.3.7-x86_64-1.txz:  Upgraded.
n/NetworkManager-1.46.0-x86_64-2.txz:  Rebuilt.
  Build with meson instead of autotools, since setting session_tracking to
  elogind is ignored with autotools, and is set to consolekit instead.
  While this didn't seem to make a difference in practice, better to get this
  right now and rule it out as part of the issue.
  Thanks to marav and LuckyCyborg for the options hints.
x/xdg-desktop-portal-1.18.4-x86_64-1.txz:  Upgraded.
xap/freerdp-2.11.6-x86_64-1.txz:  Upgraded.
  This release is a security release and addresses multiple issues:
  [Low] OutOfBound Read in zgfx_decompress_segment.
  [Moderate] Integer overflow & OutOfBound Write in
  clear_decompress_residual_data.
  [Low] integer underflow in nsc_rle_decode.
  [Low] OutOfBound Read in planar_skip_plane_rle.
  [Low] OutOfBound Read in ncrush_decompress.
  [Low] OutOfBound Read in interleaved_decompress.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2024-32041
    https://www.cve.org/CVERecord?id=CVE-2024-32039
    https://www.cve.org/CVERecord?id=CVE-2024-32040
    https://www.cve.org/CVERecord?id=CVE-2024-32458
    https://www.cve.org/CVERecord?id=CVE-2024-32459
    https://www.cve.org/CVERecord?id=CVE-2024-32460
  (* Security fix *)

Sat Apr 20 00:10:39 UTC 2024
l/gdk-pixbuf2-2.42.11-x86_64-2.txz:  Rebuilt.
  Recompiled with -Dtests=false -Dothers=enabled to fix gkrellm.
  Thanks to J_W for the bug report.

Sun Apr 21 21:41:34 UTC 2024
a/etc-15.1-x86_64-11.txz:  Rebuilt.
  Populate missing /etc/gshadow entries. Thanks to opty.
l/PyQt-builder-1.16.1-x86_64-1.txz:  Upgraded.
l/python-pluggy-1.5.0-x86_64-1.txz:  Upgraded.

Mon Apr 22 19:36:38 UTC 2024
a/elogind-255.4_r2-x86_64-2.txz:  Rebuilt.
  OK, this is looking good enough to return to the main tree now.
  Thanks to hamkg, ctrlaltca, and rizitis for helping to debug the sleep issues
  with upstream, and to Sven Eden for the upstream fixes. I've changed the
  default sleep mode from s2idle to deep as s2idle still locks up most of the
  systems I've tried it on. Eventually we'll probably have to swallow this pill
  though (more notes on that in the SlackBuild).
  It didn't seem like recompiling polkit again was necessary, but correct me if
  I'm wrong about that.
l/imagemagick-7.1.1_31-x86_64-1.txz:  Upgraded.
l/python-hatchling-1.24.2-x86_64-1.txz:  Upgraded.
l/vte-0.76.1-x86_64-1.txz:  Upgraded.
l/wireplumber-0.5.2-x86_64-1.txz:  Upgraded.
xap/freerdp-2.11.7-x86_64-1.txz:  Upgraded.
  This release eliminates a bunch of issues detected during oss-fuzz runs.
  (* Security fix *)

Tue Apr 23 19:48:05 UTC 2024
a/ed-1.20.2-x86_64-1.txz:  Upgraded.
d/parallel-20240422-noarch-1.txz:  Upgraded.
kde/krusader-2.8.1-x86_64-1.txz:  Upgraded.
kde/ktextaddons-1.5.4-x86_64-1.txz:  Upgraded.
l/libgusb-0.4.9-x86_64-1.txz:  Upgraded.
n/nmap-7.95-x86_64-1.txz:  Upgraded.
x/fcitx5-5.1.9-x86_64-1.txz:  Upgraded.
x/fcitx5-anthy-5.1.4-x86_64-1.txz:  Upgraded.
x/fcitx5-chinese-addons-5.1.5-x86_64-1.txz:  Upgraded.
x/fcitx5-gtk-5.1.3-x86_64-1.txz:  Upgraded.
x/fcitx5-hangul-5.1.3-x86_64-1.txz:  Upgraded.
x/fcitx5-kkc-5.1.3-x86_64-1.txz:  Upgraded.
x/fcitx5-m17n-5.1.1-x86_64-1.txz:  Upgraded.
x/fcitx5-qt-5.1.6-x86_64-1.txz:  Upgraded.
x/fcitx5-sayura-5.1.2-x86_64-1.txz:  Upgraded.
x/fcitx5-table-extra-5.1.5-x86_64-1.txz:  Upgraded.
x/fcitx5-table-other-5.1.2-x86_64-1.txz:  Upgraded.
x/fcitx5-unikey-5.1.4-x86_64-1.txz:  Upgraded.
x/libime-1.1.7-x86_64-1.txz:  Upgraded.
extra/emacs-regular-build/emacs-29.3-x86_64-2_regular.txz:  Rebuilt.
  This is a bugfix release.
  Only build the X11/GTK+3 version. Use "emacs -nw" if you want to start it
  in a terminal emulator in text mode, or rebuild if you really need to get
  rid of the X11 dependency for some reason.
  Build using --with-pdumper=auto. It seems that --with-dumping=unexec produces
  a buggy Emacs here in the modern era, with symptoms such as "child signal FD:
  Invalid argument". It's possible this had something to do with the reported
  memory leaks as well.
  Thanks to 3Tom for the bug report.

Tue Apr 23 22:24:03 UTC 2024
d/ruby-3.3.1-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  Arbitrary memory address read vulnerability with Regex search.
  RCE vulnerability with .rdoc_options in RDoc.
  Buffer overread vulnerability in StringIO.
  For more information, see:
    https://www.ruby-lang.org/en/news/2024/04/23/arbitrary-memory-address-read-regexp-cve-2024-27282/
    https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/
    https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/
    https://www.cve.org/CVERecord?id=CVE-2024-27282
    https://www.cve.org/CVERecord?id=CVE-2024-27281
    https://www.cve.org/CVERecord?id=CVE-2024-27280
  (* Security fix *)
l/python-docutils-0.21.2-x86_64-1.txz:  Upgraded.
x/rendercheck-1.6-x86_64-1.txz:  Upgraded.
x/xcb-imdkit-1.0.8-x86_64-1.txz:  Upgraded.

Wed Apr 24 20:08:55 UTC 2024
ap/dmidecode-3.6-x86_64-1.txz:  Upgraded.
kde/fcitx5-configtool-5.1.5-x86_64-1.txz:  Upgraded.
l/aom-3.9.0-x86_64-1.txz:  Upgraded.
x/mesa-24.0.6-x86_64-1.txz:  Upgraded.