Latest changelog for slackware-current

ponce · 09-14-2021, 01:11 PM

Quote:

Originally Posted by lagavulin16

Can wget1 and wget2 coexist without collisions? Maybe we need to manually uninstall the first version?

yes, there are no overlaps: check the content of the two packages with less

Code:

less /var/log/packages/wget-*
less /var/log/packages/wget2-*

Quote:

Originally Posted by lagavulin16

What's the point of having installed both versions?

they are different in functionalities and wget2 ships also libraries that other applications may link to.

volkerdi · 09-14-2021, 01:31 PM

Quote:

Originally Posted by lagavulin16

Can wget1 and wget2 coexist without collisions? Maybe we need to manually uninstall the first version? What's the point of having installed both versions?

Yes, they can co-exist. Since some of the options are different, we're keeping wget1 (for as long as it's maintained, probably) to avoid breaking any existing scripts.

EDIT: Also ponce beat me to it

marav · 09-16-2021, 02:09 AM

22 updates. Including a (* Security fix *)! : 17 upgraded, 5 rebuilt

Code:

Thu Sep 16 02:52:54 UTC 2021
a/etc-15.0-x86_64-17.txz:  Rebuilt.
  Added named:named (53:53) user and group.
a/kernel-firmware-20210915_198ac65-noarch-1.txz:  Upgraded.
a/kernel-generic-5.14.4-x86_64-1.txz:  Upgraded.
a/kernel-huge-5.14.4-x86_64-1.txz:  Upgraded.
a/kernel-modules-5.14.4-x86_64-1.txz:  Upgraded.
ap/sudo-1.9.8-x86_64-1.txz:  Upgraded.
d/kernel-headers-5.14.4-x86-1.txz:  Upgraded.
k/kernel-source-5.14.4-noarch-1.txz:  Upgraded.
kde/breeze-icons-5.85.0-noarch-2.txz:  Rebuilt.
  Patched with upstream commit to allow using this icon theme with Xfce.
l/fluidsynth-2.2.3-x86_64-1.txz:  Upgraded.
l/python-charset-normalizer-2.0.5-x86_64-1.txz:  Upgraded.
l/qca-2.3.4-x86_64-1.txz:  Upgraded.
n/NetworkManager-1.32.10-x86_64-3.txz:  Rebuilt.
  Switch to dhcp=internal to avoid problems swimming upstream.
  For those looking for a fix to continue using dhcpcd, a PRIVSEP build
  variable was added to the SlackBuild, and you may produce a fully
  NetworkManager compatible dhcpcd package with this command:
  PRIVSEP=no ./dhcpcd.SlackBuild
  Privilege separation remains the dhcpcd package default as we don't want
  to weaken security for those using rc.inet1 along with dhcpcd.
  Some additional comments about this were added to 00-dhcp-client.conf
  mentioning this and the workaround of killing dhcpcd manually when
  resuming with the stock dhcpcd package.
n/bind-9.16.21-x86_64-1.txz:  Upgraded.
  Fixed call to rndc-confgen in the install script.
  Make /etc/rndc.key owned by named:named.
  Run named as named:named by default (configurable in /etc/default/named).
  rc.bind: chown /run/named and /var/named to configured user:group.
  Thanks to Ressy for prompting this cleanup. :)
n/curl-7.79.0-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  clear the leftovers pointer when sending succeeds.
  do not ignore --ssl-reqd.
  reject STARTTLS server response pipelining.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
  (* Security fix *)
n/links-2.24-x86_64-1.txz:  Upgraded.
n/wireguard-tools-1.0.20210914-x86_64-1.txz:  Upgraded.
x/libinput-1.19.0-x86_64-1.txz:  Upgraded.
xap/gimp-2.10.28-x86_64-1.txz:  Upgraded.
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.

avian · 09-16-2021, 10:32 AM

Quote:

Originally Posted by marav

22 updates. Including a (* Security fix *)! : 17 upgraded, 5 rebuilt

Code:

n/bind-9.16.21-x86_64-1.txz:  Upgraded.
  Fixed call to rndc-confgen in the install script.
  Make /etc/rndc.key owned by named:named.
  Run named as named:named by default (configurable in /etc/default/named).
  rc.bind: chown /run/named and /var/named to configured user:group.
  Thanks to Ressy for prompting this cleanup. :)

Just a heads up for anyone who might be running named with custom options in /etc/default/named, dont forget to combine them with the new "-u $BIND_USER" option. If you have logging diverted elsewhere (i.e. NAMED_OPTIONS="-u $BIND_USER -L /var/log/bind"), dont forget to change ownership of the log file to named:named (or whatever your named user is).

Markus Wiesner · 09-16-2021, 11:05 AM

Quote:

Originally Posted by lagavulin16

Can wget1 and wget2 coexist without collisions? Maybe we need to manually uninstall the first version? What's the point of having installed both versions?

I found this comment from a maintainer:

Quote:

Originally Posted by darnir @ reddit

Wget2 is meant to be an almost drop-in replacement for Wget. I say almost, because we did make a few conscious decisions to break backwards compatibility. This means if your scripts parse Wget's output, they will break. But apart from that and the currently missing features, it is a full drop in replacement with a lot more functionality.

Wget2 also provides machine readable output for scripts so they don't need to parse STDOUT

marav · 09-16-2021, 01:47 PM

8 updates : 6 upgraded, 2 rebuilt

Code:

Thu Sep 16 18:33:01 UTC 2021
a/kernel-generic-5.14.5-x86_64-1.txz:  Upgraded.
a/kernel-huge-5.14.5-x86_64-1.txz:  Upgraded.
a/kernel-modules-5.14.5-x86_64-1.txz:  Upgraded.
d/kernel-headers-5.14.5-x86-1.txz:  Upgraded.
k/kernel-source-5.14.5-noarch-1.txz:  Upgraded.
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.

marav · 09-17-2021, 01:50 AM

11 updates. Including a (* Security fix *)! : 9 upgraded, 2 rebuilt

Code:

Fri Sep 17 04:17:57 UTC 2021
a/cryptsetup-2.4.1-x86_64-1.txz:  Upgraded.
a/sysvinit-scripts-15.0-noarch-5.txz:  Rebuilt.
  Stop D-Bus after NFS partitions are unmounted to avoid a hang.
  Thanks to vulcan59 and bassmadrigal.
ap/sudo-1.9.8p1-x86_64-1.txz:  Upgraded.
l/fftw-3.3.10-x86_64-1.txz:  Upgraded.
l/libxkbcommon-1.3.1-x86_64-1.txz:  Upgraded.
l/pipewire-0.3.36-x86_64-1.txz:  Upgraded.
n/dhcpcd-9.4.0-x86_64-2.txz:  Rebuilt.
  Applied upstream patch:
  DHCP6: Only send FQDN for SOLICIT, REQUEST, RENEW, or REBIND messages.
  Thanks to marav.
n/httpd-2.4.49-x86_64-1.txz:  Upgraded.
  This release contains security fixes and improvements.
  mod_proxy: Server Side Request Forgery (SSRF) vulnerabilty [Yann Ylavic]
  core: ap_escape_quotes buffer overflow
  mod_proxy_uwsgi: Out of bound read vulnerability [Yann Ylavic]
  core: null pointer dereference on malformed request
  mod_http2: Request splitting vulnerability with mod_proxy [Stefan Eissing]
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvenam...CVE-2021-40438
    https://cve.mitre.org/cgi-bin/cvenam...CVE-2021-39275
    https://cve.mitre.org/cgi-bin/cvenam...CVE-2021-36160
    https://cve.mitre.org/cgi-bin/cvenam...CVE-2021-34798
    https://cve.mitre.org/cgi-bin/cvenam...CVE-2021-33193
  (* Security fix *)
x/ibus-libpinyin-1.12.1-x86_64-1.txz:  Upgraded.
x/libpinyin-2.6.1-x86_64-1.txz:  Upgraded.
xap/mozilla-thunderbird-91.1.1-x86_64-1.txz:  Upgraded.
  This is a bugfix release.
  For more information, see:
    https://www.mozilla.org/en-US/thunde.../releasenotes/

marav · 09-17-2021, 12:41 PM

4 updates : 2 upgraded, 2 rebuilt

Code:

Fri Sep 17 17:22:57 UTC 2021
kde/plasma-workspace-5.22.5-x86_64-2.txz:  Rebuilt.
  Patched to fix USB storage devices detected only once per session.
  Thanks to ctrlaltca.
n/NetworkManager-1.32.10-x86_64-4.txz:  Rebuilt.
  Patched to shut down dhcpcd gracefully, and restored dhcpcd as the default
  client when using NetworkManager on Slackware. In this case I'll swim
  upstream if it means better security. Who knows what your DHCP server might
  attempt when it comes to public WiFi? :-)
  Thanks to Roy Marples and marav.
n/gnupg2-2.2.31-x86_64-1.txz:  Upgraded.
xap/pidgin-2.14.7-x86_64-1.txz:  Upgraded.

ZhaoLin1457 · 09-17-2021, 01:07 PM

Quote:

In this case I'll swim upstream if it means better security. Who knows what your DHCP server might attempt when it comes to public WiFi? :-)

Good question! Thanks, Mr. Volkerding!

marav · 09-18-2021, 07:38 PM

13 updates : 9 upgraded, 4 rebuilt

Code:

Sun Sep 19 00:13:58 UTC 2021
a/kernel-generic-5.14.6-x86_64-1.txz:  Upgraded.
a/kernel-huge-5.14.6-x86_64-1.txz:  Upgraded.
a/kernel-modules-5.14.6-x86_64-1.txz:  Upgraded.
ap/mpg123-1.29.0-x86_64-2.txz:  Rebuilt.
  Add ../lib64/mpg123 to the module search path. Thanks to Pithium.
d/kernel-headers-5.14.6-x86-1.txz:  Upgraded.
k/kernel-source-5.14.6-noarch-1.txz:  Upgraded.
  PINCTRL_CANNONLAKE n -> m
  Thanks to bassmadrigal.
kde/kstars-3.5.5-x86_64-1.txz:  Upgraded.
l/libcap-2.58-x86_64-1.txz:  Upgraded.
n/bind-9.16.21-x86_64-2.txz:  Rebuilt.
  rc.bind: make sure /etc/rndc.key has correct ownership. Thanks to marav.
xfce/thunar-4.16.10-x86_64-1.txz:  Upgraded.
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.

marav · 09-19-2021, 02:09 PM

6 updates : 5 upgraded, 1 rebuilt

Code:

Sun Sep 19 18:57:24 UTC 2021
a/kernel-firmware-20210919_d526e04-noarch-1.txz:  Upgraded.
l/gd-2.3.3-x86_64-2.txz:  Rebuilt.
  Applied upstream patch to restore macros used while building PHP.
  Thanks to nobodino.
l/gjs-1.68.4-x86_64-1.txz:  Upgraded.
l/imagemagick-7.1.0_8-x86_64-1.txz:  Upgraded.
l/python-charset-normalizer-2.0.6-x86_64-1.txz:  Upgraded.
xfce/xfce4-whiskermenu-plugin-2.6.0-x86_64-1.txz:  Upgraded.

marav · 09-20-2021, 02:05 PM

9 updates : 9 upgraded

Code:

Mon Sep 20 18:49:19 UTC 2021
a/acpid-2.0.33-x86_64-1.txz:  Upgraded.
n/nghttp2-1.45.0-x86_64-1.txz:  Upgraded.
n/samba-4.15.0-x86_64-1.txz:  Upgraded.
x/libXi-1.8-x86_64-1.txz:  Upgraded.
x/libva-2.13.0-x86_64-1.txz:  Upgraded.
  Build with enable_va_messaging=false to avoid console spam. Thanks to GazL.
x/wayland-protocols-1.23-noarch-1.txz:  Upgraded.
x/xf86-input-libinput-1.2.0-x86_64-1.txz:  Upgraded.
x/xorgproto-2021.5-x86_64-1.txz:  Upgraded.
xap/pan-0.147-x86_64-1.txz:  Upgraded.

cwizardone · 09-20-2021, 03:11 PM

Quote:

xf86-input-libinput-1.2.0-x86_64-1.txz

FWIW, The above "upgrade" killed both the keyboard and mouse (trackpad) in X in KDE and Xfce. Once replaced with an older version, everything went back to "normal."

cwizardone · 09-20-2021, 03:12 PM

Oops. Duplicate. Admin. please delete.

marav · 09-20-2021, 03:33 PM

Quote:

Originally Posted by cwizardone

FWIW, The above "upgrade" killed both the keyboard and mouse (trackpad) in X in KDE and Xfce. Once replaced with an older version, everything went back to "normal."

No trouble here

Code:

[    12.727] (II) LoadModule: "libinput"
[    12.728] (II) Loading /usr/lib64/xorg/modules/input/libinput_drv.so
[    12.730] (II) Module libinput: vendor="X.Org Foundation"
[    12.730]    compiled for 1.20.13, module version = 1.2.0
[    12.730]    Module class: X.Org XInput Driver
[    12.730]    ABI class: X.Org XInput driver, version 24.1

Code:

[    13.048] (II) Using input driver 'libinput' for 'AT Translated Set 2 keyboard'
[    13.048] (**) AT Translated Set 2 keyboard: always reports core events
[    13.048] (**) Option "Device" "/dev/input/event0"
[    13.048] (**) Option "_source" "server/udev"
[    13.049] (II) event0  - AT Translated Set 2 keyboard: is tagged by udev as: Keyboard

in /var/log/Xorg.0.log