From 585883b9b5ec51fd1a9d4729c3e2a20c5c928eae Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Sat, 7 Jan 2023 01:50:00 +0000 Subject: Sat Jan 7 01:50:00 UTC 2023 extra/php80/php80-8.0.27-x86_64-1_slack15.0.txz: Upgraded. This update fixes a security issue: PDO::quote() may return unquoted string. For more information, see: https://www.cve.org/CVERecord?id=CVE-2022-31631 (* Security fix *) extra/php81/php81-8.1.14-x86_64-1_slack15.0.txz: Upgraded. This update fixes bugs and a security issue: PDO::quote() may return unquoted string. For more information, see: https://www.cve.org/CVERecord?id=CVE-2022-31631 (* Security fix *) patches/packages/mozilla-nss-3.87-x86_64-1_slack15.0.txz: Upgraded. Fixed memory corruption in NSS via DER-encoded DSA and RSA-PSS signatures. For more information, see: https://www.mozilla.org/en-US/security/advisories/mfsa2021-51/ https://www.cve.org/CVERecord?id=CVE-2021-43527 (* Security fix *) patches/packages/php-7.4.33-x86_64-2_slack15.0.txz: Rebuilt. This update fixes a security issue: PDO::quote() may return unquoted string. For more information, see: https://www.cve.org/CVERecord?id=CVE-2022-31631 (* Security fix *) --- ChangeLog.rss | 38 +++++++- ChangeLog.txt | 26 ++++++ FILELIST.TXT | 104 ++++++++++----------- extra/source/php80/fetch-php.sh | 4 +- extra/source/php81/fetch-php.sh | 4 +- .../mozilla-nss-3.84-x86_64-1_slack15.0.txt | 11 --- .../mozilla-nss-3.87-x86_64-1_slack15.0.txt | 11 +++ patches/packages/php-7.4.33-x86_64-1_slack15.0.txt | 11 --- patches/packages/php-7.4.33-x86_64-2_slack15.0.txt | 11 +++ patches/source/mozilla-nss/CVE-2022-3479.patch | 23 ----- patches/source/mozilla-nss/mozilla-nss.SlackBuild | 5 +- patches/source/php/CVE-2022-31631.patch | 50 ++++++++++ patches/source/php/php.SlackBuild | 8 +- recompress.sh | 2 +- 14 files changed, 198 insertions(+), 110 deletions(-) delete mode 100644 patches/packages/mozilla-nss-3.84-x86_64-1_slack15.0.txt create mode 100644 patches/packages/mozilla-nss-3.87-x86_64-1_slack15.0.txt delete mode 100644 patches/packages/php-7.4.33-x86_64-1_slack15.0.txt create mode 100644 patches/packages/php-7.4.33-x86_64-2_slack15.0.txt delete mode 100644 patches/source/mozilla-nss/CVE-2022-3479.patch create mode 100644 patches/source/php/CVE-2022-31631.patch diff --git a/ChangeLog.rss b/ChangeLog.rss index 22914fd4a..08ea901e7 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,9 +11,43 @@ Tracking Slackware development in git. en-us urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f - Thu, 5 Jan 2023 03:09:24 GMT - Fri, 6 Jan 2023 12:30:12 GMT + Sat, 7 Jan 2023 01:50:00 GMT + Sat, 7 Jan 2023 12:30:16 GMT maintain_current_git.sh v 1.17 + + Sat, 7 Jan 2023 01:50:00 GMT + Sat, 7 Jan 2023 01:50:00 GMT + https://git.slackware.nl/current/tag/?h=20230107015000 + 20230107015000 + + +extra/php80/php80-8.0.27-x86_64-1_slack15.0.txz: Upgraded. + This update fixes a security issue: + PDO::quote() may return unquoted string. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2022-31631 + (* Security fix *) +extra/php81/php81-8.1.14-x86_64-1_slack15.0.txz: Upgraded. + This update fixes bugs and a security issue: + PDO::quote() may return unquoted string. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2022-31631 + (* Security fix *) +patches/packages/mozilla-nss-3.87-x86_64-1_slack15.0.txz: Upgraded. + Fixed memory corruption in NSS via DER-encoded DSA and RSA-PSS signatures. + For more information, see: + https://www.mozilla.org/en-US/security/advisories/mfsa2021-51/ + https://www.cve.org/CVERecord?id=CVE-2021-43527 + (* Security fix *) +patches/packages/php-7.4.33-x86_64-2_slack15.0.txz: Rebuilt. + This update fixes a security issue: + PDO::quote() may return unquoted string. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2022-31631 + (* Security fix *) + ]]> + + Thu, 5 Jan 2023 03:09:24 GMT Thu, 5 Jan 2023 03:09:24 GMT diff --git a/ChangeLog.txt b/ChangeLog.txt index 652ad8146..83d0fe881 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,29 @@ +Sat Jan 7 01:50:00 UTC 2023 +extra/php80/php80-8.0.27-x86_64-1_slack15.0.txz: Upgraded. + This update fixes a security issue: + PDO::quote() may return unquoted string. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2022-31631 + (* Security fix *) +extra/php81/php81-8.1.14-x86_64-1_slack15.0.txz: Upgraded. + This update fixes bugs and a security issue: + PDO::quote() may return unquoted string. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2022-31631 + (* Security fix *) +patches/packages/mozilla-nss-3.87-x86_64-1_slack15.0.txz: Upgraded. + Fixed memory corruption in NSS via DER-encoded DSA and RSA-PSS signatures. + For more information, see: + https://www.mozilla.org/en-US/security/advisories/mfsa2021-51/ + https://www.cve.org/CVERecord?id=CVE-2021-43527 + (* Security fix *) +patches/packages/php-7.4.33-x86_64-2_slack15.0.txz: Rebuilt. + This update fixes a security issue: + PDO::quote() may return unquoted string. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2022-31631 + (* Security fix *) ++--------------------------+ Thu Jan 5 03:09:24 UTC 2023 patches/packages/vim-9.0.1146-x86_64-1_slack15.0.txz: Upgraded. Fixed security issues: diff --git a/FILELIST.TXT b/FILELIST.TXT index 3d4d57d34..c86d87beb 100644 --- a/FILELIST.TXT +++ b/FILELIST.TXT @@ -1,20 +1,20 @@ -Thu Jan 5 03:12:44 UTC 2023 +Sat Jan 7 01:51:05 UTC 2023 Here is the file list for this directory. If you are using a mirror site and find missing or extra files in the disk subdirectories, please have the archive administrator refresh the mirror. -drwxr-xr-x 12 root root 4096 2023-01-05 03:09 . +drwxr-xr-x 12 root root 4096 2023-01-07 01:50 . -rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0 -rw-r--r-- 1 root root 16609 2022-03-30 19:03 ./CHANGES_AND_HINTS.TXT --rw-r--r-- 1 root root 1167442 2023-01-04 02:23 ./CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2023-01-04 02:23 ./CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 1167521 2023-01-07 01:41 ./CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2023-01-07 01:41 ./CHECKSUMS.md5.asc -rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING -rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3 -rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT -rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT --rw-r--r-- 1 root root 1972587 2023-01-05 03:09 ./ChangeLog.txt +-rw-r--r-- 1 root root 1973700 2023-01-07 01:50 ./ChangeLog.txt drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi @@ -25,7 +25,7 @@ drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh -rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg -rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg --rw-r--r-- 1 root root 1524862 2023-01-04 02:23 ./FILELIST.TXT +-rw-r--r-- 1 root root 1524958 2023-01-07 01:41 ./FILELIST.TXT -rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY -rw-r--r-- 1 root root 864745 2022-02-02 08:25 ./PACKAGES.TXT -rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT @@ -39,12 +39,12 @@ drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rw-r--r-- 1 root root 17294 2008-12-08 18:13 ./SPEAK_INSTALL.TXT -rw-r--r-- 1 root root 57187 2022-02-01 19:37 ./Slackware-HOWTO -rw-r--r-- 1 root root 8700 2022-01-26 05:44 ./UPGRADE.TXT -drwxr-xr-x 19 root root 4096 2022-10-31 23:35 ./extra --rw-r--r-- 1 root root 49773 2022-10-31 23:35 ./extra/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2022-10-31 23:35 ./extra/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 62643 2022-10-31 23:35 ./extra/FILE_LIST --rw-r--r-- 1 root root 1763787 2022-10-31 23:35 ./extra/MANIFEST.bz2 --rw-r--r-- 1 root root 36556 2022-10-31 23:35 ./extra/PACKAGES.TXT +drwxr-xr-x 19 root root 4096 2023-01-07 01:41 ./extra +-rw-r--r-- 1 root root 49773 2023-01-07 01:41 ./extra/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2023-01-07 01:41 ./extra/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 62643 2023-01-07 01:41 ./extra/FILE_LIST +-rw-r--r-- 1 root root 1764212 2023-01-07 01:41 ./extra/MANIFEST.bz2 +-rw-r--r-- 1 root root 36556 2023-01-07 01:41 ./extra/PACKAGES.TXT -rw-r--r-- 1 root root 149 2002-02-09 00:18 ./extra/README.TXT drwxr-xr-x 2 root root 20480 2020-05-26 20:38 ./extra/aspell-word-lists -rw-r--r-- 1 root root 171 2016-06-06 20:10 ./extra/aspell-word-lists/aspell-af-0.50_0-x86_64-5.txt @@ -348,14 +348,14 @@ drwxr-xr-x 2 root root 4096 2018-02-27 06:13 ./extra/google-chrome -rwxr-xr-x 1 root root 4168 2019-09-18 22:18 ./extra/google-chrome/google-chrome.SlackBuild -rw-r--r-- 1 root root 840 2018-02-27 06:13 ./extra/google-chrome/slack-desc lrwxrwxrwx 1 root root 11 2012-07-30 20:41 ./extra/java -> source/java -drwxr-xr-x 2 root root 4096 2022-10-31 23:35 ./extra/php80 --rw-r--r-- 1 root root 369 2022-10-31 23:23 ./extra/php80/php80-8.0.25-x86_64-1_slack15.0.txt --rw-r--r-- 1 root root 6161820 2022-10-31 23:23 ./extra/php80/php80-8.0.25-x86_64-1_slack15.0.txz --rw-r--r-- 1 root root 163 2022-10-31 23:23 ./extra/php80/php80-8.0.25-x86_64-1_slack15.0.txz.asc -drwxr-xr-x 2 root root 4096 2022-10-31 23:35 ./extra/php81 --rw-r--r-- 1 root root 369 2022-10-31 23:26 ./extra/php81/php81-8.1.12-x86_64-1_slack15.0.txt --rw-r--r-- 1 root root 6289580 2022-10-31 23:26 ./extra/php81/php81-8.1.12-x86_64-1_slack15.0.txz --rw-r--r-- 1 root root 163 2022-10-31 23:26 ./extra/php81/php81-8.1.12-x86_64-1_slack15.0.txz.asc +drwxr-xr-x 2 root root 4096 2023-01-07 01:41 ./extra/php80 +-rw-r--r-- 1 root root 369 2023-01-06 20:04 ./extra/php80/php80-8.0.27-x86_64-1_slack15.0.txt +-rw-r--r-- 1 root root 6164516 2023-01-06 20:04 ./extra/php80/php80-8.0.27-x86_64-1_slack15.0.txz +-rw-r--r-- 1 root root 163 2023-01-06 20:04 ./extra/php80/php80-8.0.27-x86_64-1_slack15.0.txz.asc +drwxr-xr-x 2 root root 4096 2023-01-07 01:41 ./extra/php81 +-rw-r--r-- 1 root root 369 2023-01-06 20:01 ./extra/php81/php81-8.1.14-x86_64-1_slack15.0.txt +-rw-r--r-- 1 root root 6284408 2023-01-06 20:01 ./extra/php81/php81-8.1.14-x86_64-1_slack15.0.txz +-rw-r--r-- 1 root root 163 2023-01-06 20:01 ./extra/php81/php81-8.1.14-x86_64-1_slack15.0.txz.asc drwxr-xr-x 2 root root 4096 2022-09-06 20:26 ./extra/rust-for-mozilla -rw-r--r-- 1 root root 700 2022-01-27 20:31 ./extra/rust-for-mozilla/README -rw-r--r-- 1 root root 426 2022-09-03 04:36 ./extra/rust-for-mozilla/rust-1.60.0-x86_64-1_slack15.0.txt @@ -369,7 +369,7 @@ drwxr-xr-x 2 root root 4096 2022-08-30 19:42 ./extra/sendmail -rw-r--r-- 1 root root 586 2022-08-30 18:26 ./extra/sendmail/sendmail-cf-8.17.1-noarch-4_slack15.0.txt -rw-r--r-- 1 root root 118912 2022-08-30 18:26 ./extra/sendmail/sendmail-cf-8.17.1-noarch-4_slack15.0.txz -rw-r--r-- 1 root root 163 2022-08-30 18:26 ./extra/sendmail/sendmail-cf-8.17.1-noarch-4_slack15.0.txz.asc -drwxr-xr-x 17 root root 4096 2022-10-31 23:30 ./extra/source +drwxr-xr-x 17 root root 4096 2023-01-07 01:36 ./extra/source lrwxrwxrwx 1 root root 21 2021-04-29 18:18 ./extra/source/alpine -> ../../source/n/alpine drwxr-xr-x 4 root root 4096 2018-11-09 05:59 ./extra/source/aspell-word-lists -rwxr-xr-x 1 root root 3531 2020-05-26 20:06 ./extra/source/aspell-word-lists/aspell-dict.SlackBuild @@ -566,23 +566,23 @@ drwxr-xr-x 2 root root 4096 2012-07-30 18:44 ./extra/source/java/profile.d -rwxr-xr-x 1 root root 80 2019-07-30 16:57 ./extra/source/java/profile.d/jre.sh -rw-r--r-- 1 root root 817 2018-02-27 06:13 ./extra/source/java/slack-desc.jdk -rw-r--r-- 1 root root 861 2018-02-27 06:13 ./extra/source/java/slack-desc.jre -drwxr-xr-x 2 root root 4096 2022-10-31 21:08 ./extra/source/php80 +drwxr-xr-x 2 root root 4096 2023-01-06 19:57 ./extra/source/php80 -rw-r--r-- 1 root root 432 2020-12-21 16:28 ./extra/source/php80/doinst.sh.gz --rwxr-xr-x 1 root root 120 2022-10-31 20:59 ./extra/source/php80/fetch-php.sh +-rwxr-xr-x 1 root root 120 2023-01-06 19:40 ./extra/source/php80/fetch-php.sh -rw-r--r-- 1 root root 1020 2021-02-19 20:43 ./extra/source/php80/mod_php.conf.example --rw-r--r-- 1 root root 10802888 2022-10-25 17:50 ./extra/source/php80/php-8.0.25.tar.xz --rw-r--r-- 1 root root 866 2022-10-25 17:50 ./extra/source/php80/php-8.0.25.tar.xz.asc +-rw-r--r-- 1 root root 10802096 2023-01-03 19:30 ./extra/source/php80/php-8.0.27.tar.xz +-rw-r--r-- 1 root root 866 2023-01-03 19:30 ./extra/source/php80/php-8.0.27.tar.xz.asc -rw-r--r-- 1 root root 387 2017-11-28 02:08 ./extra/source/php80/php-fpm.conf.diff.gz -rw-r--r-- 1 root root 605 2020-03-17 21:22 ./extra/source/php80/php.imap.api.diff.gz -rw-r--r-- 1 root root 805 2020-05-12 19:14 ./extra/source/php80/php.ini-development.diff.gz -rwxr-xr-x 1 root root 10642 2022-02-18 04:51 ./extra/source/php80/php80.SlackBuild -rw-r--r-- 1 root root 822 2021-12-03 05:20 ./extra/source/php80/slack-desc -drwxr-xr-x 2 root root 4096 2022-10-31 21:08 ./extra/source/php81 +drwxr-xr-x 2 root root 4096 2023-01-06 19:58 ./extra/source/php81 -rw-r--r-- 1 root root 432 2020-12-21 16:28 ./extra/source/php81/doinst.sh.gz --rwxr-xr-x 1 root root 120 2022-10-31 20:59 ./extra/source/php81/fetch-php.sh +-rwxr-xr-x 1 root root 120 2023-01-06 19:46 ./extra/source/php81/fetch-php.sh -rw-r--r-- 1 root root 1020 2021-02-19 20:43 ./extra/source/php81/mod_php.conf.example --rw-r--r-- 1 root root 11747176 2022-10-25 17:50 ./extra/source/php81/php-8.1.12.tar.xz --rw-r--r-- 1 root root 833 2022-10-25 17:50 ./extra/source/php81/php-8.1.12.tar.xz.asc +-rw-r--r-- 1 root root 11752004 2023-01-04 18:20 ./extra/source/php81/php-8.1.14.tar.xz +-rw-r--r-- 1 root root 833 2023-01-04 18:20 ./extra/source/php81/php-8.1.14.tar.xz.asc -rw-r--r-- 1 root root 387 2017-11-28 02:08 ./extra/source/php81/php-fpm.conf.diff.gz -rw-r--r-- 1 root root 605 2020-03-17 21:22 ./extra/source/php81/php.imap.api.diff.gz -rw-r--r-- 1 root root 806 2021-11-29 19:09 ./extra/source/php81/php.ini-development.diff.gz @@ -738,13 +738,13 @@ drwxr-xr-x 2 root root 4096 2008-05-07 05:21 ./pasture/source/php/pear -rwxr-xr-x 1 root root 9448 2018-05-16 22:38 ./pasture/source/php/php.SlackBuild -rw-r--r-- 1 root root 775 2017-07-07 19:25 ./pasture/source/php/php.ini-development.diff.gz -rw-r--r-- 1 root root 830 2005-12-09 05:18 ./pasture/source/php/slack-desc -drwxr-xr-x 4 root root 4096 2023-01-05 03:12 ./patches --rw-r--r-- 1 root root 61893 2023-01-05 03:12 ./patches/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2023-01-05 03:12 ./patches/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 83378 2023-01-05 03:12 ./patches/FILE_LIST --rw-r--r-- 1 root root 11936802 2023-01-05 03:12 ./patches/MANIFEST.bz2 --rw-r--r-- 1 root root 44325 2023-01-05 03:12 ./patches/PACKAGES.TXT -drwxr-xr-x 3 root root 20480 2023-01-05 03:12 ./patches/packages +drwxr-xr-x 4 root root 4096 2023-01-07 01:51 ./patches +-rw-r--r-- 1 root root 61886 2023-01-07 01:51 ./patches/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2023-01-07 01:51 ./patches/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 83371 2023-01-07 01:51 ./patches/FILE_LIST +-rw-r--r-- 1 root root 11944724 2023-01-07 01:51 ./patches/MANIFEST.bz2 +-rw-r--r-- 1 root root 44325 2023-01-07 01:51 ./patches/PACKAGES.TXT +drwxr-xr-x 3 root root 20480 2023-01-07 01:50 ./patches/packages -rw-r--r-- 1 root root 327 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txt -rw-r--r-- 1 root root 10716 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz -rw-r--r-- 1 root root 163 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz.asc @@ -857,9 +857,9 @@ drwxr-xr-x 2 root root 4096 2022-11-29 21:00 ./patches/packages/linux-5.15 -rw-r--r-- 1 root root 570 2022-12-12 19:41 ./patches/packages/mozilla-firefox-102.6.0esr-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 59238024 2022-12-12 19:41 ./patches/packages/mozilla-firefox-102.6.0esr-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-12-12 19:41 ./patches/packages/mozilla-firefox-102.6.0esr-x86_64-1_slack15.0.txz.asc --rw-r--r-- 1 root root 564 2022-11-03 19:45 ./patches/packages/mozilla-nss-3.84-x86_64-1_slack15.0.txt --rw-r--r-- 1 root root 1839996 2022-11-03 19:45 ./patches/packages/mozilla-nss-3.84-x86_64-1_slack15.0.txz --rw-r--r-- 1 root root 163 2022-11-03 19:45 ./patches/packages/mozilla-nss-3.84-x86_64-1_slack15.0.txz.asc +-rw-r--r-- 1 root root 564 2023-01-06 19:37 ./patches/packages/mozilla-nss-3.87-x86_64-1_slack15.0.txt +-rw-r--r-- 1 root root 1838968 2023-01-06 19:37 ./patches/packages/mozilla-nss-3.87-x86_64-1_slack15.0.txz +-rw-r--r-- 1 root root 163 2023-01-06 19:37 ./patches/packages/mozilla-nss-3.87-x86_64-1_slack15.0.txz.asc -rw-r--r-- 1 root root 663 2022-12-21 20:19 ./patches/packages/mozilla-thunderbird-102.6.1-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 56200512 2022-12-21 20:19 ./patches/packages/mozilla-thunderbird-102.6.1-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-12-21 20:19 ./patches/packages/mozilla-thunderbird-102.6.1-x86_64-1_slack15.0.txz.asc @@ -875,9 +875,9 @@ drwxr-xr-x 2 root root 4096 2022-11-29 21:00 ./patches/packages/linux-5.15 -rw-r--r-- 1 root root 544 2022-07-25 18:03 ./patches/packages/perl-5.34.0-x86_64-2_slack15.0.txt -rw-r--r-- 1 root root 17057236 2022-07-25 18:03 ./patches/packages/perl-5.34.0-x86_64-2_slack15.0.txz -rw-r--r-- 1 root root 163 2022-07-25 18:03 ./patches/packages/perl-5.34.0-x86_64-2_slack15.0.txz.asc --rw-r--r-- 1 root root 345 2022-11-10 19:20 ./patches/packages/php-7.4.33-x86_64-1_slack15.0.txt --rw-r--r-- 1 root root 5822284 2022-11-10 19:20 ./patches/packages/php-7.4.33-x86_64-1_slack15.0.txz --rw-r--r-- 1 root root 163 2022-11-10 19:20 ./patches/packages/php-7.4.33-x86_64-1_slack15.0.txz.asc +-rw-r--r-- 1 root root 345 2023-01-06 20:06 ./patches/packages/php-7.4.33-x86_64-2_slack15.0.txt +-rw-r--r-- 1 root root 5824740 2023-01-06 20:06 ./patches/packages/php-7.4.33-x86_64-2_slack15.0.txz +-rw-r--r-- 1 root root 163 2023-01-06 20:06 ./patches/packages/php-7.4.33-x86_64-2_slack15.0.txz.asc -rw-r--r-- 1 root root 457 2022-06-04 18:23 ./patches/packages/pidgin-2.14.10-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 5828060 2022-06-04 18:23 ./patches/packages/pidgin-2.14.10-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-06-04 18:23 ./patches/packages/pidgin-2.14.10-x86_64-1_slack15.0.txz.asc @@ -956,7 +956,7 @@ drwxr-xr-x 2 root root 4096 2022-11-29 21:00 ./patches/packages/linux-5.15 -rw-r--r-- 1 root root 388 2022-10-15 04:05 ./patches/packages/zlib-1.2.13-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 105356 2022-10-15 04:05 ./patches/packages/zlib-1.2.13-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-10-15 04:05 ./patches/packages/zlib-1.2.13-x86_64-1_slack15.0.txz.asc -drwxr-xr-x 62 root root 4096 2023-01-05 03:06 ./patches/source +drwxr-xr-x 62 root root 4096 2023-01-07 01:47 ./patches/source drwxr-xr-x 2 root root 4096 2022-01-16 05:07 ./patches/source/aaa_base -rw-r--r-- 1 root root 11041 2022-02-15 04:49 ./patches/source/aaa_base/_aaa_base.tar.gz -rwxr-xr-x 1 root root 3894 2022-02-15 05:07 ./patches/source/aaa_base/aaa_base.SlackBuild @@ -1281,15 +1281,14 @@ drwxr-xr-x 2 root root 4096 2022-12-14 19:04 ./patches/source/mozilla-fire -rwxr-xr-x 1 root root 16087 2022-09-06 02:02 ./patches/source/mozilla-firefox/mozilla-firefox.SlackBuild -rw-r--r-- 1 root root 2748 2017-12-04 21:30 ./patches/source/mozilla-firefox/mozilla-firefox.desktop -rw-r--r-- 1 root root 1033 2020-07-07 18:08 ./patches/source/mozilla-firefox/slack-desc -drwxr-xr-x 2 root root 4096 2022-11-03 19:32 ./patches/source/mozilla-nss --rw-r--r-- 1 root root 418 2022-11-03 19:26 ./patches/source/mozilla-nss/CVE-2022-3479.patch.gz +drwxr-xr-x 2 root root 4096 2023-01-06 19:30 ./patches/source/mozilla-nss -rw-r--r-- 1 root root 25755 2008-02-27 08:35 ./patches/source/mozilla-nss/MPL-1.1.txt -rw-r--r-- 1 root root 18152 2009-01-01 08:10 ./patches/source/mozilla-nss/faq.html -rw-r--r-- 1 root root 17987 2007-06-28 20:04 ./patches/source/mozilla-nss/gpl-2.0.txt -rw-r--r-- 1 root root 26434 2009-04-08 16:39 ./patches/source/mozilla-nss/lgpl-2.1.txt --rwxr-xr-- 1 root root 6116 2022-11-03 19:40 ./patches/source/mozilla-nss/mozilla-nss.SlackBuild +-rwxr-xr-- 1 root root 6057 2023-01-06 19:36 ./patches/source/mozilla-nss/mozilla-nss.SlackBuild -rw-r--r-- 1 root root 719372 2022-09-12 12:54 ./patches/source/mozilla-nss/nspr-4.35.tar.lz --rw-r--r-- 1 root root 55116439 2022-10-13 15:40 ./patches/source/mozilla-nss/nss-3.84.tar.lz +-rw-r--r-- 1 root root 37770371 2023-01-05 18:00 ./patches/source/mozilla-nss/nss-3.87.tar.lz -rw-r--r-- 1 root root 2488 2012-04-29 21:05 ./patches/source/mozilla-nss/nss-config.in -rw-r--r-- 1 root root 1023 2018-02-27 06:12 ./patches/source/mozilla-nss/slack-desc drwxr-xr-x 4 root root 4096 2022-12-21 19:08 ./patches/source/mozilla-thunderbird @@ -1368,14 +1367,15 @@ drwxr-xr-x 2 root root 4096 2022-07-25 17:58 ./patches/source/perl -rwxr-xr-x 1 root root 18123 2022-07-25 17:58 ./patches/source/perl/perl.SlackBuild -rw-r--r-- 1 root root 606 2008-09-21 00:04 ./patches/source/perl/perl.configure.multilib.patch.gz -rw-r--r-- 1 root root 996 2021-05-21 04:51 ./patches/source/perl/slack-desc -drwxr-xr-x 2 root root 4096 2022-11-10 19:18 ./patches/source/php +drwxr-xr-x 2 root root 4096 2023-01-06 19:52 ./patches/source/php +-rw-r--r-- 1 root root 961 2023-01-06 19:52 ./patches/source/php/CVE-2022-31631.patch.gz -rw-r--r-- 1 root root 432 2020-12-21 16:28 ./patches/source/php/doinst.sh.gz -rwxr-xr-x 1 root root 120 2022-11-10 19:17 ./patches/source/php/fetch-php.sh -rw-r--r-- 1 root root 1022 2017-11-28 18:32 ./patches/source/php/mod_php.conf.example -rw-r--r-- 1 root root 10420144 2022-10-31 15:10 ./patches/source/php/php-7.4.33.tar.xz -rw-r--r-- 1 root root 833 2022-10-31 15:10 ./patches/source/php/php-7.4.33.tar.xz.asc -rw-r--r-- 1 root root 387 2017-11-28 02:08 ./patches/source/php/php-fpm.conf.diff.gz --rwxr-xr-x 1 root root 10805 2022-02-18 04:53 ./patches/source/php/php.SlackBuild +-rwxr-xr-x 1 root root 10878 2023-01-06 19:56 ./patches/source/php/php.SlackBuild -rw-r--r-- 1 root root 855 2021-06-29 20:14 ./patches/source/php/php.enchant-2.patch.gz -rw-r--r-- 1 root root 605 2020-03-17 21:22 ./patches/source/php/php.imap.api.diff.gz -rw-r--r-- 1 root root 805 2020-05-12 19:14 ./patches/source/php/php.ini-development.diff.gz @@ -2737,7 +2737,7 @@ drwxr-xr-x 2 root root 69632 2022-02-01 08:29 ./slackware64/kde -rw-r--r-- 1 root root 163 2022-01-06 22:35 ./slackware64/kde/katomic-21.12.1-x86_64-1.txz.asc -rw-r--r-- 1 root root 303 2022-01-08 22:33 ./slackware64/kde/kauth-5.90.0-x86_64-1.txt -rw-r--r-- 1 root root 127260 2022-01-08 22:33 ./slackware64/kde/kauth-5.90.0-x86_64-1.txz --rw-r--r-- 1 root root 163 2022-01-08 22:33 ./slackware64/kde/kauth-5.90.0-x86_64-1.txz.asc +-rw-r--r-- 1 root root 163 2022-01-08 22:33 ./slackware64/kde/kauth-5.90.0-x86_64-1.txz.asc -rw-r--r-- 1 root root 457 2022-01-06 22:04 ./slackware64/kde/kbackup-21.12.1-x86_64-1.txt -rw-r--r-- 1 root root 497484 2022-01-06 22:04 ./slackware64/kde/kbackup-21.12.1-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-01-06 22:04 ./slackware64/kde/kbackup-21.12.1-x86_64-1.txz.asc @@ -5464,7 +5464,7 @@ drwxr-xr-x 2 root root 65536 2022-02-01 04:47 ./slackware64/x -rw-r--r-- 1 root root 13308 2021-02-13 13:20 ./slackware64/x/font-winitzki-cyrillic-1.0.3-noarch-5.txz -rw-r--r-- 1 root root 163 2021-02-13 13:20 ./slackware64/x/font-winitzki-cyrillic-1.0.3-noarch-5.txz.asc -rw-r--r-- 1 root root 451 2021-02-13 13:20 ./slackware64/x/font-xfree86-type1-1.0.4-noarch-5.txt --rw-r--r-- 1 root root 36448 2021-02-13 13:20 ./slackware64/x/font-xfree86-type1-1.0.4-noarch-5.txz +-rw-r--r-- 1 root root 36448 2021-02-13 13:20 ./slackware64/x/font-xfree86-type1-1.0.4-noarch-5.txz -rw-r--r-- 1 root root 163 2021-02-13 13:20 ./slackware64/x/font-xfree86-type1-1.0.4-noarch-5.txz.asc -rw-r--r-- 1 root root 385 2021-02-13 12:46 ./slackware64/x/fontconfig-2.13.92-x86_64-3.txt -rw-r--r-- 1 root root 318208 2021-02-13 12:46 ./slackware64/x/fontconfig-2.13.92-x86_64-3.txz @@ -15078,7 +15078,7 @@ drwxr-xr-x 2 root root 12288 2020-05-18 17:50 ./source/x/x11/slack-desc -rw-r--r-- 1 root root 633 2012-04-08 04:33 ./source/x/x11/slack-desc/xgc -rw-r--r-- 1 root root 673 2012-04-08 04:33 ./source/x/x11/slack-desc/xhost -rw-r--r-- 1 root root 867 2012-04-08 04:34 ./source/x/x11/slack-desc/xineramaproto --rw-r--r-- 1 root root 769 2018-02-26 23:01 ./source/x/x11/slack-desc/xinit +-rw-r--r-- 1 root root 769 2018-02-26 23:01 ./source/x/x11/slack-desc/xinit -rw-r--r-- 1 root root 952 2012-04-08 04:34 ./source/x/x11/slack-desc/xinput -rw-r--r-- 1 root root 875 2020-05-18 17:52 ./source/x/x11/slack-desc/xisxwayland -rw-r--r-- 1 root root 764 2012-04-08 04:35 ./source/x/x11/slack-desc/xkbcomp diff --git a/extra/source/php80/fetch-php.sh b/extra/source/php80/fetch-php.sh index f50b30fa7..180ebf3dd 100755 --- a/extra/source/php80/fetch-php.sh +++ b/extra/source/php80/fetch-php.sh @@ -1,2 +1,2 @@ -lftpget http://us.php.net/distributions/php-8.0.25.tar.xz.asc -lftpget http://us.php.net/distributions/php-8.0.25.tar.xz +lftpget http://us.php.net/distributions/php-8.0.27.tar.xz.asc +lftpget http://us.php.net/distributions/php-8.0.27.tar.xz diff --git a/extra/source/php81/fetch-php.sh b/extra/source/php81/fetch-php.sh index 43a99ae97..85ab582c3 100755 --- a/extra/source/php81/fetch-php.sh +++ b/extra/source/php81/fetch-php.sh @@ -1,2 +1,2 @@ -lftpget http://us.php.net/distributions/php-8.1.12.tar.xz.asc -lftpget http://us.php.net/distributions/php-8.1.12.tar.xz +lftpget http://us.php.net/distributions/php-8.1.14.tar.xz.asc +lftpget http://us.php.net/distributions/php-8.1.14.tar.xz diff --git a/patches/packages/mozilla-nss-3.84-x86_64-1_slack15.0.txt b/patches/packages/mozilla-nss-3.84-x86_64-1_slack15.0.txt deleted file mode 100644 index 9d2fe7086..000000000 --- a/patches/packages/mozilla-nss-3.84-x86_64-1_slack15.0.txt +++ /dev/null @@ -1,11 +0,0 @@ -mozilla-nss: mozilla-nss (Network Security Services) -mozilla-nss: -mozilla-nss: Network Security Services (NSS) is a set of libraries designed to -mozilla-nss: support cross-platform development of security-enabled client and -mozilla-nss: server applications. Applications built with NSS can support -mozilla-nss: SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, -mozilla-nss: X.509 v3 certificates, and other security standards. -mozilla-nss: -mozilla-nss: -mozilla-nss: Read http://www.mozilla.org/projects/security/pki/nss/overview.html -mozilla-nss: diff --git a/patches/packages/mozilla-nss-3.87-x86_64-1_slack15.0.txt b/patches/packages/mozilla-nss-3.87-x86_64-1_slack15.0.txt new file mode 100644 index 000000000..9d2fe7086 --- /dev/null +++ b/patches/packages/mozilla-nss-3.87-x86_64-1_slack15.0.txt @@ -0,0 +1,11 @@ +mozilla-nss: mozilla-nss (Network Security Services) +mozilla-nss: +mozilla-nss: Network Security Services (NSS) is a set of libraries designed to +mozilla-nss: support cross-platform development of security-enabled client and +mozilla-nss: server applications. Applications built with NSS can support +mozilla-nss: SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, +mozilla-nss: X.509 v3 certificates, and other security standards. +mozilla-nss: +mozilla-nss: +mozilla-nss: Read http://www.mozilla.org/projects/security/pki/nss/overview.html +mozilla-nss: diff --git a/patches/packages/php-7.4.33-x86_64-1_slack15.0.txt b/patches/packages/php-7.4.33-x86_64-1_slack15.0.txt deleted file mode 100644 index 88937e9e0..000000000 --- a/patches/packages/php-7.4.33-x86_64-1_slack15.0.txt +++ /dev/null @@ -1,11 +0,0 @@ -php: php (HTML-embedded scripting language) -php: -php: PHP is an HTML-embedded scripting language. It shares syntax -php: characteristics with C, Java, and Perl. The primary objective behind -php: this language is to make a fast and easy-to-use scripting language -php: for dynamic web sites. -php: -php: Homepage: https://www.php.net/ -php: -php: -php: diff --git a/patches/packages/php-7.4.33-x86_64-2_slack15.0.txt b/patches/packages/php-7.4.33-x86_64-2_slack15.0.txt new file mode 100644 index 000000000..88937e9e0 --- /dev/null +++ b/patches/packages/php-7.4.33-x86_64-2_slack15.0.txt @@ -0,0 +1,11 @@ +php: php (HTML-embedded scripting language) +php: +php: PHP is an HTML-embedded scripting language. It shares syntax +php: characteristics with C, Java, and Perl. The primary objective behind +php: this language is to make a fast and easy-to-use scripting language +php: for dynamic web sites. +php: +php: Homepage: https://www.php.net/ +php: +php: +php: diff --git a/patches/source/mozilla-nss/CVE-2022-3479.patch b/patches/source/mozilla-nss/CVE-2022-3479.patch deleted file mode 100644 index 5f80fdc09..000000000 --- a/patches/source/mozilla-nss/CVE-2022-3479.patch +++ /dev/null @@ -1,23 +0,0 @@ -diff --git a/lib/ssl/authcert.c b/lib/ssl/authcert.c ---- a/lib/ssl/authcert.c -+++ b/lib/ssl/authcert.c -@@ -212,17 +212,17 @@ NSS_GetClientAuthData(void *arg, - pw_arg); - } else { - int nnames = 0; - char **names = ssl_DistNamesToStrings(caNames, &nnames); - rv = CERT_FilterCertListByCANames(certList, nnames, names, - certUsageSSLClient); - ssl_FreeDistNamesStrings(names, nnames); - } -- if ((rv != SECSuccess) || CERT_LIST_EMPTY(certList)) { -+ if ((rv != SECSuccess) || (certList && CERT_LIST_EMPTY(certList))) { - CERT_DestroyCertList(certList); - certList = NULL; - } - } - if (certList == NULL) { - /* no user certs meeting the nickname/usage requirements found */ - return SECFailure; - } - diff --git a/patches/source/mozilla-nss/mozilla-nss.SlackBuild b/patches/source/mozilla-nss/mozilla-nss.SlackBuild index 34756cff5..ae1ed1e3e 100755 --- a/patches/source/mozilla-nss/mozilla-nss.SlackBuild +++ b/patches/source/mozilla-nss/mozilla-nss.SlackBuild @@ -1,6 +1,6 @@ #!/bin/bash # Copyright 2005, 2006, 2008, 2009, 2010, 2012 Eric Hameleers, Eindhoven, NL -# Copyright 2013, 2014, 2015, 2017, 2018, 2019, 2020 Patrick J. Volkerding, Sebeka, MN, USA +# Copyright 2013, 2014, 2015, 2017, 2018, 2019, 2020, 2023 Patrick J. Volkerding, Sebeka, MN, USA # All rights reserved. # # Permission to use, copy, modify, and distribute this software for @@ -26,7 +26,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=mozilla-nss SRCNAM=nss -VERSION=${VERSION:-3.84} +VERSION=${VERSION:-3.87} NSPR=${NSPR:-4.35} BUILD=${BUILD:-1_slack15.0} @@ -93,7 +93,6 @@ find . \ -exec chmod 644 {} \+ cd nss -zcat $CWD/CVE-2022-3479.patch.gz | patch -p1 --verbose || exit 1 ./build.sh -v $NUMJOBS --opt --system-sqlite --enable-libpkix --disable-tests cd - diff --git a/patches/source/php/CVE-2022-31631.patch b/patches/source/php/CVE-2022-31631.patch new file mode 100644 index 000000000..6aa309549 --- /dev/null +++ b/patches/source/php/CVE-2022-31631.patch @@ -0,0 +1,50 @@ +From 921b6813da3237a83e908998483f46ae3d8bacba Mon Sep 17 00:00:00 2001 +From: "Christoph M. Becker" +Date: Mon, 31 Oct 2022 17:20:23 +0100 +Subject: [PATCH] Fix #81740: PDO::quote() may return unquoted string + +`sqlite3_snprintf()` expects its first parameter to be `int`; we need +to avoid overflow. +--- + ext/pdo_sqlite/sqlite_driver.c | 3 +++ + ext/pdo_sqlite/tests/bug81740.phpt | 17 +++++++++++++++++ + 2 files changed, 20 insertions(+) + create mode 100644 ext/pdo_sqlite/tests/bug81740.phpt + +diff --git a/ext/pdo_sqlite/sqlite_driver.c b/ext/pdo_sqlite/sqlite_driver.c +index 4233ff10ff2e..5a72a1eda23f 100644 +--- a/ext/pdo_sqlite/sqlite_driver.c ++++ b/ext/pdo_sqlite/sqlite_driver.c +@@ -232,6 +232,9 @@ static char *pdo_sqlite_last_insert_id(pdo_dbh_t *dbh, const char *name, size_t + /* NB: doesn't handle binary strings... use prepared stmts for that */ + static int sqlite_handle_quoter(pdo_dbh_t *dbh, const char *unquoted, size_t unquotedlen, char **quoted, size_t *quotedlen, enum pdo_param_type paramtype ) + { ++ if (unquotedlen > (INT_MAX - 3) / 2) { ++ return 0; ++ } + *quoted = safe_emalloc(2, unquotedlen, 3); + sqlite3_snprintf(2*unquotedlen + 3, *quoted, "'%q'", unquoted); + *quotedlen = strlen(*quoted); +diff --git a/ext/pdo_sqlite/tests/bug81740.phpt b/ext/pdo_sqlite/tests/bug81740.phpt +new file mode 100644 +index 000000000000..99fb07c3048b +--- /dev/null ++++ b/ext/pdo_sqlite/tests/bug81740.phpt +@@ -0,0 +1,17 @@ ++--TEST-- ++Bug #81740 (PDO::quote() may return unquoted string) ++--SKIPIF-- ++ ++--INI-- ++memory_limit=-1 ++--FILE-- ++quote($string)); ++?> ++--EXPECT-- ++bool(false) diff --git a/patches/source/php/php.SlackBuild b/patches/source/php/php.SlackBuild index 518bb7ec6..8773717c8 100755 --- a/patches/source/php/php.SlackBuild +++ b/patches/source/php/php.SlackBuild @@ -3,7 +3,7 @@ # Build and package mod_php on Slackware. # by: David Cantrell # Modified for PHP 4-5 by volkerdi@slackware.com -# Copyright 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2015, 2017, 2019, 2020, 2021 Patrick Volkerding, Sebeka, MN, USA +# Copyright 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2015, 2017, 2019, 2020, 2021, 2023 Patrick Volkerding, Sebeka, MN, USA # All rights reserved. # # Redistribution and use of this script, with or without modification, is @@ -27,8 +27,8 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=php VERSION=${VERSION:-$(echo php-*.tar.xz | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -ALPINE=2.25 -BUILD=${BUILD:-1_slack15.0} +ALPINE=2.26 +BUILD=${BUILD:-2_slack15.0} # Automatically determine the architecture we're building on: if [ -z "$ARCH" ]; then @@ -127,6 +127,8 @@ rm -rf php-$VERSION tar xvf $CWD/php-$VERSION.tar.xz || exit 1 cd php-$VERSION || exit 1 +zcat $CWD/CVE-2022-31631.patch.gz | patch -p1 --verbose || exit 1 + # cleanup: find . -name "*.orig" -delete diff --git a/recompress.sh b/recompress.sh index 7a56fef65..a8be24efb 100755 --- a/recompress.sh +++ b/recompress.sh @@ -1258,12 +1258,12 @@ gzip ./patches/source/util-linux/adjtimex_1.29-2.2.diff gzip ./patches/source/util-linux/doinst.sh gzip ./patches/source/util-linux/ziptool-fix_build.patch gzip ./patches/source/flac/flac.man.diff -gzip ./patches/source/mozilla-nss/CVE-2022-3479.patch gzip ./patches/source/libtiff/patches/CVE-2022-2056_2057_2058.patch gzip ./patches/source/libtiff/patches/CVE-2022-34526.patch gzip ./patches/source/libtiff/patches/CVE-2022-3970.patch gzip ./patches/source/php/php-fpm.conf.diff gzip ./patches/source/php/php.enchant-2.patch +gzip ./patches/source/php/CVE-2022-31631.patch gzip ./patches/source/php/doinst.sh gzip ./patches/source/php/php.imap.api.diff gzip ./patches/source/php/php.ini-development.diff -- cgit v1.2.3-65-gdbad