Wed Sep 7 18:40:44 UTC 2022
a/eudev-3.2.11-i586-2.txz: Rebuilt.
rc.udev: removed stray backslashes before whitespace in grep patterns.
a/gawk-5.2.0-i586-2.txz: Rebuilt.
Applied 0001-Add-missing-UPREF.patch to fix kernel build.
Thanks to USUARIONUEVO.
a/grep-3.8-i586-2.txz: Rebuilt.
Folks, I rarely veto upstream, but I'm not going to entertain this nonsense.
The egrep and fgrep commands were part of Unix since the 70s, continue to be
included with the BSDs, and frankly, aren't hurting anything. GNU grep
declared them deprecated in 2007 and when they were changed into shell
scripts around 8 years ago I figured that's where it would end. I can see no
logical justification to have these scripts start making noise and then to
eventually pull the rug out from under any code that might be using them, so
I've placed non-noisy versions of them into the package sources and will be
installing those during the build. Given that the -F and -E options are part
of the POSIX standard, these scripts will continue to work fine. That said,
we will be continuing to change our own code over to the recommended syntax
to avoid the minimal overhead incurred compared to using grep directly.
a/hwdata-0.362-noarch-1.txz: Upgraded.
a/pkgtools-15.1-noarch-2.txz: Rebuilt.
setup.80.make-bootdisk: change egrep to grep -E.
d/python3-3.9.14-i586-1.txz: Upgraded.
This is a security and bugfix release.
gh-95778: Converting between int and str in bases other than 2 (binary), 4,
8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a
ValueError if the number of digits in string form is above a limit to avoid
potential denial of service attacks due to the algorithmic complexity.
For more information, see:
https://pythoninsider.blogspot.com/2022/09/python-releases-3107-3914-3814-and-3714.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735
(* Security fix *)
d/slacktrack-2.23-i586-1.txz: Upgraded.
Change egrep to grep -E. Thanks to Stuart Winter.
l/libssh-0.10.4-i586-1.txz: Upgraded.
Distro