Slackware Changelog current
Sat Aug 28 21:25:51 UTC 2010
ap/vim-7.3.003-i486-1.txz: Upgraded.
l/libxml2-2.7.7-i486-1.txz: Upgraded.
l/sdl-1.2.14-i486-3.txz: Rebuilt.
n/wpa_supplicant-0.6.10-i486-2.txz: Rebuilt.
Added a missing [D-BUS Service] file.
Thanks to Robby Workman.
x/glew-1.5.5-i486-2.txz: Rebuilt.
xap/vim-gvim-7.3.003-i486-1.txz: Upgraded.
l/libxml2-2.7.7-i486-1.txz: Upgraded.
l/sdl-1.2.14-i486-3.txz: Rebuilt.
n/wpa_supplicant-0.6.10-i486-2.txz: Rebuilt.
Added a missing [D-BUS Service] file.
Thanks to Robby Workman.
x/glew-1.5.5-i486-2.txz: Rebuilt.
xap/vim-gvim-7.3.003-i486-1.txz: Upgraded.
Fri Aug 27 00:23:17 UTC 2010
a/grep-2.6.3-i486-2.txz: Rebuilt.
Restored -P option that went missing with the upgrade to 2.6.x.
Thanks to Rich.
a/rpm2tgz-1.2.2-i486-1.txz: Upgraded.
Add support for .txz packages and rpm2txz symlink.
Avoid (none) values in slack-desc.
Add -c option (this works similar to makepkg -c y).
Thanks to Igor Murzov for the bugfixes and improvements.
ap/vim-7.2.446-i486-1.txz: Upgraded.
Upgraded to ctags-5.8.
l/M2Crypto-0.20.2-i486-1.txz: Upgraded.
l/aspell-0.60.6-i486-1.txz: Upgraded.
l/audiofile-0.2.7-i486-1.txz: Upgraded.
l/chmlib-0.40-i486-1.txz: Upgraded.
l/gtkspell-2.0.16-i486-1.txz: Upgraded.
l/ilmbase-1.0.2-i486-1.txz: Upgraded.
l/libart_lgpl-2.3.21-i486-1.txz: Upgraded.
l/libcddb-1.3.2-i486-1.txz: Upgraded.
l/libical-0.44-i486-1.txz: Upgraded.
l/libidl-0.8.14-i486-1.txz: Upgraded.
l/libidn-1.19-i486-1.txz: Upgraded.
l/libmcs-0.7.2-i486-1.txz: Upgraded.
l/libmowgli-0.7.1-i486-1.txz: Upgraded.
l/libmpc-0.8.2-i486-1.txz: Added.
l/libnjb-2.2.6-i486-5.txz: Rebuilt.
l/liboil-0.3.17-i486-1.txz: Upgraded.
l/libpcap-1.1.1-i486-1.txz: Added. (split from tcpdump package)
l/libzip-0.9.3-i486-1.txz: Upgraded.
l/lzo-2.03-i486-1.txz: Upgraded.
l/mhash-0.9.9.9-i486-1.txz: Upgraded.
l/ncurses-5.7-i486-3.txz: Rebuilt.
l/openexr-1.7.0-i486-1.txz: Upgraded.
l/pyrex-0.9.9-i486-1.txz: Upgraded.
l/wavpack-4.60.1-i486-1.txz: Upgraded.
l/zlib-1.2.5-i486-1.txz: Upgraded.
n/bridge-utils-1.4-i486-1.txz: Upgraded.
n/dhcpcd-5.2.7-i486-1.txz: Upgraded.
n/gnupg2-2.0.16-i486-1.txz: Upgraded.
Patched to fix "Realloc Bug with X.509 certificates in GnuPG".
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2547
(* Security fix *)
n/gnutls-2.10.1-i486-1.txz: Upgraded.
n/httpd-2.2.16-i486-1.txz: Upgraded.
Fix Handling of requests without a path segment.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452
(* Security fix *)
n/iptraf-3.0.0-i486-4.txz: Rebuilt.
n/iw-0.9.20-i486-1.txz: Upgraded.
n/lftp-4.0.9-i486-1.txz: Upgraded.
n/libassuan-2.0.1-i486-1.txz: Upgraded.
n/libgcrypt-1.4.6-i486-1.txz: Upgraded.
n/libgpg-error-1.9-i486-1.txz: Upgraded.
n/libksba-1.0.8-i486-1.txz: Upgraded.
n/metamail-2.7-i486-5.txz: Rebuilt.
n/mutt-1.5.20-i486-1.txz: Upgraded.
Thanks to Chip Cuccio for help with the new ./configure options.
n/net-tools-1.60-i486-3.txz: Rebuilt.
n/php-5.2.14-i486-1.txz: Upgraded.
Fixed several security issues.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1917
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2225
http://www.php-security.org/2010/05/31/mops-2010-060-php-session-serializer-session-data-injection-vulnerability/index.html
http://www.php-security.org/2010/06/25/mops-2010-061-php-splobjectstorage-deserialization-use-after-free-vulnerability/index.html
(* Security fix *)
n/tcpdump-4.1.1-i486-1.txz: Upgraded.
This requires the new libpcap package.
n/tin-1.8.3-i486-1.txz: Upgraded.
tcl/expect-5.44.1.15-i486-1.txz: Upgraded.
x/anthy-9100h-i486-1.txz: Upgraded.
x/glew-1.5.5-i486-1.txz: Upgraded.
x/libhangul-0.0.11-i486-1.txz: Upgraded.
x/m17n-lib-1.6.1-i486-1.txz: Upgraded.
x/xorg-server-1.7.7-i486-2.txz: Rebuilt.
Patched to prevent overwriting stack memory and bypassing security mechanisms
on systems that use a 2.6 Linux kernel. Reported by Rafal Wojtczuk.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2240
(* Security fix *)
x/xorg-server-xephyr-1.7.7-i486-2.txz: Rebuilt.
x/xorg-server-xnest-1.7.7-i486-2.txz: Rebuilt.
x/xorg-server-xvfb-1.7.7-i486-2.txz: Rebuilt.
xap/audacious-2.3-i486-2.txz: Rebuilt.
xap/gimp-2.6.10-i486-1.txz: Upgraded.
xap/mozilla-thunderbird-3.1.2-i686-1.txz: Upgraded.
xap/pidgin-2.7.3-i486-1.txz: Upgraded.
This fixes a crash due to malformed X-Status messages.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2528
(* Security fix *)
xap/vim-gvim-7.2.446-i486-1.txz: Upgraded.
Restored -P option that went missing with the upgrade to 2.6.x.
Thanks to Rich.
a/rpm2tgz-1.2.2-i486-1.txz: Upgraded.
Add support for .txz packages and rpm2txz symlink.
Avoid (none) values in slack-desc.
Add -c option (this works similar to makepkg -c y).
Thanks to Igor Murzov for the bugfixes and improvements.
ap/vim-7.2.446-i486-1.txz: Upgraded.
Upgraded to ctags-5.8.
l/M2Crypto-0.20.2-i486-1.txz: Upgraded.
l/aspell-0.60.6-i486-1.txz: Upgraded.
l/audiofile-0.2.7-i486-1.txz: Upgraded.
l/chmlib-0.40-i486-1.txz: Upgraded.
l/gtkspell-2.0.16-i486-1.txz: Upgraded.
l/ilmbase-1.0.2-i486-1.txz: Upgraded.
l/libart_lgpl-2.3.21-i486-1.txz: Upgraded.
l/libcddb-1.3.2-i486-1.txz: Upgraded.
l/libical-0.44-i486-1.txz: Upgraded.
l/libidl-0.8.14-i486-1.txz: Upgraded.
l/libidn-1.19-i486-1.txz: Upgraded.
l/libmcs-0.7.2-i486-1.txz: Upgraded.
l/libmowgli-0.7.1-i486-1.txz: Upgraded.
l/libmpc-0.8.2-i486-1.txz: Added.
l/libnjb-2.2.6-i486-5.txz: Rebuilt.
l/liboil-0.3.17-i486-1.txz: Upgraded.
l/libpcap-1.1.1-i486-1.txz: Added. (split from tcpdump package)
l/libzip-0.9.3-i486-1.txz: Upgraded.
l/lzo-2.03-i486-1.txz: Upgraded.
l/mhash-0.9.9.9-i486-1.txz: Upgraded.
l/ncurses-5.7-i486-3.txz: Rebuilt.
l/openexr-1.7.0-i486-1.txz: Upgraded.
l/pyrex-0.9.9-i486-1.txz: Upgraded.
l/wavpack-4.60.1-i486-1.txz: Upgraded.
l/zlib-1.2.5-i486-1.txz: Upgraded.
n/bridge-utils-1.4-i486-1.txz: Upgraded.
n/dhcpcd-5.2.7-i486-1.txz: Upgraded.
n/gnupg2-2.0.16-i486-1.txz: Upgraded.
Patched to fix "Realloc Bug with X.509 certificates in GnuPG".
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2547
(* Security fix *)
n/gnutls-2.10.1-i486-1.txz: Upgraded.
n/httpd-2.2.16-i486-1.txz: Upgraded.
Fix Handling of requests without a path segment.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452
(* Security fix *)
n/iptraf-3.0.0-i486-4.txz: Rebuilt.
n/iw-0.9.20-i486-1.txz: Upgraded.
n/lftp-4.0.9-i486-1.txz: Upgraded.
n/libassuan-2.0.1-i486-1.txz: Upgraded.
n/libgcrypt-1.4.6-i486-1.txz: Upgraded.
n/libgpg-error-1.9-i486-1.txz: Upgraded.
n/libksba-1.0.8-i486-1.txz: Upgraded.
n/metamail-2.7-i486-5.txz: Rebuilt.
n/mutt-1.5.20-i486-1.txz: Upgraded.
Thanks to Chip Cuccio for help with the new ./configure options.
n/net-tools-1.60-i486-3.txz: Rebuilt.
n/php-5.2.14-i486-1.txz: Upgraded.
Fixed several security issues.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1917
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2225
http://www.php-security.org/2010/05/31/mops-2010-060-php-session-serializer-session-data-injection-vulnerability/index.html
http://www.php-security.org/2010/06/25/mops-2010-061-php-splobjectstorage-deserialization-use-after-free-vulnerability/index.html
(* Security fix *)
n/tcpdump-4.1.1-i486-1.txz: Upgraded.
This requires the new libpcap package.
n/tin-1.8.3-i486-1.txz: Upgraded.
tcl/expect-5.44.1.15-i486-1.txz: Upgraded.
x/anthy-9100h-i486-1.txz: Upgraded.
x/glew-1.5.5-i486-1.txz: Upgraded.
x/libhangul-0.0.11-i486-1.txz: Upgraded.
x/m17n-lib-1.6.1-i486-1.txz: Upgraded.
x/xorg-server-1.7.7-i486-2.txz: Rebuilt.
Patched to prevent overwriting stack memory and bypassing security mechanisms
on systems that use a 2.6 Linux kernel. Reported by Rafal Wojtczuk.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2240
(* Security fix *)
x/xorg-server-xephyr-1.7.7-i486-2.txz: Rebuilt.
x/xorg-server-xnest-1.7.7-i486-2.txz: Rebuilt.
x/xorg-server-xvfb-1.7.7-i486-2.txz: Rebuilt.
xap/audacious-2.3-i486-2.txz: Rebuilt.
xap/gimp-2.6.10-i486-1.txz: Upgraded.
xap/mozilla-thunderbird-3.1.2-i686-1.txz: Upgraded.
xap/pidgin-2.7.3-i486-1.txz: Upgraded.
This fixes a crash due to malformed X-Status messages.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2528
(* Security fix *)
xap/vim-gvim-7.2.446-i486-1.txz: Upgraded.
Sat Jul 31 17:37:45 UTC 2010
l/akonadi-1.4.0-i486-1.txz: Upgraded.
Fri Jul 30 00:12:53 UTC 2010
l/soprano-2.4.64-i486-1.txz: Upgraded.
l/virtuoso-ose-6.1.2-i486-1.txz: Upgraded.
l/virtuoso-ose-6.1.2-i486-1.txz: Upgraded.
Thu Jul 29 01:45:40 UTC 2010
a/aaa_terminfo-5.7-i486-2.txz: Rebuilt.
a/dialog-1.1_20100428-i486-1.txz: Upgraded.
a/ed-1.4-i486-1.txz: Upgraded.
a/grep-2.6.3-i486-1.txz: Upgraded.
a/hdparm-9.29-i486-1.txz: Upgraded.
a/mtx-1.3.12-i486-1.txz: Upgraded.
a/ncompress-4.2.4.3-i486-1.txz: Upgraded.
a/patch-2.6.1-i486-1.txz: Upgraded.
a/procps-3.2.8-i486-1.txz: Upgraded.
a/sharutils-4.9-i486-1.txz: Upgraded.
a/tcsh-6.17.00-i486-1.txz: Upgraded.
a/tree-1.5.3-i486-1.txz: Upgraded.
a/utempter-1.1.5-i486-1.txz: Upgraded.
a/zoo-2.10_22-i486-1.txz: Upgraded.
ap/a2ps-4.14-i486-5.txz: Rebuilt.
ap/acct-6.5.4-i486-1.txz: Upgraded.
ap/at-3.1.12-i486-1.txz: Upgraded.
ap/aumix-2.9.1-i486-1.txz: Upgraded.
ap/cdrdao-1.2.3-i486-1.txz: Upgraded.
ap/diffstat-1.53-i486-1.txz: Upgraded.
ap/enscript-1.6.5.2-i486-1.txz: Upgraded.
ap/groff-1.20.1-i486-2.txz: Rebuilt.
Patched a bug in doc.tmac. Thanks to Willy Sudiarto Raharjo.
ap/joe-3.7-i486-1.txz: Upgraded.
ap/jove-4.16.0.73-i486-1.txz: Upgraded.
ap/ksh93-2010_06_21-i486-1.txz: Upgraded.
ap/linuxdoc-tools-0.9.66-i486-3.txz: Rebuilt.
ap/lsscsi-0.24b1-i486-1.txz: Upgraded.
ap/sc-7.16-i486-3.txz: Rebuilt.
ap/texinfo-4.13a-i486-4.txz: Rebuilt.
ap/sox-14.3.1-i486-1.txz: Upgraded.
ap/vorbis-tools-1.4.0-i486-1.txz: Upgraded.
ap/workbone-2.40-i486-4.txz: Rebuilt.
d/gperf-3.0.4-i486-1.txz: Upgraded.
d/make-3.82-i486-1.txz: Upgraded.
d/pkg-config-0.25-i486-1.txz: Upgraded.
d/strace-4.5.20-i486-1.txz: Upgraded.
l/jre-6u21-i586-1.txz: Upgraded.
Upgraded to Java(TM) 2 Platform Standard Edition Runtime Environment
Version 6.0 update 21.
l/libao-1.0.0-i486-1.txz: Upgraded.
l/libvorbis-1.3.1-i486-1.txz: Upgraded.
l/libogg-1.2.0-i486-1.txz: Upgraded.
n/samba-3.5.4-i486-1.txz: Upgraded.
extra/jdk-6/jdk-6u21-i586-1.txz: Upgraded.
Upgraded to Java(TM) 2 Platform Standard Edition Development Kit
Version 6.0 update 21.
a/dialog-1.1_20100428-i486-1.txz: Upgraded.
a/ed-1.4-i486-1.txz: Upgraded.
a/grep-2.6.3-i486-1.txz: Upgraded.
a/hdparm-9.29-i486-1.txz: Upgraded.
a/mtx-1.3.12-i486-1.txz: Upgraded.
a/ncompress-4.2.4.3-i486-1.txz: Upgraded.
a/patch-2.6.1-i486-1.txz: Upgraded.
a/procps-3.2.8-i486-1.txz: Upgraded.
a/sharutils-4.9-i486-1.txz: Upgraded.
a/tcsh-6.17.00-i486-1.txz: Upgraded.
a/tree-1.5.3-i486-1.txz: Upgraded.
a/utempter-1.1.5-i486-1.txz: Upgraded.
a/zoo-2.10_22-i486-1.txz: Upgraded.
ap/a2ps-4.14-i486-5.txz: Rebuilt.
ap/acct-6.5.4-i486-1.txz: Upgraded.
ap/at-3.1.12-i486-1.txz: Upgraded.
ap/aumix-2.9.1-i486-1.txz: Upgraded.
ap/cdrdao-1.2.3-i486-1.txz: Upgraded.
ap/diffstat-1.53-i486-1.txz: Upgraded.
ap/enscript-1.6.5.2-i486-1.txz: Upgraded.
ap/groff-1.20.1-i486-2.txz: Rebuilt.
Patched a bug in doc.tmac. Thanks to Willy Sudiarto Raharjo.
ap/joe-3.7-i486-1.txz: Upgraded.
ap/jove-4.16.0.73-i486-1.txz: Upgraded.
ap/ksh93-2010_06_21-i486-1.txz: Upgraded.
ap/linuxdoc-tools-0.9.66-i486-3.txz: Rebuilt.
ap/lsscsi-0.24b1-i486-1.txz: Upgraded.
ap/sc-7.16-i486-3.txz: Rebuilt.
ap/texinfo-4.13a-i486-4.txz: Rebuilt.
ap/sox-14.3.1-i486-1.txz: Upgraded.
ap/vorbis-tools-1.4.0-i486-1.txz: Upgraded.
ap/workbone-2.40-i486-4.txz: Rebuilt.
d/gperf-3.0.4-i486-1.txz: Upgraded.
d/make-3.82-i486-1.txz: Upgraded.
d/pkg-config-0.25-i486-1.txz: Upgraded.
d/strace-4.5.20-i486-1.txz: Upgraded.
l/jre-6u21-i586-1.txz: Upgraded.
Upgraded to Java(TM) 2 Platform Standard Edition Runtime Environment
Version 6.0 update 21.
l/libao-1.0.0-i486-1.txz: Upgraded.
l/libvorbis-1.3.1-i486-1.txz: Upgraded.
l/libogg-1.2.0-i486-1.txz: Upgraded.
n/samba-3.5.4-i486-1.txz: Upgraded.
extra/jdk-6/jdk-6u21-i586-1.txz: Upgraded.
Upgraded to Java(TM) 2 Platform Standard Edition Development Kit
Version 6.0 update 21.
Sat Jul 24 03:02:29 UTC 2010
xap/mozilla-firefox-3.6.8-i686-1.txz: Upgraded.
This fixes a regression in Firefox 3.6.7.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox36.html
(* Security fix *)
This fixes a regression in Firefox 3.6.7.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox36.html
(* Security fix *)
Wed Jul 21 21:37:53 UTC 2010
d/clisp-2.49-i486-1.txz: Upgraded.
l/seamonkey-solibs-2.0.6-i486-1.txz: Upgraded.
xap/mozilla-firefox-3.6.7-i686-1.txz: Upgraded.
This fixes some security issues.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox36.html
(* Security fix *)
xap/mozilla-thunderbird-3.1.1-i686-1.txz: Upgraded.
This upgrade fixes some more security bugs.
(* Security fix *)
xap/seamonkey-2.0.6-i486-1.txz: Upgraded.
This release fixes some more security vulnerabilities.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html
(* Security fix *)
l/seamonkey-solibs-2.0.6-i486-1.txz: Upgraded.
xap/mozilla-firefox-3.6.7-i686-1.txz: Upgraded.
This fixes some security issues.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox36.html
(* Security fix *)
xap/mozilla-thunderbird-3.1.1-i686-1.txz: Upgraded.
This upgrade fixes some more security bugs.
(* Security fix *)
xap/seamonkey-2.0.6-i486-1.txz: Upgraded.
This release fixes some more security vulnerabilities.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html
(* Security fix *)
Mon Jul 19 23:36:56 UTC 2010
n/bind-9.7.1_P2-i486-1.txz: Upgraded.
This reverses a change that was introduced in BIND 9.7.1 that could cause
cause the server to enter an endless query loop resulting in a denial of
service. (-current only, does not affect any released Slackware)
Thanks to Grigorios Bouzakis for pointing out this BIND update.
(* Security fix *)
This reverses a change that was introduced in BIND 9.7.1 that could cause
cause the server to enter an endless query loop resulting in a denial of
service. (-current only, does not affect any released Slackware)
Thanks to Grigorios Bouzakis for pointing out this BIND update.
(* Security fix *)
Sun Jul 18 01:41:06 UTC 2010
KDE 4.4.5 update -- thanks to Eric Hameleers!
kde/amarok-2.3.1-i486-1.txz: Upgraded.
kde/k3b-2.0.0-i486-1.txz: Upgraded.
kde/kdeaccessibility-4.4.5-i486-1.txz: Upgraded.
kde/kdeadmin-4.4.5-i486-1.txz: Upgraded.
kde/kdeartwork-4.4.5-i486-1.txz: Upgraded.
kde/kdebase-4.4.5-i486-1.txz: Upgraded.
kde/kdebase-runtime-4.4.5-i486-1.txz: Upgraded.
kde/kdebase-workspace-4.4.5-i486-1.txz: Upgraded.
kde/kdebindings-4.4.5-i486-1.txz: Upgraded.
kde/kdeedu-4.4.5-i486-1.txz: Upgraded.
kde/kdegames-4.4.5-i486-1.txz: Upgraded.
kde/kdegraphics-4.4.5-i486-1.txz: Upgraded.
kde/kdelibs-4.4.5-i486-1.txz: Upgraded.
kde/kdemultimedia-4.4.5-i486-1.txz: Upgraded.
kde/kdenetwork-4.4.5-i486-1.txz: Upgraded.
kde/kdepim-4.4.5-i486-1.txz: Upgraded.
kde/kdepim-runtime-4.4.5-i486-1.txz: Upgraded.
kde/kdepimlibs-4.4.5-i486-1.txz: Upgraded.
kde/kdeplasma-addons-4.4.5-i486-1.txz: Upgraded.
kde/kdesdk-4.4.5-i486-1.txz: Upgraded.
kde/kdetoys-4.4.5-i486-1.txz: Upgraded.
kde/kdeutils-4.4.5-i486-1.txz: Upgraded.
kde/kdevelop-4.0.1-i486-1.txz: Upgraded.
kde/kdevplatform-1.0.1-i486-1.txz: Upgraded.
kde/kdewebdev-4.4.5-i486-1.txz: Upgraded.
kde/koffice-2.2.1-i486-1.txz: Upgraded.
kde/ktorrent-4.0.2-i486-1.txz: Upgraded.
This now requires libktorrent.
kde/libktorrent-1.0.2-i486-1.txz: Added.
kde/oxygen-icons-4.4.5-i486-1.txz: Upgraded.
kde/polkit-kde-1-r1145544-i486-1.txz: Upgraded.
kde/polkit-qt-1-r1145513-i486-1.txz: Upgraded.
kdei/*: Upgraded.
l/polkit-1_a2edcef-i486-1.txz: Upgraded.
l/attica-0.1.4-i486-1.txz: Upgraded.
l/akonadi-1.3.90-i486-1.txz: Upgraded.
l/phonon-4.4.2-i486-1.txz: Upgraded.
l/soprano-2.4.63-i486-1.txz: Upgraded.
l/shared-desktop-ontologies-0.5-i486-1.txz: Upgraded.
l/qimageblitz-0.0.6-i486-1.txz: Upgraded.
l/qt-4.6.3_ef2e850-i486-1.txz: Upgraded.
testing/packages/btrfs-progs-20100717-i486-1.txz: Upgraded.
kde/amarok-2.3.1-i486-1.txz: Upgraded.
kde/k3b-2.0.0-i486-1.txz: Upgraded.
kde/kdeaccessibility-4.4.5-i486-1.txz: Upgraded.
kde/kdeadmin-4.4.5-i486-1.txz: Upgraded.
kde/kdeartwork-4.4.5-i486-1.txz: Upgraded.
kde/kdebase-4.4.5-i486-1.txz: Upgraded.
kde/kdebase-runtime-4.4.5-i486-1.txz: Upgraded.
kde/kdebase-workspace-4.4.5-i486-1.txz: Upgraded.
kde/kdebindings-4.4.5-i486-1.txz: Upgraded.
kde/kdeedu-4.4.5-i486-1.txz: Upgraded.
kde/kdegames-4.4.5-i486-1.txz: Upgraded.
kde/kdegraphics-4.4.5-i486-1.txz: Upgraded.
kde/kdelibs-4.4.5-i486-1.txz: Upgraded.
kde/kdemultimedia-4.4.5-i486-1.txz: Upgraded.
kde/kdenetwork-4.4.5-i486-1.txz: Upgraded.
kde/kdepim-4.4.5-i486-1.txz: Upgraded.
kde/kdepim-runtime-4.4.5-i486-1.txz: Upgraded.
kde/kdepimlibs-4.4.5-i486-1.txz: Upgraded.
kde/kdeplasma-addons-4.4.5-i486-1.txz: Upgraded.
kde/kdesdk-4.4.5-i486-1.txz: Upgraded.
kde/kdetoys-4.4.5-i486-1.txz: Upgraded.
kde/kdeutils-4.4.5-i486-1.txz: Upgraded.
kde/kdevelop-4.0.1-i486-1.txz: Upgraded.
kde/kdevplatform-1.0.1-i486-1.txz: Upgraded.
kde/kdewebdev-4.4.5-i486-1.txz: Upgraded.
kde/koffice-2.2.1-i486-1.txz: Upgraded.
kde/ktorrent-4.0.2-i486-1.txz: Upgraded.
This now requires libktorrent.
kde/libktorrent-1.0.2-i486-1.txz: Added.
kde/oxygen-icons-4.4.5-i486-1.txz: Upgraded.
kde/polkit-kde-1-r1145544-i486-1.txz: Upgraded.
kde/polkit-qt-1-r1145513-i486-1.txz: Upgraded.
kdei/*: Upgraded.
l/polkit-1_a2edcef-i486-1.txz: Upgraded.
l/attica-0.1.4-i486-1.txz: Upgraded.
l/akonadi-1.3.90-i486-1.txz: Upgraded.
l/phonon-4.4.2-i486-1.txz: Upgraded.
l/soprano-2.4.63-i486-1.txz: Upgraded.
l/shared-desktop-ontologies-0.5-i486-1.txz: Upgraded.
l/qimageblitz-0.0.6-i486-1.txz: Upgraded.
l/qt-4.6.3_ef2e850-i486-1.txz: Upgraded.
testing/packages/btrfs-progs-20100717-i486-1.txz: Upgraded.
Wed Jun 30 04:51:49 UTC 2010
l/libpng-1.4.3-i486-1.txz: Upgraded.
Upgraded to libpng-1.2.44 and libpng-1.4.3.
This fixes out-of-bounds memory write bugs that could lead to crashes
or the execution of arbitrary code, and a memory leak bug which could
lead to application crashes.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2249
(* Security fix *)
l/libtiff-3.9.4-i486-1.txz: Upgraded.
This fixes image structure handling bugs that could lead to crashes or
execution of arbitrary code if a specially-crafted TIFF image is loaded.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1411
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2065
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2067
(* Security fix *)
Upgraded to libpng-1.2.44 and libpng-1.4.3.
This fixes out-of-bounds memory write bugs that could lead to crashes
or the execution of arbitrary code, and a memory leak bug which could
lead to application crashes.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2249
(* Security fix *)
l/libtiff-3.9.4-i486-1.txz: Upgraded.
This fixes image structure handling bugs that could lead to crashes or
execution of arbitrary code if a specially-crafted TIFF image is loaded.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1411
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2065
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2067
(* Security fix *)
Sun Jun 27 17:25:18 UTC 2010
xap/mozilla-firefox-3.6.6-i686-1.txz: Upgraded.
This changes the crash protection feature to increase the timeout
before a plugin is considered non-responsive.
This changes the crash protection feature to increase the timeout
before a plugin is considered non-responsive.
Sun Jun 27 03:43:13 UTC 2010
ap/ghostscript-8.71-i486-3.txz: Rebuilt.
Merged an upstream patch from Till Kamppeter to fix printing black pages
with CUPS and certain printers.
Merged an upstream patch from Till Kamppeter to fix printing black pages
with CUPS and certain printers.
Fri Jun 25 05:28:02 UTC 2010
a/cups-1.4.4-i486-1.txz: Upgraded.
Fixed a memory allocation error in texttops.
Fixed a Cross-Site Request Forgery (CSRF) that could allow a remote
attacker to reconfigure or disable CUPS if a CUPS admin logged into the
web interface visited a specially-crafted website.
Fixed a bug where uninitialized memory from the cupsd process could
reveal sensitive information.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0540
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0542
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1748
(* Security fix *)
d/ccache-3.0-i486-1.txz: Upgraded.
d/gdb-7.1-i486-2.txz: Rebuilt.
Added --with-python=no to fix errors about missing backtrace.py, which is
not yet in stable glib. Thanks to David Woodfall.
l/imlib-1.9.15-i486-7.txz: Rebuilt.
This fixes problems linking with libpng.
l/seamonkey-solibs-2.0.5-i486-1.txz: Upgraded.
n/bind-9.7.1-i486-1.txz: Upgraded.
This fixes possible DNS cache poisoning attacks when DNSSEC is enabled
and checking is disabled (CD).
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097
(* Security fix *)
Thanks to Rob McGee for help with the upgrade to BIND 9.7.x.
xap/mozilla-firefox-3.6.4-i686-1.txz: Upgraded.
This fixes some security issues.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox36.html
(* Security fix *)
xap/mozilla-thunderbird-3.1-i686-1.txz: Upgraded.
(* Security fix *)
xap/seamonkey-2.0.5-i486-1.txz: Upgraded.
This release fixes some more security vulnerabilities.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html
(* Security fix *)
Fixed a memory allocation error in texttops.
Fixed a Cross-Site Request Forgery (CSRF) that could allow a remote
attacker to reconfigure or disable CUPS if a CUPS admin logged into the
web interface visited a specially-crafted website.
Fixed a bug where uninitialized memory from the cupsd process could
reveal sensitive information.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0540
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0542
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1748
(* Security fix *)
d/ccache-3.0-i486-1.txz: Upgraded.
d/gdb-7.1-i486-2.txz: Rebuilt.
Added --with-python=no to fix errors about missing backtrace.py, which is
not yet in stable glib. Thanks to David Woodfall.
l/imlib-1.9.15-i486-7.txz: Rebuilt.
This fixes problems linking with libpng.
l/seamonkey-solibs-2.0.5-i486-1.txz: Upgraded.
n/bind-9.7.1-i486-1.txz: Upgraded.
This fixes possible DNS cache poisoning attacks when DNSSEC is enabled
and checking is disabled (CD).
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097
(* Security fix *)
Thanks to Rob McGee for help with the upgrade to BIND 9.7.x.
xap/mozilla-firefox-3.6.4-i686-1.txz: Upgraded.
This fixes some security issues.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox36.html
(* Security fix *)
xap/mozilla-thunderbird-3.1-i686-1.txz: Upgraded.
(* Security fix *)
xap/seamonkey-2.0.5-i486-1.txz: Upgraded.
This release fixes some more security vulnerabilities.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html
(* Security fix *)
Sat Jun 19 00:59:41 UTC 2010
testing/packages/btrfs-progs-20100618-i486-1.txz:
Added btrfs-convert. Thanks to mancha.
Added btrfs-convert. Thanks to mancha.
Fri Jun 18 18:12:04 UTC 2010
ap/alsa-utils-1.0.23-i486-2.txz: Rebuilt.
Patched alsaconf to generate /etc/modprobe.d/sound.conf.
Thanks to Alan Hicks.
kde/kdebase-workspace-4.4.3-i486-2.txz: Rebuilt.
Patched xinitrc.kde to launch with ck-launch-session only if the
DESKTOP_SESSION variable is empty. This fixes a bug where a ck-aware
login manager such as KDM may have already launched a ConsoleKit
session, causing the xinitrc to launch another one and marking the
first one inactive. This can lead to auth failures.
Thanks to Robby Workman.
n/samba-3.5.3-i486-1.txz: Upgraded.
xap/xfce-4.6.1-i486-9.txz: Rebuilt.
Patched xinitrc.xfce to launch with ck-launch-session only if the
DESKTOP_SESSION variable is empty. Thanks to Robby Workman.
Patched alsaconf to generate /etc/modprobe.d/sound.conf.
Thanks to Alan Hicks.
kde/kdebase-workspace-4.4.3-i486-2.txz: Rebuilt.
Patched xinitrc.kde to launch with ck-launch-session only if the
DESKTOP_SESSION variable is empty. This fixes a bug where a ck-aware
login manager such as KDM may have already launched a ConsoleKit
session, causing the xinitrc to launch another one and marking the
first one inactive. This can lead to auth failures.
Thanks to Robby Workman.
n/samba-3.5.3-i486-1.txz: Upgraded.
xap/xfce-4.6.1-i486-9.txz: Rebuilt.
Patched xinitrc.xfce to launch with ck-launch-session only if the
DESKTOP_SESSION variable is empty. Thanks to Robby Workman.
Wed May 19 08:58:23 UTC 2010
Slackware 13.1 x86 stable is released!
Lots of thanks are due -- see the RELEASE_NOTES and the rest of the
ChangeLog for credits. The ISOs are on their way to replication,
a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD.
We are taking pre-orders now at store.slackware.com, and offering
a discount if you sign up for a subscription. Consider picking up
a copy to help support the project. Thanks again to the Slackware
community for testing, contributing, and generally holding us to a
high level of quality. :-)
Enjoy!
Lots of thanks are due -- see the RELEASE_NOTES and the rest of the
ChangeLog for credits. The ISOs are on their way to replication,
a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD.
We are taking pre-orders now at store.slackware.com, and offering
a discount if you sign up for a subscription. Consider picking up
a copy to help support the project. Thanks again to the Slackware
community for testing, contributing, and generally holding us to a
high level of quality. :-)
Enjoy!
Wed May 19 02:59:47 UTC 2010
a/acpid-2.0.5-i486-1.txz: Upgraded.
n/slrn-0.9.9p1-i486-3.txz: Rebuilt.
Fixed hardcoded spool directory path in slrnpull. Thanks to Andrew.
n/slrn-0.9.9p1-i486-3.txz: Rebuilt.
Fixed hardcoded spool directory path in slrnpull. Thanks to Andrew.
Tue May 18 22:17:13 UTC 2010
Slackware 13.1 RC2. Expect a stable release when it's ready.
l/system-config-printer-1.2.2-i486-1.txz: Upgraded.
xap/pidgin-2.7.0-i486-1.txz: Upgraded.
Upgraded to pidgin-2.7.0 and pidgin-encryption-3.1.
The msn_emoticon_msg function in slp.c in the MSN protocol plugin in
libpurple in Pidgin before 2.7.0 allows remote attackers to cause
a denial of service (application crash) via a custom emoticon in a
malformed SLP message.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1624
(* Security fix *)
testing/packages/btrfs-progs-20100518-i486-1.txz: Upgraded.
l/system-config-printer-1.2.2-i486-1.txz: Upgraded.
xap/pidgin-2.7.0-i486-1.txz: Upgraded.
Upgraded to pidgin-2.7.0 and pidgin-encryption-3.1.
The msn_emoticon_msg function in slp.c in the MSN protocol plugin in
libpurple in Pidgin before 2.7.0 allows remote attackers to cause
a denial of service (application crash) via a custom emoticon in a
malformed SLP message.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1624
(* Security fix *)
testing/packages/btrfs-progs-20100518-i486-1.txz: Upgraded.
Tue May 18 06:48:06 UTC 2010
d/mercurial-1.5.2-i486-1.txz: Upgraded.
Added hgk extension, bash and zsh completion, and Emacs .el files.
Thanks to Qun-Ying.
Added hgk extension, bash and zsh completion, and Emacs .el files.
Thanks to Qun-Ying.
Tue May 18 02:41:17 UTC 2010
kde/kdegraphics-4.4.3-i486-2.txz: Rebuilt.
Patched gwenview for libjpeg8 (fixes save after rotate).
Thanks to V'yacheslav Stetskevych.
Patched gwenview for libjpeg8 (fixes save after rotate).
Thanks to V'yacheslav Stetskevych.

