Slackers (Slackware current journal) - Slackware – GNU/Linux per SubGeni e Fannulloni

Tue Jan 27 14:33:35 CST 2009
KDE 4.2.0 is released — congratulations to the KDE development team for such
an amazing job on this beautiful and highly user-friendly desktop environment!
Thanks also to Eric Hameleers, who did a ton of work getting KDE 4.2.0 ready
for Slackware. Once again (for now), these packages are compatible with
Slackware 12.2. Enjoy!
testing/packages/kde4/deps/automoc4-0.9.88-i486-1.tgz:
Upgraded to automoc4-0.9.88.
testing/packages/kde4/deps/clucene-0.9.21b-i486-1.tgz:
Upgraded to clucene-0.9.21b.
testing/packages/kde4/extragear/guidance-power-manager-4.2.0-i486-1.tgz:
Upgraded to guidance-power-manager-4.2.0.
testing/packages/kde4/extragear/konq-plugins-4.2.0-i486-1.tgz:
Upgraded to konq-plugins-4.2.0.
testing/packages/kde4/extragear/skanlite-0.2_kde4.2.0-i486-1.tgz:
Upgraded to skanlite-0.2_kde4.2.0.
testing/packages/kde4/kde/kdeaccessibility-4.2.0-i486-1.tgz:
Upgraded to kdeaccessibility-4.2.0.
testing/packages/kde4/kde/kdeadmin-4.2.0-i486-1.tgz:
Upgraded to kdeadmin-4.2.0.
testing/packages/kde4/kde/kdeartwork-4.2.0-i486-1.tgz:
Upgraded to kdeartwork-4.2.0.
testing/packages/kde4/kde/kdebase-4.2.0-i486-1.tgz:
Upgraded to kdebase-4.2.0.
testing/packages/kde4/kde/kdebase-runtime-4.2.0-i486-1.tgz:
Upgraded to kdebase-runtime-4.2.0.
testing/packages/kde4/kde/kdebase-workspace-4.2.0-i486-1.tgz:
Upgraded to kdebase-workspace-4.2.0.
testing/packages/kde4/kde/kdebindings-4.2.0-i486-1.tgz:
Upgraded to kdebindings-4.2.0.
testing/packages/kde4/kde/kdeedu-4.2.0-i486-1.tgz:
Upgraded to kdeedu-4.2.0.
testing/packages/kde4/kde/kdegames-4.2.0-i486-1.tgz:
Upgraded to kdegames-4.2.0.
testing/packages/kde4/kde/kdegraphics-4.2.0-i486-1.tgz:
Upgraded to kdegraphics-4.2.0.
testing/packages/kde4/kde/kdelibs-4.2.0-i486-1.tgz:
Upgraded to kdelibs-4.2.0.
testing/packages/kde4/kde/kdemultimedia-4.2.0-i486-1.tgz:
Upgraded to kdemultimedia-4.2.0.
testing/packages/kde4/kde/kdenetwork-4.2.0-i486-2.tgz:
Upgraded to kdenetwork-4.2.0.
testing/packages/kde4/kde/kdepim-4.2.0-i486-1.tgz:
Upgraded to kdepim-4.2.0.
testing/packages/kde4/kde/kdepimlibs-4.2.0-i486-1.tgz:
Upgraded to kdepimlibs-4.2.0.
testing/packages/kde4/kde/kdeplasma-addons-4.2.0-i486-1.tgz:
Upgraded to kdeplasma-addons-4.2.0.
testing/packages/kde4/kde/kdesdk-4.2.0-i486-1.tgz:
Upgraded to kdesdk-4.2.0.
testing/packages/kde4/kde/kdetoys-4.2.0-i486-1.tgz:
Upgraded to kdetoys-4.2.0.
testing/packages/kde4/kde/kdeutils-4.2.0-i486-1.tgz:
Upgraded to kdeutils-4.2.0.
testing/packages/kde4/kde/kdewebdev-4.2.0-i486-1.tgz:
Upgraded to kdewebdev-4.2.0.
testing/packages/kde4/kde-l10n/kde-l10n-*-4.2.0-noarch-1.tgz:
Upgraded to KDE 4.2.0 l10n packages.

Sun Jan 25 19:40:20 CST 2009
n/bluez-utils-3.36-i486-5.tgz: Changes in the dbus version used in Slackware
12.2 (and in -current) to increase security had some unintended side effects,
and bluez was one of the things that broke. However, by using the dbus
bluetooth.conf file from bluez-4, this version of bluez can be made to work
again. The newer version of the .conf file has been merged into this package,
and changed from a .conf.new to a plain .conf to ensure that it replaces the
other version. Thanks to David Somero for the bug report and fix.
n/lftp-3.7.8-i486-1.tgz: Upgraded to lftp-3.7.8.
testing/packages/kde4/deps/libmsn-r93-i486-1.tgz: Added libmsn-r93, needed to
handle the MSN protocol in kopete.
testing/packages/kde4/deps/phonon-4.3.0-i486-1.tgz: Upgraded to phonon-4.3.0.
testing/packages/kde4/deps/soprano-2.1.67-i486-1.tgz:
Upgraded to soprano-2.1.67.
testing/packages/kde4/extragear/ktorrent-3.1.6-i486-1.tgz:
Upgraded to ktorrent-3.1.6.
testing/packages/kde4/kde/kdenetwork-4.1.96-i486-2.tgz:
Recompiled against libmsn-r93.

Wed Jan 21 17:27:37 CST 2009
Upgraded to KDE 4.2rc1 (4.1.96) in /testing. Thanks very much to Eric Hameleers
for all of the hard work getting this version of KDE ready for /testing so that
Slackware -current will be ready when KDE 4.2 is released! And thanks for all
of his behind-the-scenes work… Eric has been following all of the KDE 4.2
betas as well, and taking note as the build requirements have changed.
This set of packages will also work on Slackware 12.2. If you intend to use
them with Slackware 12.2, grab them now. Library changes in -current may occur
which could make it more difficult to use these KDE packages with Slackware 12.2
in the future.
testing/packages/kde4/deps/PyQt-4.4.4-i486-1.tgz: Upgraded to PyQt-4.4.4.
testing/packages/kde4/deps/akonadi-1.1.1-i486-1.tgz: Upgraded to akonadi-1.1.1.
testing/packages/kde4/deps/automoc4-r900905-i486-1.tgz: Added automoc4-r900905.
testing/packages/kde4/deps/boost-1.36.0-i486-1.tgz: Upgraded to boost-1.36.0.
testing/packages/kde4/deps/eigen2-r900905-i486-1.tgz:
Upgraded to eigen2-r900905.
testing/packages/kde4/deps/iso-codes-3.5-noarch-1.tgz: Added iso-codes-3.5.
testing/packages/kde4/deps/libdvdread-4.1.3-i486-1.tgz: Added libdvdread-4.1.3.
testing/packages/kde4/deps/libical-0.42-i486-1.tgz: Added libical-0.42.
testing/packages/kde4/deps/libxklavier-3.8-i486-1.tgz:
Upgraded to libxklavier-3.8.
testing/packages/kde4/deps/phonon-4.2.96-i486-1.tgz: Upgraded to phonon-4.2.96.
testing/packages/kde4/deps/qimageblitz-r900905-i486-1.tgz:
Upgraded to qimageblitz-r900905.
testing/packages/kde4/deps/qt-r912655-i486-1.tgz: Upgraded to qt-r912655.
testing/packages/kde4/deps/sip-4.7.9-i486-1.tgz: Upgraded to sip-4.7.9.
testing/packages/kde4/deps/soprano-2.1.64-i486-1.tgz:
Upgraded to soprano-2.1.64.
testing/packages/kde4/deps/strigi-0.6.3-i486-1.tgz: Upgraded to strigi-0.6.3.
testing/packages/kde4/extragear/amarok-2.0.1.1-i486-1.tgz:
Upgraded to amarok-2.0.1.1.
testing/packages/kde4/extragear/guidance-power-manager-4.1.96-i486-1.tgz:
Upgraded to guidance-power-manager-4.1.96.
testing/packages/kde4/extragear/kaudiocreator-r888119-i486-1.tgz:
Upgraded to kaudiocreator-r888119.
testing/packages/kde4/extragear/konq-plugins-4.1.96-i486-1.tgz:
Upgraded to konq-plugins-4.1.96.
testing/packages/kde4/extragear/skanlite-0.2_kde4.1.96-i486-1.tgz:
Added skanlite-0.2_kde4.1.96.
testing/packages/kde4/kde/kdeaccessibility-4.1.96-i486-1.tgz:
Upgraded to kdeaccessibility-4.1.96.
testing/packages/kde4/kde/kdeadmin-4.1.96-i486-1.tgz:
Upgraded to kdeadmin-4.1.96.
testing/packages/kde4/kde/kdeartwork-4.1.96-i486-1.tgz:
Upgraded to kdeartwork-4.1.96.
testing/packages/kde4/kde/kdebase-4.1.96-i486-1.tgz:
Upgraded to kdebase-4.1.96.
testing/packages/kde4/kde/kdebase-runtime-4.1.96-i486-1.tgz:
Upgraded to kdebase-runtime-4.1.96.
testing/packages/kde4/kde/kdebase-workspace-4.1.96-i486-1.tgz:
Upgraded to kdebase-workspace-4.1.96.
testing/packages/kde4/kde/kdebindings-4.1.96-i486-1.tgz:
Upgraded to kdebindings-4.1.96.
testing/packages/kde4/kde/kdeedu-4.1.96-i486-1.tgz:
Upgraded to kdeedu-4.1.96.
testing/packages/kde4/kde/kdegames-4.1.96-i486-1.tgz:
Upgraded to kdegames-4.1.96.
testing/packages/kde4/kde/kdegraphics-4.1.96-i486-1.tgz:
Upgraded to kdegraphics-4.1.96.
testing/packages/kde4/kde/kdelibs-4.1.96-i486-1.tgz:
Upgraded to kdelibs-4.1.96.
testing/packages/kde4/kde/kdemultimedia-4.1.96-i486-1.tgz:
Upgraded to kdemultimedia-4.1.96.
testing/packages/kde4/kde/kdenetwork-4.1.96-i486-1.tgz:
Upgraded to kdenetwork-4.1.96.
testing/packages/kde4/kde/kdepim-r914823_4.2-i486-1.tgz:
Upgraded to kdepim-r914823_4.2.
testing/packages/kde4/kde/kdepimlibs-4.1.96-i486-1.tgz:
Upgraded to kdepimlibs-4.1.96.
testing/packages/kde4/kde/kdeplasma-addons-4.1.96-i486-1.tgz:
Upgraded to kdeplasma-addons-4.1.96.
testing/packages/kde4/kde/kdesdk-4.1.96-i486-1.tgz:
Upgraded to kdesdk-4.1.96.
testing/packages/kde4/kde/kdetoys-4.1.96-i486-1.tgz:
Upgraded to kdetoys-4.1.96.
testing/packages/kde4/kde/kdeutils-4.1.96-i486-1.tgz:
Upgraded to kdeutils-4.1.96.
testing/packages/kde4/kde/kdevelop-3.9.85-i486-1.tgz:
Added kdevelop-3.9.85.
testing/packages/kde4/kde/kdevplatform-0.9.85-i486-1.tgz:
Added kdevplatform-0.9.85.
testing/packages/kde4/kde/kdewebdev-4.1.96-i486-1.tgz:
Upgraded to kdewebdev-4.1.96.
testing/packages/kde4/kde/koffice-1.9.98.5-i486-1.tgz:
Upgraded to koffice-1.9.98.5.
testing/packages/kde4/kde-l10n/kde-l10n-*-4.1.96-noarch-1.tgz:
Upgraded to KDE 4.1.96 l10n packages.
testing/packages/kde4/kde-l10n/koffice-l10n-*-1.9.98.5-noarch-1.tgz:
Upgraded to KOffice 1.9.98.5 l10n packages.
testing/packages/bash-3.2.048-i486-1.tgz:
Upgraded to bash-3.2.048. This might still have issues with backtick
handling. Even though $(…) is a better syntax, a lot of things break if
`…` is not handled correctly. Any feedback on this is appreciated.

Wed Jan 14 20:32:54 CST 2009
a/openssl-solibs-0.9.8i-i486-2.tgz:
Patched to fix the return value EVP_VerifyFinal, preventing malformed
signatures from being considered good. This flaw could possibly allow a
‘man in the middle’ attack.
For more information, see:

http://www.openssl.org/news/secadv_20090107.txt

http://www.ocert.org/advisories/ocert-2008-016.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077

(* Security fix *)
l/svgalib_helper-1.9.25_2.6.27.7-i486-2.tgz: Recompiled against a correct
kernel source tree to fix issues with an invalid module format when loading
the svgalib_helper module on 2.6.27.7-smp systems.
n/bind-9.4.3_P1-i486-1.tgz:
Upgraded to bind-9.4.3-P1.
Fixed checking on return values from OpenSSL’s EVP_VerifyFinal and
DSA_do_verify functions to prevent spoofing answers returned from zones using
the DNSKEY algorithms DSA and NSEC3DSA.
For more information, see:

https://www.isc.org/node/373

http://www.ocert.org/advisories/ocert-2008-016.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0025

(* Security fix *)
n/ntp-4.2.4p6-i486-1.tgz:
[Sec 1111] Fix incorrect check of EVP_VerifyFinal()’s return value.
For more information, see:

https://lists.ntp.org/pipermail/announce/2009-January/000055.html

http://www.ocert.org/advisories/ocert-2008-016.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0021

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077

(* Security fix *)
n/openssl-0.9.8i-i486-2.tgz:
Patched to fix the return value EVP_VerifyFinal, preventing malformed
signatures from being considered good. This flaw could possibly allow a
‘man in the middle’ attack.
For more information, see:

http://www.openssl.org/news/secadv_20090107.txt

http://www.ocert.org/advisories/ocert-2008-016.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077

(* Security fix *)

Mon Jan 5 14:09:18 CST 2009
n/samba-3.2.7-i486-1.tgz:
Upgraded to samba-3.2.7.
This fixes a security issue. From the WHATSNEW.txt file:
“This is a security release in order to address CVE-2009-0022.
o CVE-2009-0022
In Samba 3.2.0 to 3.2.6, in setups with registry shares enabled,
access to the root filesystem (“/”) is granted
when connecting to a share called “” (empty string)
using old versions of smbclient (before 3.0.28).
The original security announcement for this and past advisories can
be found http://www.samba.org/samba/security/”
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0022

(* Security fix *)