Slackers (Slackware current journal) - Slackware – GNU/Linux per SubGeni e Fannulloni

l/libpng-1.4.3-i486-1.txz: Upgraded.
Upgraded to libpng-1.2.44 and libpng-1.4.3.
This fixes out-of-bounds memory write bugs that could lead to crashes
or the execution of arbitrary code, and a memory leak bug which could
lead to application crashes.
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2249

(* Security fix *)
l/libtiff-3.9.4-i486-1.txz: Upgraded.
This fixes image structure handling bugs that could lead to crashes or
execution of arbitrary code if a specially-crafted TIFF image is loaded.
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1411

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2065

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2067

(* Security fix *)

xap/mozilla-firefox-3.6.6-i686-1.txz: Upgraded.
This changes the crash protection feature to increase the timeout
before a plugin is considered non-responsive.

ap/ghostscript-8.71-i486-3.txz: Rebuilt.
Merged an upstream patch from Till Kamppeter to fix printing black pages
with CUPS and certain printers.

a/cups-1.4.4-i486-1.txz: Upgraded.
Fixed a memory allocation error in texttops.
Fixed a Cross-Site Request Forgery (CSRF) that could allow a remote
attacker to reconfigure or disable CUPS if a CUPS admin logged into the
web interface visited a specially-crafted website.
Fixed a bug where uninitialized memory from the cupsd process could
reveal sensitive information.
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0540

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0542

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1748

(* Security fix *)
d/ccache-3.0-i486-1.txz: Upgraded.
d/gdb-7.1-i486-2.txz: Rebuilt.
Added –with-python=no to fix errors about missing backtrace.py, which is
not yet in stable glib. Thanks to David Woodfall.
l/imlib-1.9.15-i486-7.txz: Rebuilt.
This fixes problems linking with libpng.
l/seamonkey-solibs-2.0.5-i486-1.txz: Upgraded.
n/bind-9.7.1-i486-1.txz: Upgraded.
This fixes possible DNS cache poisoning attacks when DNSSEC is enabled
and checking is disabled (CD).
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097

(* Security fix *)
Thanks to Rob McGee for help with the upgrade to BIND 9.7.x.
xap/mozilla-firefox-3.6.4-i686-1.txz: Upgraded.
This fixes some security issues.
For more information, see:

http://www.mozilla.org/security/known-vulnerabilities/firefox36.html

(* Security fix *)
xap/mozilla-thunderbird-3.1-i686-1.txz: Upgraded.
(* Security fix *)
xap/seamonkey-2.0.5-i486-1.txz: Upgraded.
This release fixes some more security vulnerabilities.
For more information, see:

http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html

(* Security fix *)

testing/packages/btrfs-progs-20100618-i486-1.txz:
Added btrfs-convert. Thanks to mancha.

ap/alsa-utils-1.0.23-i486-2.txz: Rebuilt.
Patched alsaconf to generate /etc/modprobe.d/sound.conf.
Thanks to Alan Hicks.
kde/kdebase-workspace-4.4.3-i486-2.txz: Rebuilt.
Patched xinitrd.kde to launch with ck-launch-session only if the
DESKTOP_SESSION variable is empty. This fixes a bug where a ck-aware
login manager such as KDM may have already launched a ConsoleKit
session, causing the xinitrc to launch another one and marking the
first one inactive. This can lead to auth failures.
Thanks to Robby Workman.
n/samba-3.5.3-i486-1.txz: Upgraded.
xap/xfce-4.6.1-i486-9.txz: Rebuilt.
Patched xinitrd.xfce to launch with ck-launch-session only if the
DESKTOP_SESSION variable is empty. Thanks to Robby Workman.