Slackers (Slackware current journal) - Slackware – GNU/Linux per SubGeni e Fannulloni

a/file-5.07-i486-1.txz: Upgraded.
d/gcc-4.5.3-i486-2.txz: Rebuilt.
d/gcc-g++-4.5.3-i486-2.txz: Rebuilt.
d/gcc-gfortran-4.5.3-i486-2.txz: Rebuilt.
d/gcc-gnat-4.5.3-i486-2.txz: Rebuilt.
d/gcc-java-4.5.3-i486-2.txz: Rebuilt.
d/gcc-objc-4.5.3-i486-2.txz: Rebuilt.
Added –enable-objc-gc option to enable Objective-C garbage collection.
Thanks to Luca De Pandis.

n/bind-9.7.3_P1-i486-1.txz: Upgraded.
This release fixes security issues:
* A large RRSET from a remote authoritative server that results in
the recursive resolver trying to negatively cache the response can
hit an off by one code error in named, resulting in named crashing.
[RT #24650] [CVE-2011-1910]
* Zones that have a DS record in the parent zone but are also listed
in a DLV and won’t validate without DLV could fail to validate. [RT
#24631]
For more information, see:

http://www.isc.org/software/bind/advisories/cve-2011-1910

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1910

(* Security fix *)

Recompiled: alien-8.84
Recompiled: collectd-5.0.0
Recompiled: liboping-1.6.1
Recompiled: rrdtool-1.4.5

a/cxxlibs-6.0.14-i486-2.txz: Rebuilt.
a/glibc-solibs-2.13-i486-5.txz: Rebuilt.
a/glibc-zoneinfo-2.13-noarch-5.txz: Rebuilt.
Upgraded to tzcode2011g and tzdata2011g.
a/kernel-firmware-2.6.38.7-noarch-1.txz: Upgraded.
a/kernel-generic-2.6.38.7-i486-1.txz: Upgraded.
a/kernel-generic-smp-2.6.38.7_smp-i686-1.txz: Upgraded.
a/kernel-huge-2.6.38.7-i486-1.txz: Upgraded.
a/kernel-huge-smp-2.6.38.7_smp-i686-1.txz: Upgraded.
a/kernel-modules-2.6.38.7-i486-1.txz: Upgraded.
a/kernel-modules-smp-2.6.38.7_smp-i686-1.txz: Upgraded.
ap/linuxdoc-tools-0.9.66-i486-9.txz: Rebuilt.
ap/nano-2.3.1-i486-1.txz: Upgraded.
d/gcc-4.5.3-i486-1.txz: Upgraded.
d/gcc-g++-4.5.3-i486-1.txz: Upgraded.
d/gcc-gfortran-4.5.3-i486-1.txz: Upgraded.
d/gcc-gnat-4.5.3-i486-1.txz: Upgraded.
d/gcc-java-4.5.3-i486-1.txz: Upgraded.
d/gcc-objc-4.5.3-i486-1.txz: Upgraded.
d/git-1.7.5.1-i486-1.txz: Upgraded.
d/kernel-headers-2.6.38.7_smp-x86-1.txz: Upgraded.
d/perl-5.14.0-i486-1.txz: Upgraded.
d/subversion-1.6.16-i486-2.txz: Rebuilt.
k/kernel-source-2.6.38.7_smp-noarch-1.txz: Upgraded.
These are the main configuration changes from the 2.6.37.6 kernel in 13.37:
BLK_DEV_LOOP y -> m
HIGHMEM4G y -> n
HIGHMEM64G n -> y
LOG_BUF_SHIFT 15 -> 18
M686 y -> n
MPENTIUMIII n -> y
MOUSE_PS2_ELANTECH n -> y
And, compared with the 2.6.38.4 kernel in 13.37/testing:
LOG_BUF_SHIFT 15 -> 18
M686 y -> n
MPENTIUMIII n -> y
PREEMPT_NONE y -> n
PREEMPT_VOLUNTARY n -> y
SCHED_AUTOGROUP y -> n
It remains to be seen where the PREEMPT_* options will settle in the future.
SCHED_AUTOGROUP still seems sketchy to me, and might be behind some odd
clockskew issues. And, thanks to Carl Wenninger for reporting that the
LOG_BUF_SHIFT setting was less than the kernel defaults and was leading to
a few missing lines at the beginning of ‘dmesg’ output.
kde/kdebindings-4.5.5-i486-3.txz: Rebuilt.
l/apr-1.4.5-i486-1.txz: Upgraded.
This fixes a possible denial of service due to a problem with a loop in
the new apr_fnmatch() implementation consuming CPU.
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1928

(* Security fix *)
l/apr-util-1.3.12-i486-1.txz: Upgraded.
Fix crash because of NULL cleanup registered by apr_ldap_rebind_init().
l/glibc-2.13-i486-5.txz: Rebuilt.
l/glibc-i18n-2.13-i486-5.txz: Rebuilt.
l/glibc-profile-2.13-i486-5.txz: Rebuilt.
l/libidn-1.22-i486-1.txz: Upgraded.
l/pilot-link-0.12.5-i486-4.txz: Rebuilt.
l/virtuoso-ose-6.1.2-i486-2.txz: Rebuilt.
n/gnutls-2.12.5-i486-1.txz: Upgraded.
n/httpd-2.2.19-i486-1.txz: Upgraded.
Revert ABI breakage in 2.2.18 caused by the function signature change
of ap_unescape_url_keep2f(). This release restores the signature from
2.2.17 and prior, and introduces ap_unescape_url_keep2f_ex().
Apache httpd-2.2.18 is considered abandoned. All users must upgrade.
n/irssi-0.8.15-i486-4.txz: Rebuilt.
n/net-snmp-5.6.1-i486-2.txz: Rebuilt.
n/ntp-4.2.6p3-i486-2.txz: Rebuilt.
n/obexftp-0.23-i486-6.txz: Rebuilt.
x/libdrm-2.4.25-i486-1.txz: Upgraded.
x/mesa-7.10.2-i486-1.txz: Upgraded.
x/xf86-video-nouveau-git_20110515_8378443-i486-1.txz: Upgraded.
xap/gv-3.7.2-i486-1.txz: Upgraded.
xap/imagemagick-6.6.9_8-i486-1.txz: Upgraded.
xap/pidgin-2.7.11-i486-2.txz: Rebuilt.
xap/xchat-2.8.8-i486-4.txz: Rebuilt.
isolinux/initrd.img: Rebuilt.
kernels/*: Rebuilt.
usb-and-pxe-installers/usbboot.img: Rebuilt.
extra/linux-2.6.38.7-nosmp-sdk/*: Rebuilt.

Upgraded: bzr-2.3.3
Upgraded: gmic-1.4.9.3
Upgraded: qmmp-0.5.1
Upgraded: wine-1.3.20
Upgraded: wxcam-1.0.8

Added: iftop-1.0pre1
Upgraded: php-apc-3.1.9

Upgraded: minitube-1.4.3
Upgraded: p7zip-9.20.1

Added: uni2ascii-4.18
Upgraded: weechat-0.3.5

l/apr-1.4.4-i486-1.txz: Upgraded.
This fixes a possible denial of service due to an unconstrained, recursive
invocation of apr_fnmatch(). This function has been reimplemented using a
non-recursive algorithm. Thanks to William Rowe.
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419

(* Security fix *)
l/apr-util-1.3.11-i486-1.txz: Upgraded.
n/httpd-2.2.18-i486-1.txz: Upgraded.
This is a bug fix release, but since the upgrades to apr/apr-util require at
least an httpd recompile we opted to upgrade to the newest httpd.

Upgraded: fwbuilder-4.2.2.3541
Added: ostinato-0.4.1
Added: protobuf-2.4.1