Slackers (Slackware current journal) - Slackware – GNU/Linux per SubGeni e Fannulloni

Upgraded: fwbuilder-5.0.0.3568
Added: recorditnow-0.8.1
Added: recordmydesktop-0.3.8.1

ap/screen-4.0.3-i486-3.txz: Rebuilt.
Use a larger buffer for the termtype variable to fix crashes with long
names (e.g. rxvt-unicode-256color).
Thanks to cteg.
l/libpng-1.4.8-i486-1.txz: Upgraded.
Upgraded to libpng-1.2.46 and libpng-1.4.8.
Fixed uninitialized memory read in png_format_buffer()
(Bug report by Frank Busse, related to CVE-2004-0421).
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0421

(* Security fix *)
n/dhcpcd-5.2.12-i486-1.txz: Upgraded.
Sanitize the host name provided by the DHCP server to insure that it does
not contain any shell metacharacters.
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0996

(* Security fix *)
n/samba-3.5.10-i486-1.txz: Upgraded.
Fixed cross-site request forgery and cross-site scripting vulnerability
in SWAT (the Samba Web Administration Tool).
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2522

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2694

(* Security fix *)

Upgraded: arp-scan-1.8.1
Upgraded: clamav-0.97.2
Upgraded: inxi-1.7.22
Upgraded: memcached-1.4.6
Upgraded: mp3diags-1.0.08.053
Upgraded: wine-1.3.25

Upgraded: wireshark-1.6.1

Upgraded: bzr-2.3.4
Added: kamerka-0.8

l/seamonkey-solibs-2.2-i486-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:

http://www.mozilla.org/security/announce/

(* Security fix *)
xap/mozilla-firefox-5.0.1-i486-1.txz: Upgraded.
I guess this is only a fix for Mac OS X, but it’s still 0.0.1 better.
xap/mozilla-thunderbird-5.0-i486-1.txz: Upgraded.
Thanks to dolphin77 for some hints about the ./configure options.
xap/seamonkey-2.2-i486-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:

http://www.mozilla.org/security/announce/

(* Security fix *)

Recompiled: atkmm-2.22.5
Upgraded: blas-3.3.1
Upgraded: cairomm-1.10.0
Upgraded: glibmm-2.28.2
Upgraded: gmic-1.5.0.0
Upgraded: gsl-1.15
Upgraded: gtkmm-2.24.2
Upgraded: inkscape-0.48.2
Upgraded: inxi-1.7.15
Upgraded: numpy-1.6.0
Recompiled: pangomm-2.28.2

n/bind-9.7.3_P3-i486-1.txz: Upgraded.
A specially constructed packet will cause BIND 9 (“named”) to exit,
affecting DNS service. The issue exists in BIND 9.6.3 and newer.
“Change #2912 (see CHANGES) exposed a latent bug in the DNS message
processing code that could allow certain UPDATE requests to crash
named. This was fixed by disambiguating internal database
representation vs DNS wire format data. [RT #24777] [CVE-2011-2464]”
For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464

(* Security fix *)
xap/mozilla-thunderbird-3.1.11-i486-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:

http://www.mozilla.org/security/known-vulnerabilities/thunderbird30.html

(* Security fix *)

Upgraded: john-1.7.8
Upgraded: kile-2.1
Upgraded: libevent-2.0.12
Upgraded: postfix-2.8.4
Upgraded: qtcurve-gtk2-1.8.9
Upgraded: qtcurve-kde4-1.8.8