Search
Menu
By tag/category
|
Latest packages from official slackware-current
|
wqy-zenhei-font-ttf 0.6.26_0 - 1
|
01 Jul 08, 20:29
|
x |
Upgraded to wqy-zenhei-font-ttf-0.6.26-0.
Thanks to the WenQuanYi font authors for producing such a high-quality font.
|
![[DE] Download](images/download_de.png)
![[BG] Download](images/download_bg.png)
|
|
|
xorg-server 1.4.2 - 1
|
01 Jul 08, 20:29
|
x |
Upgraded xorg-server to address denial of service and possible arbitrary
code execution flaws reported in xorg-server 1.4 prior to 1.4.2.
For more information about the issues patched, please refer to:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1377
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1379
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2360
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2361
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2362
(* Security fix *)
|
|
|
|
|
gnutls 2.2.5 - 1
|
28 Jun 08, 23:52
|
n |
Upgraded to GnuTLS version 2.2.5.
This updated package fixes bugs which can lead to a denial of service
(DoS) in programs linked with GnuTLS. Thanks to Ossi Herrala and
Jukka Taimisto from the CROSS project at Codenomicon Ltd. for finding
and reporting the problems, and to Simon Josefsson and
Nikos Mavrogiannopoulos for researching the issues and developing
patches, and to Andreas Metzler for noting and reporting a problem with
one of the original patches.
For more information about the issues patched, please refer to:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1950
(* Security fix *)
|
|
|
|
|
ruby 1.8.6_p230 - 1
|
28 Jun 08, 06:17
|
d |
Upgraded to ruby-1.8.6-p230.
This fixes a number of security related bugs in Ruby which could lead to a
denial of service (DoS) condition or allow execution of arbitrary code.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2662
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2663
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2664
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2725
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2726
(* Security fix *)
|
|
|
|
|
mozilla-firefox 3.0 - 1
|
18 Jun 08, 21:42
|
xap |
Upgraded to firefox-3.0.
Congratulations to the Firefox people for the nice improvements, as well as
such an impressive number of first-day downloads. :-) We didn't put this
out yesterday, figuring it was better to let people download from them...
|
|
|
|
|
jdk 6u10_beta - 1
|
14 Jun 08, 18:14
|
extra/jdk-6 |
Upgraded to Java(TM) 2 Platform Standard
Edition Development Kit Version 6.0 update 10 beta. This is a BETA VERSION
but should fix a problem with CUPS printing. See above.
|
|
|
|
|
jre 6u10_beta - 1
|
14 Jun 08, 18:14
|
slackware/l |
Upgraded to Java(TM) 2 Platform Standard
Edition Runtime Environment Version 6.0 update 10 beta. This is a BETA
VERSION and may contain problems, but it may also fix an issue with CUPS
printing. If this fix is important to you, it may be worth giving this
package a try at your own risk. For now, -current seems like the only prudent
place for this package. Hopefully we will see official 6u10 releases soon.
|
|
|
|
|
samba 3.0.30 - 1
|
29 May 08, 02:48
|
n |
Upgraded to samba-3.0.30.
This is a security release in order to address CVE-2008-1105 ("Boundary
failure when parsing SMB responses can result in a buffer overrun").
For more information on the security issue, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1105
(* Security fix *)
|
|
|
|
|
mkinitrd 1.3.2 - 3
|
28 May 08, 05:12
|
a |
Initialize RAID earlier so that the combination
of RAID+LUKS+LVM works. Thanks to Eric Hameleers.
|
|
|
|
|
rdesktop 1.6.0 - 1
|
28 May 08, 05:12
|
xap |
Upgraded to rdesktop-1.6.0.
According to the rdesktop ChangeLog, this contains a:
"* Fix for potential vulnerability against compromised/malicious servers
(reported by iDefense)"
This package build also includes the new alsa driver (--with-sound=alsa),
though I couldn't get local sound redirection. Perhaps it was just my
command line error though, so the driver remains included for testing.
For more information on the security issue, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1801
(* Security fix *)
|
|
|
|
|
slackpkg 2.70.4 - 1
|
15 May 08, 00:22
|
extra/slackpkg |
Upgraded to slackpkg 2.70.4-noarch-1. This fixes a bug where the "x86"
ARCH was not recognized in a package name, leading to the kernel-headers
package not getting properly upgraded. Thanks to Piter Punk! -:)
|
|
|
|
|
mozilla-thunderbird 2.0.0.14 - 1
|
07 May 08, 23:13
|
xap |
Upgraded to thunderbird-2.0.0.14.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#thunderbird
(* Security fix *)
|
|
|
|
|
php 5.2.6 - 1
|
07 May 08, 23:13
|
n |
Upgraded to PHP 5.2.6.
This version of PHP contains many fixes and enhancements. Some of the fixes
are security related, and the PHP release announcement provides this list:
* Fixed possible stack buffer overflow in the FastCGI SAPI identified by
Andrei Nigmatulin.
* Fixed integer overflow in printf() identified by Maksymilian Aciemowicz.
* Fixed security issue detailed in CVE-2008-0599 identified by Ryan Permeh.
* Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz.
* Properly address incomplete multibyte chars inside escapeshellcmd()
identified by Stefan Esser.
* Upgraded bundled PCRE to version 7.6
When last checked, CVE-2008-0599 was not yet open. However, additional
information should become available at this URL:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0599
The list reproduced above, as well as additional information about other
fixes in PHP 5.2.6 may be found in the PHP release announcement here:
http://www.php.net/releases/5_2_6.php
|
|
|
|
|
kernel-generic 2.6.24.5 - 2
|
01 May 08, 03:36
|
a |
Patched to fix a security issue in
fs/dnotify.c. The use of dnotify (largely replaced by inotify on 2.6.x
systems) could lead to a local DoS, or possibly a local root hole. We said
we wouldn't make changes now unless something was "critical" -- and it seems
we got what we wished for. ;-) This flaw will also be addressed in the
kernels for previous releases as soon as possible. The patch itself may be
found in source/k/linux-2.6.24.5-CVE-2008-1375-patch/.
For additional information (when the CVE candidate is opened), see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1375
All the kernel packages below should also be considered security fixes.
(* Security fix *)
|
|
|
|
1 2 3 4 5 6 7 8 9 10  
|
|
Latest package updates
Latest official packages
Login
|
