Sunday, April 22, 2007

Bunch of Updates

I'm very excited in Slackware-Current, so i forgot to wrote something about Slackware-Stable (sorry for that). Slackware-Current is so fast on updating the packages and it's still changing, mostly in KDE and XOrg packages. Slackware-Stable has also given an update though, which fixes some misconfiguration (Pat thinks that Slackware 11.0 has used /usr as the prefix for KTorrent, but he managed to recompiled it with /opt/kde again), security vulnerabilities (freetype and xine-lib). Here's the full detail of the Slackware-Stable changelog:

Fri Apr 20 13:47:39 CDT 2007
Removed old versions of fc-cache and fc-list.
Somehow a couple of old fontconfig binaries snuck into this package, and prevent fc-cache from working properly at boot (or any other time).
If you've already installed these upgrades, reinstalling the fontconfig package will fix the issue. If you do that, there's no need to reinstall this new x11 package -- it's been fixed so that there's no longer a problem with the package install order (and because those fc-* binaries didn't belong there). Sorry for any inconvenience...
Thanks to Petri Kaukasoina for pointing this out.
(* Fix *)

Thu Apr 19 18:53:08 CDT 2007
patches/packages/fontconfig-2.4.2-i486-1_slack11.0.tgz: Upgraded to the fontconfig-2.4.2 to work better with freetype-2.3.4.

patches/packages/freetype-2.3.4-i486-1_slack11.0.tgz: Fixed an overflow parsing BDF fonts.
For more information, see:
(* Security fix *)

patches/packages/x11-6.9.0-i486-13_slack11.0.tgz: Recompiled.
patches/packages/x11-devel-6.9.0-i486-13_slack11.0.tgz: Recompiled.
patches/packages/x11-xdmx-6.9.0-i486-13_slack11.0.tgz: Recompiled.
patches/packages/x11-xnest-6.9.0-i486-13_slack11.0.tgz: Recompiled.
patches/packages/x11-xvfb-6.9.0-i486-13_slack11.0.tgz: Recompiled.
patches/packages/xine-lib-1.1.6-i686-1_slack11.0.tgz: Upgraded to xine-lib-1.1.6.
This fixes overflows in xine-lib in some little-used media formats in xine-lib < 1.1.5 and other bugs in xine-lib < 1.1.6. The overflows in xine-lib < 1.1.5 could definitely cause an application using xine-lib to crash, and it is theorized that a malicious media file could be made to run arbitrary code in the context of the user running the application.
For more information, see:
(* Security fix *)

Wed Apr 4 13:25:17 CDT 2007
patches/packages/ktorrent-2.1.3-i486-2_slack11.0.tgz: Changed --prefix from /usr to /opt/kde.
(Slackware 11.0 still uses that, right? ;-)
Thanks to arny for pointing this out.

patches/packages/qca-tls-1.0-i486-4_slack11.0.tgz: Recompiled for qt-3.3.8. Sorry to have forgotten about the 3.3.6 plugin location... thanks to Peter Valky for the reminder.