Posts

Showing posts from January, 2007

Updated BIND packages

Patrick Volkerding has just released an updated of BIND packages (again, it's an upgrade) which fixed two security vulnerabilities. Here's the latest -stable changelog:
Fri Jan 26 22:46:30 CST 2007
patches/packages/bind-9.3.4-i486-1_slack11.0.tgz:
Upgraded to bind-9.3.4. This update fixes two denial of service vulnerabilities where an attacker could crash the name server with specially crafted malformed data.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0493
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0494
(* Security fix *)

Patched Fetchmail Packages

Patrick Volkerding has released a patched fetchmail (it's an upgrade actually, but released under /patches directory) which fixed two security issues. Here's the latest -stable changelog:
Wed Jan 24 14:15:07 CST 2007
patches/packages/fetchmail-6.3.6-i486-1_slack11.0.tgz:
Upgraded to fetchmail-6.3.6. This fixes two security issues. First, a bug introduced in fetchmail-6.3.5 could cause fetchmail to crash. However, no stable version of Slackware ever shipped fetchmail-6.3.5. Second, a long standing bug (reported by Isaac Wilcox) could cause fetchmail to send a password in clear text or omit using TLS even when configured otherwise.
All fetchmail users are encouraged to consider using getmail, or to upgrade to the new fetchmail packages.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5974
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5867
(* Security fix *)

KDE 3.5.6 Released

After few months of development, finally KDE 3.5.6 has been released and there are tons of bug fixes that has been integrated in this version. This is another version towards KDE 4 which will bring major changes into the GNU/Linux graphical window manager and improve user experience in using GNU/Linux as their operating system.

For full changelog of the difference between 3.5.5 and 3.5.6, please refer to the Changelog.

Upgrading to Gaim 2.0.0-beta6

Today i upgrade my Gaim into the latest version, Gaim 2.0.0-beta6. This is the latest beta version towards 2.0.0 final release. The compilation worked just fine, but when i wanted to start Gaim, it won't start. I guess there's something missing, so i started to start the application in terminal so i can analyze the error message and i got this:
process 11434: D-Bus library appears to be incorrectly set up; failed to read machine uuid: Failed to open "/usr/local/var/lib/dbus/machine-id": No such file or directory
See the manual page for dbus-uuidgen to correct this issue.
D-Bus not built with -rdynamic so unable to print a backtrace
Aborted
Hm... strange. I never got this problem when i was using beta5, so i guess this was added in beta6. So i looked at dbus-uuidgen manual page as instructed and i see that in order to have /usr/local/var/lib/dbus/machine-id, we should execute dbus-uuidgen --ensure as root and after you did that, you can start Gaim normally again.

I hope t…

Flash Player For Linux

Good news from Adobe who has just released a flash player 9.x for Linux (originally it only released for Windows). Here's the news from InformationWeek:
Adobe Systems released the Linux edition of its Flash Player 9 on Wednesday to round out the popular browser plug-in's support for the three major desktop operating systems.

The developer boasted that Player 9 processes Flash scripts 10 times faster than its predecessor, features improved memory management, and adds advanced graphics, video, and text tools.

The faster-running scripts come courtesy of the ActionScript Virtual Machine (AVM2), which made news in November when Adobe contributed AVM2 source code to the Mozilla Foundation. Mozilla will use the code in its own Tamarin, an open source project designed to beef up the scripting engine within Firefox and Thunderbird.

Flash Player 9 debuted for Windows and Mac OS X more than six months ago.

"Now the Linux community has full access to the high volume of Flash content and a…

Updated IPW2200 and IEEE80211

IPW2200 and IEEE80211 project has update their driver to the latest version which fixed some bugs and API changes in 2.6.19. This fixes has also been integrated in the kernel itself, so if you want to use the driver without having to install it manually, just use the latest kernel and make sure that you set the options on.

Broken NVidia Driver

Last night i decided to upgrade my NVIdia driver to the latest version (9746). The installation was done perfectly and i could start the graphical screen normally like i had before. The problem started when i wanted to log off my account and switch back to text mode (i used run level 3 as the default in my Slackware system). Instead of switching back to text mode, the screen was blurred (like in one of KDE's screen saver) and it was similar like an old VGA cards. There's nothing i could do (even the keyboard didn't respond at all), so i had to use the power button to shut down the system.

Next, i tried to reproduce the bug again and it happened again, so i made a conclusion that the latest NVIdia driver is broken (or have some glitches inside), so i decided to revert back to previous version which is perfectly working before i upgrade to the latest version. Luckily i haven't delete the packages, since i usually delete them after i managed to upgrade.

Upgraded to 2.6.19.2

Last night i upgraded my kernel to the latest version, 2.6.19.2 after downloading it at morning. Since it's still has the same base, i don't have to answer new questions that always arise when new final version of kernel being released by Linus.

Adobe Reader 7.0.9

Adobe has released an update to Adobe Reader 7.0.x version for Linux users. It has 7.0.9 version, so it's not the latest Adobe Reader version (Windows version has reached 8.x version currently). You can download the Slackware packages via LinuxPackages or if you prefer to download directly from Adobe site, please have a look at Adobe's FTP site.

Kernel 2.6.19.2 Released

Another release of -stable version of 2.6.19.x kernels. This time, it includes quite a lot of patches and bug fixes. Here's the announcement, taken from LWN:
We (the -stable team) are announcing the release of the 2.6.19.2 kernel.
There's a long list of fixes, not the least of which is the data
corruption fix from Linus and some security fixes:

d4ea7f9f: Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)
eaca4fd8: handle ext3 directory corruption better (CVE-2006-6053)
fe89cf78: corrupted cramfs filesystems cause kernel oops (CVE-2006-5823)
8d312ae1: ext2: skip pages past number of blocks in ext2_find_entry (CVE-2006-6054)
54e25b04: VM: Fix nasty and subtle race in shared mmap'ed page writeback
e26353af: Fix incorrect user space access locking in mincore() (CVE-2006-4814)

The diffstat and short summary of the fixes are below.

I'll also be replying to this message with a copy of the patch between
2.6.19.1 and 2.6.19.2, as it is small enough to do so.

The updated 2.6…

Wesnoth 1.2 Released

Image
After several RCs, finally the final version of Wesnoth 1.2 has been released. Please note that 1.2 is not backward compatible with 1.0.x release, so when you decided to use this version, you may have to install it in other places, or delete the preferences of older version. This may have fixed 99.99% bugs that you may find when playing 1.2 on 1.0 saved data (it's also mentioned in Wesnoth Forum)

Please look for the Changelog or if you wish to look for complete changelog.

Shinny New Slackware

Finally i decided my mind to re-install my Slackware on my PC because i forgot what updates that i have made to this version, because it has 10.1 as the base version and i always follow the -current tree for some time, and when Slackware 11.0 comes out, i still left it behind and use Windows in most of my time in Jogja, but things changed, so my PC needs some changes also. I have postponed this upgrade for several times, so i think this is the best time to upgrade it.

The installation was very quick and simple as usual. Slackware in my opinion is the simplest Linux distribution since it's menu-based installer provide simple and meaningful information for the users (as long as they are willing to read them and follow the instructions given). Maybe the interface is not as good as other distribution who has migrate to GUI-based interface, but it's definitely slacky and very fast.

I used the default interface at boot prompt (only pressing ENTER), so it installed 2.4.33.3 kernel rath…