Thursday, July 24, 2008

Security Update: dnsmasq

New security update has been released. This time is dnsmasq package. Along with that, beta version of JDK and JRE has been re-added and placed on /testing because the new version (update 7) does not fix the CUPS printing problem described earlier.
Wed Jul 23 16:39:43 CDT 2008
n/dnsmasq-2.45-i486-1.tgz:
Upgraded to dnsmasq-2.45.
It was discovered that earlier versions of dnsmasq have DNS cache weaknesses that are similar to the ones recently discovered in BIND.
This new release minimizes the risk of cache poisoning.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447
(* Security fix *)

testing/packages/jdk-6u10_beta-i586-1.tgz: Added Java(TM) 2 Platform Standard Edition Runtime Environment Version 6.0 update 10 beta. Evidently the version 6.0 update 7 (stable) packages did not fix the CUPS printing issue, but these beta packages should (but remember, they are BETA releases).

testing/packages/jre-6u10_beta-i586-1.tgz: Added Java(TM) 2 Platform Standard Edition Development Kit Version 6.0 update 10 beta.
Both of these Java(TM) packages are suitable for use on Slackware 12.1 and probably on earlier releases as well.