Posts

Showing posts from May, 2009

Default Kernel Stock Upgraded

Today, the default kernel stock supported on Slackware-Current has been upgraded to 2.6.29.4. While the next Linux kernel (2.6.30) is still on development and it's on the way, there's no sign (for now) to include them on -Current tree as it has to be tested and passed some internal testing from Slackware crew first. Probably after 2.6.30.1 or .2, it will be considered as stable, as usually the first final release of next version contains lots of features and sometimes bugs are not yet fixed due to limited time frame for testing.

Here's the latest -Current changelog:
Fri May 29 17:24:03 CDT 2009
a/kernel-firmware-2.6.29.4-noarch-1.tgz: Upgraded to Linux 2.6.29.4 firmware.

a/kernel-generic-2.6.29.4-i486-1.tgz: Upgraded to Linux 2.6.29.4.

a/kernel-generic-smp-2.6.29.4_smp-i686-1.tgz: Upgraded to Linux 2.6.29.4.

a/kernel-huge-2.6.29.4-i486-1.tgz: Upgraded to Linux 2.6.29.4.

a/kernel-huge-smp-2.6.29.4_smp-i686-1.tgz: Upgraded to Linux 2.6.29.4.

a/kernel-modules-2.6.29.4-i486-1.tgz: Upg…

Security Update: Pidgin

One security update has been released today which is pidgin. It has been upgraded to 2.5.6 along with other updates as well, such as MPlayer, kbd, and linuxdocs-tools. Here is the -Current changelog:
Tue May 26 19:50:58 CDT 2009
a/kbd-1.15-i486-2.txz: Fixed directory perms in the documentation.

ap/linuxdoc-tools-0.9.56-i486-2.txz: Added missing asciidoc filters. Thanks to 'oneforall' for the report.

xap/MPlayer-r29324-i486-1.txz: Upgraded to MPlayer-r29324. Enable runtime CPU detection only for x86 and x86_64.

xap/pidgin-2.5.6-i486-1.txz: Upgraded to pidgin-2.5.6.
This version fixes security issues that could lead to a denial of service or the execution of arbitrary code as the user running Pidgin.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1373
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1374
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1375
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1376
(* Security fix *)

Updated MPlayer

Image
Two updates gets in on public testing today, MPlayer and cryptsetup. MPlayer, even though it hasn't got 1.0 final release, it's still considered stable and on active development. Many people like this application (including me). I hope you like it too

Here's the rather small changes in -Current:
Mon May 25 18:17:48 CDT 2009
a/cryptsetup-1.0.6-i486-1.txz: Upgraded to cryptsetup-1.0.6.

xap/MPlayer-r29322-i486-1.txz: Upgraded to revision r29322.

isolinux/initrd.img: Rebuilt.

usb-and-pxe-installers/usbboot.img: Rebuilt.

Fixing bind on Installation

Some people who tested Slackware-Current ISO have reported that the installation will hang during bind installation (thread can be followed at LQ). Today, a (possibly) fix has been released on -Current. If we look at the changelog which is very short (only one line), this might be the solution to fix bind problem during installation.

Here's the changelog:
Sat May 23 03:27:41 CDT 2009
n/bind-9.4.3_P2-i486-2.txz: Use /dev/urandom to stop blocking on install.

MPlayer Gets In

What a surprise, MPlayer has gotten its way to Slackware-Current eventhough it comes with some restrictions. There are several new packages as well in today's changelog like snownews, electricsheep, and mplayerthumbs.

Here are the changelog for today:
Tue May 19 15:36:49 CDT 2009
a/findutils-4.4.1-i486-1.txz: Upgraded to findutils-4.4.1.

a/kbd-1.15-i486-1.txz: Upgraded to kbd-1.15. Thanks to Stuart Winter.

a/mkinitrd-1.3.4-i486-1.txz: Updated the included keymaps to kbd-1.15.

a/pciutils-3.1.2-i486-1.txz: Upgraded to pciutils-3.1.2.

ap/mc-20090514_git-i486-1.txz: Switched to a GIT repo version with support for xz/lzma related formats, and better UTF8 support.
Thanks to David Somero for getting the initial xz patches submitted upstream.

ap/mysql-5.0.81-i486-1.txz: Upgraded to mysql-5.0.81.

ap/sqlite-3.6.14-i486-1.txz: Upgraded to sqlite-3.6.14.

kde/mplayerthumbs-1.2-i486-1.txz: Added mplayerthumbs-1.2. This plugin for KDE uses MPlayer to provide video thumbnailing support for Dolphin and Konqu…

Slackware 64Bit

Image
Big announcement on Slackware's official website today. No... no... it's not the upcoming release of Slackware 13.0, but a new version of Slackware64. What is this anyway?

Up to yesterday, people who uses 64-bit processors will not gain any benefit from Slackware's packages are they are tuned up for 32-bits. Their only hopes are from Slamd64 project. Well, now the official Slackware64 is on the way and it has been synced with Slackware-Current, so changes in Slackware-Current will now be available also on Slackware64. You will find a new directory under Slackware's mirror called slackware64-current, for example like this one: http://slackware.osuosl.org/slackware64-current/

Thanks to Patrick and Slackware crew who have done a great job testing and making it possible

Security Update: Cyrus-sasl

One security package has been released today and several other packages as well. Not too much interesting, but important to update as well. Here are the changelog:
Thu May 14 18:12:48 CDT 2009
ap/linuxdoc-tools-0.9.56-i486-1.txz: Upgraded to linuxdoc-tools-0.9.56, and upgrades to various other components. Thanks to Stuart Winter.

n/cyrus-sasl-2.1.23-i486-1.txz:
Upgraded to cyrus-sasl-2.1.23.
This fixes a buffer overflow in the sasl_encode64() function that could lead to crashes or the execution of arbitrary code.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688
(* Security fix *)

extra/slacktrack/slacktrack-2.02-i486-1.txz: Upgraded to slacktrack-2.02.
Thanks to Stuart Winter.

Recompressed expect-5.44.1.11-i486-3.txz, gv-3.6.7-i486-1.txz, pidgin-2.5.5-i486-3.txz, and xpdf-3.02pl3-i486-1.txz.
These had been mistakenly compressed using xz -9.

Working With txz Files

Some people asked in Forum and in the mailing list about how do they install txz files which is new on Slackware-Current? Apparently, if you are following -Current, it won't be a problem for you as you already have all the packages needed to install txz files.

The problems may arise when you try to mix -Current and -Stable packages. It's NOT recommended because packages in -Current are build with different toolchain than in -Stable and due to changes here and there, it *might* break compatibilities with -Stable.

But, if you need to work with txz files, you will need to update following packages:
targzippkgtoolfilecoreutilslessxz
Best option is to upgrade fully to -Current and you won't have problem with txz.

Two Minor Changes

Two updates has been released today, which are slacpkg and expect. The changes are relatively small, but it's advisable to upgrade if you used those applications. Here are the changes from the Changelog:
Tue May 12 12:01:17 CDT 2009
ap/slackpkg-2.71.2-noarch-1.tgz: Upgraded to slackpkg-2.71.2-noarch-1.
This version contains a bug fix for upgrading rpm2tgz. Thanks to Niels Horn.

tcl/expect-5.44.1.11-i486-3.txz: Fixed version conflict with expectk and newer versions of Tcl/Tk. Changed the command interpreter in scripts that use expectk from #!/bin/sh to #!/usr/bin/tclsh. Thanks to Daniel Levai.

Signature Problem Fixed

Image
For the last few weeks, i had problems with my digital signature. I used FireGPG to add digital signature to every email i sent using Firefox because it is an extension. At first, i thought it was the extension who caused the problem, but i didn't see any update on the extension itself, so i assume it isn't the application (or else people who used the extension would complaint). I had to disabled the signature for a while or else people will think that somebody has masqueraded as me.

Yesterday, a solver has been released under -Current tree. In fact, it's all due to upgraded GnuTLS in -Current which was broken. See the changelog here:
n/gnutls-2.6.6-i486-1.txz: Upgraded to gnutls-2.6.6.
- Corrected double free on signature verification failure.
Reported by Miroslav Kratochvil .
- Noticed when investigating the previous GNUTLS-SA-2009-1 problem.
All DSA keys generated using GnuTLS 2.6.x are corrupt.After upgrading to this version, my problem is now gone and i can start adding my …

Keeping up-to-date

Image
If you follows -Current tree, then you must be ready to update lots of thing when new batch comes out as it may contain huge changes from previous one. One simple way to keep your mirror or local repository up-to-date with the tree is by the use of rsync. AlienBOB has written several scripts and one of them can be used to set up a repository of the -Current tree using Rsync. All you need to do is set up your local directory and point to the nearest mirror on your location and execute the script.

Since almost all of the packages have been converted to .txz formats, i used this script to download them all and put them on my local repository. Very easy to setup and the main point is that it works

Security Updates: GnuTLS and xpdf

Sorry for the long updates, since i was out of town for about four days and without proper Internet access to update this blog with the latest update from Slackware development news. Well, the good news is that i'm back at home with good Internet access and ready to tell you the updates. Two new security updates has been released since few days ago, which were GnuTLS and xpdf. Especially for GnuTLS, it will fix the problem i have been encountering for the last few weeks where i couldn't get my signature verified by GnuPG. I used GetFirefGPG extension for Firefox to add my digital signature and when it's posted, i always got a wrong signature message. I hope this fixed the problem.

Other good news is that next Slackware release will have new package format, called txz. It's a standard tar archive, but instead of using gzip, the new format will use lzma compression algorithm which provides better results without breaking the performance. As you might see, almost all of th…

Upgrading to OOo 3.1.0

Image
OpenOffice.org 3.1.0 has been released (unofficially for now) and i have managed to get it from a mirror. SlackBuilds script are not yet updated for this version and you can't use SlackBuild script used for 3.0.1 for this version. It must be updated again by Robby in order to work with this new version, so i'm just using rpm2tgz to convert it to tgz format and install it using installpkg (after removing previous version using removepkg).

As always, using rpm2tgz have a drawbacks that there will be a file name truncation leading to functionality loss. This is the result of using older version of tar and you have to deal with it yourself. Here's how to solve that problem: run
find /opt/openoffice.org* -name "*.xc"
I got this as the result in my system

/opt/openoffice.org/basis3.1/share/registry/data/org/openoffice/Office/UI/WriterFormWindowState.xc
/opt/openoffice.org/basis3.1/share/…

Pidgin-Facebookchat

Image
If you are using Pidgin and you have Facebook account, then you can chat with your friends without having to open up Facebook site. All you need is pidgin-facebookchat made by Eion Robb and many other contributors which will integrate as plugins for Pidgin and enables you to have a chat with your friends that logged in Facebook.

The installation is very straightforward. All you need is to download and extract the archive and put the appropriate .so files into Pidgin's plugin directory. It's all mentioned at the document. Next create a new account using Facebook type and voila... you are now connected to FB via Pidgin. You can set your status also via Pidgin. It's a nice plugin for Pidgin.

Another Poll

Image
Another round for poll in SlackBlogs. Slackware-Current now runs on 2.6.29.x and Linux kernel 2.6.30 is on active development and it's estimated being released in one or two months, meaning that there's still a chance that 2.6.31 may get into the default kernel stocks supported by the next Slackware release.

This month's poll is about what kernel version should be used for the next Slackware release. I know it's very early to state about the stability of 2.6.30 or even 2.6.31, but since the time frame for Slackware next release is also unpredictable, we might have that chance also.

So, give your votes based on the options available

Poll Result

I, as always, being a little busy during weekend, so i forgot to announce the winner of last month's poll. I'm asking about the time frame estimation for the next Slackware release and here are the results:
In the next three months 18 (27%) In the next six months 23 (34%) Next year 1 (1%) I believe in Pat's decision 14 (21%) I don't care, as long as it's stable 10 (15%)
If the poll is accurate, then we will see next Slackware in Q2/Q3 of this year, but as always, the final decision is on Patrick himself. Only he knows when will Slackware is ready to be released.

Slackpkg Fix

One small fix has been deployed for Slackpkg which fixed the directory permission. I think many packages are still being tested before it's released for public testing

Slackpkg and Python Effects

Slackpkg, another tool which enhanced the package management business on Slackware has been updated to 2.71.1 which supports the new package compression formats. It's now sync with pkgtool which already got the update.

Several applications were still linked with Python 2.5.x, and with the latest batch, some of them (alsa-lib, kdeedu, and kdeutils) are recompiled with Python 2.6.2. On my system, wicd still left some "trash" files on /usr/lib/python-2.5/site-packages/wicd which i think must be removed after it has been moved to /usr/lib/python-2.6/site-packages/wicd. Probably the next build will fix that problem.

Security Update: Ruby

Image
Another security-related package released and this time is Ruby. Along with this update, several application gets recompiled due to Python upgraded to 2.6.2. Several other application gets an upgrade too, so it's getting more and more exciting to see -Current branch

Here's the latest -Current changelog:
Thu Apr 30 21:00:57 CDT 2009
a/file-5.00-i486-2.tgz: Added xz file magic. Thanks to Robby Workman.

ap/hplip-3.9.4b-i486-1.tgz: Upgraded to hplip-3.9.4b.

ap/rpm-4.7.0-i486-1.tgz: Upgraded to rpm-4.7.0. Thanks to Robby Workman.

ap/vim-7.2.166-i486-1.tgz: Upgraded with latest upstream patches.

d/mercurial-1.2.1-i486-1.tgz: Upgraded to mercurial-1.2.1.

d/python-2.6.2-i486-1.tgz: Upgraded to python-2.6.2.
Thanks to Robby Workman.

d/ruby-1.8.7_p160-i486-1.tgz: Upgraded to ruby-1.8.7-p160.
This update fixes a DoS in REXML.
For details, see:
http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/
(* Security fix *)

kde/guidance-power-manager-4.2.2-i486-2.tgz: Rebuilt for python-2.6.2…