Bluewhite64 - Pure 64-bit GNU/Linux: Bluewhite64-current Changelog

Thu Jul 3 00:14:20 EEST 2008
X software series/wqy-zenhei-font-ttf-0.6.26_0-noarch-1.tgz:
Upgraded to wqy-zenhei-font-ttf-0.6.26-0.
X software series/xorg-server-1.4.2-x86_64-1.tgz:
Upgraded xorg-server to address denial of service and possible arbitrary
code execution flaws reported in xorg-server 1.4 prior to 1.4.2.
For more information about the issues patched, please refer to:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1377
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1379
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2360
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2361
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2362
[*** Security fix ***]
X software series/xorg-server-xnest-1.4.2-x86_64-1.tgz:
Security fixes (see CVE entries above).
[*** Security fix ***]
X software series/xorg-server-xvfb-1.4.2-x86_64-1.tgz:
Security fixes (see CVE entries above).
[*** Security fix ***]
+--------------------------+
Mon Jun 30 13:27:37 EEST 2008
N software series/gnutls-2.2.5-x86_64-1.tgz:
Upgraded to GnuTLS version 2.2.5.
This updated package fixes bugs which can lead to a denial of service
(DoS) in programs linked with GnuTLS.
For more information about the issues patched, please refer to:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1950
[*** Security fix ***]
+--------------------------+
Sat Jun 28 12:34:11 EEST 2008
D software series/ruby-1.8.6_p230-x86_64-1.tgz:
Upgraded to ruby-1.8.6-p230.
This fixes a number of security related bugs in Ruby which could lead to a
denial of service (DoS) condition or allow execution of arbitrary code.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2662
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2663
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2664
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2725
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2726
[*** Security fix ***]
+--------------------------+
Thu Jun 26 11:15:05 EEST 2008
A software series/pciutils-2.2.10-x86_64-2.tgz: Recompiled with -fPIC.
N software series/libassuan-1.0.4-x86_64-2.tgz: Recompiled with -fPIC.
Thanks to Kenjiro Tanaka for reporting that this two packages need to be
compiled with -fPIC for KDE 4.x

.
+--------------------------+
Fri Jun 20 23:15:58 EEST 2008
XAP software series/mozilla-firefox-3.0-x86_64-1.tgz: Upgraded to firefox-3.0.
A software series/getty-ps-2.1.0b-x86_64-1.tgz: Added getty-ps-2.1.0b.
Thanks to Adrian Virgil-Teaca for helping to compile this

.
+--------------------------+
Thu May 29 20:03:29 EEST 2008
N software series/samba-3.0.30-x86_64-1.tgz: Upgraded to samba-3.0.30.
This is a security release in order to address CVE-2008-1105 ("Boundary
failure when parsing SMB responses can result in a buffer overrun").
For more information on the security issue, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1105
[***Security fix ***]
+--------------------------+
Thu May 29 00:28:18 EEST 2008
A software series/mkinitrd-1.3.2-x86_64-3.tgz: Initialize RAID earlier so that
the combination of RAID+LUKS+LVM works.
XAP software series/rdesktop-1.6.0-x86_64-1.tgz: Upgraded to rdesktop-1.6.0.
According to the rdesktop ChangeLog, this contains a:
"* Fix for potential vulnerability against compromised/malicious servers
(reported by iDefense)"
This package build also includes the new alsa driver (--with-sound=alsa),
For more information on the security issue, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1801
[*** Security fix ***]
EXTRA software/ktorrent/ktorrent-2.2.7-x86_64-1.tgz: Upgraded to ktorrent-2.2.7.
+--------------------------+
Thu May 8 18:48:25 EEST 2008
N software series/php-5.2.6-x86_64-1.tgz: Upgraded to PHP 5.2.6.
This version of PHP contains many fixes and enhancements. Some of the fixes
are security related, and the PHP release announcement provides this list:
* Fixed possible stack buffer overflow in the FastCGI SAPI identified by
Andrei Nigmatulin.
* Fixed integer overflow in printf() identified by Maksymilian Aciemowicz.
* Fixed security issue detailed in CVE-2008-0599 identified by Ryan Permeh.
* Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz.
* Properly address incomplete multibyte chars inside escapeshellcmd()
identified by Stefan Esser.
* Upgraded bundled PCRE to version 7.6
When last checked, CVE-2008-0599 was not yet open. However, additional
information should become available at this URL:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0599
The list reproduced above, as well as additional information about other
fixes in PHP 5.2.6 may be found in the PHP release announcement here:
http://www.php.net/releases/5_2_6.php
[*** Security fix ***]
XAP software series/mozilla-thunderbird-2.0.0.14-x86_64-1.tgz:
Upgraded to thunderbird-2.0.0.14.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#thunderbird
[*** Security fix ***]
+--------------------------+
Sat May 3 09:51:15 EEST 2008
Bluewhite64 Linux 12.1 released as stable! THANKS to all for helping with this release!
Don't forget to read the CHANGES_AND_HINTS.TXT file for more information
about changes and hints. I hope you find Bluewhite64 12.1 to be useful!

EXTRA software/ia32-emulation/ia32-libX11-with-xcb/ia32-libX11-1.1.4-x86_64-1.tgz:
Added libX11 compiled with xcb. Use this package only if you are having
problems running 32-bit GUI applications.
+--------------------------+
Fri May 2 12:07:05 EEST 2008
A software series/kernel-test-huge-2.6.25.1-x86_64-1.tgz:
Upgraded to Linux 2.6.25.1 SMP test.s (full-featured test) kernel.
A software series/kernel-modules-2.6.25.1-x86_64-1.tgz:
Upgraded to Linux 2.6.25.1 test SMP kernel modules.
TESTING/packages/kernel-test/kernel-test-headers-2.6.25.1-x86_64-1.tgz:
Upgraded to Linux 2.6.25.1 test SMP kernel headers.
TESTING/packages/kernel-test/kernel-test-source-2.6.25.1-noarch-1.tgz:
Upgraded to Linux 2.6.25.1 test SMP kernel source package.
kernels/test.s/*: Upgraded to huge.s 2.6.25.1 test kernel.
isolinux/initrd.img: Replaced the test kernel modules with 2.6.25.1 version.
usb-and-pxe-installers/: Replaced the test kernel modules with 2.6.25.1 version.
+--------------------------+
Thu May 1 23:26:52 EEST 2008
Bluewhite64 12.1 RC4. The last RC?

.
A software series/kernel-huge-2.6.24.5-x86_64-2.tgz: Patched to fix a security issue in
fs/dnotify.c. The use of dnotify (largely replaced by inotify on 2.6.x
systems) could lead to a local DoS, or possibly a local root hole.
This flaw will also be addressed in the kernels for previous releases
as soon as possible. The patch itself may be found in
source/k/linux-2.6.24.5-CVE-2008-1375-patch/. For additional information
(when the CVE candidate is opened), see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1375
All the kernel packages below should also be considered security fixes.
[*** Security fix ***]
A software series/kernel-test-huge-2.6.25-x86_64-2.tgz: Patched and recompiled.
A software series/kernel-modules-2.6.24.5-x86_64-2.tgz: Patched and recompiled.
A software series/kernel-test-modules-2.6.25-x86_64-2.tgz: Patched and recompiled.
D software series/kernel-headers-2.6.24.5-x86_64-2.tgz: Rebuilt from a patched source tree.
K software series/kernel-source-2.6.24.5-noarch-2.tgz: Patched (leaving dnotify.c.orig
for comparison and/or reverting to patch up to a newer kernel later).
L software series/svgalib_helper-1.9.25_2.6.24.5-x86_64-2.tgz: Recompiled.
EXTRA software/slackpkg/slackpkg-2.70.3-noarch-1.tgz: Upgraded to
slackpkg-2.70.3-noarch-1 (release ready). Thanks to Piter Punk! -:)
TESTING/packages/kernel-test/kernel-test-headers-2.6.25-x86_64-2.tgz:
Rebuilt from a patched source tree.
TESTING/packages/kernel-test/kernel-test-source-2.6.25-noarch-2.tgz: Patched (leaving
dnotify.c.orig for comparison and/or reverting to patch up to a newer kernel later).
kernels/huge.s/*: Patched and recompiled.
kernels/test.s/*: Patched and recompiled.
isolinux/initrd.img: Rebuilt with newly compiled kernel modules.
usb-and-pxe-installers/: Rebuilt usbboot.img with newly compiled kernel modules.
+--------------------------+
Tue Apr 29 13:47:34 EEST 2008
This is Bluewhite64 12.1-RC3, no ISO for this time

. Enjoy!
A software series/cups-1.3.7-x86_64-2.tgz: Applied patch str2790 to fix crash bugs in the PNG
image filter. The issues are not believed to be capable of either a DoS (at
worst, it simply crashes the filter processing the current job and does not
crash the scheduler daemon, which just moves on to the next job in the print
queue), nor arbitrary code execution (data from the image is never stored in
the affected tile array). Still, it seems to be worth fixing here just in
case. The CUPS bug report may be found here:
http://www.cups.org/str.php?L2790
AP software series/mysql-5.0.51b-x86_64-1.tgz: Upgraded to mysql-5.0.51b (which appears to be
nothing more than a version bump...)
L software series/imlib-1.9.15-x86_64-6.tgz: Patched to fix rendering issues on Intel and
possibly other graphics chipsets.
L software series/libmtp-0.2.6.1-x86_64-1.tgz: Upgraded to libmtp-0.2.6.1.
The udev rules are now sed processed during build.
L software series/libpng-1.2.27-x86_64-1.tgz: Upgraded to libpng-1.2.27.
This fixes various bugs, the most important of which have to do with the
handling of unknown chunks containing zero-length data. Processing a PNG
image that contains these could cause the application using libpng to crash
(possibly resulting in a denial of service), could potentially expose the
contents of uninitialized memory, or could cause the execution of arbitrary
code as the user running libpng (though it would probably be quite difficult
to cause the execution of attacker-chosen code). We recommend upgrading the
package as soon as possible.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1382
ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng-1.2.27-README.txt
[*** Security fix ***]
X software series/xf86-input-joystick-1.3.2-x86_64-1.tgz: Upgraded to xf86-input-joystick-1.3.2.
X software series/xf86-video-vmware-10.16.1-x86_64-1.tgz: Upgraded to xf86-video-vmware-10.16.1.
XAP software series/mozilla-firefox-2.0.0.14-x86_64-2.tgz: Added the distribution
name and version to the User Agent (UA).
XAP software series/seamonkey-1.1.9-x86_64-1.tgz:Added the distribution
name and version to the User Agent (UA).
isolinux/initrd.img: Fixed minimum RAM amount in /etc/issue, and made some
edits to other documentation within the installer.
usb-and-pxe-installers/: In usbboot.img, fixed minimum RAM amount in
/etc/issue, and made some edits to other documentation within the installer.
+--------------------------+
Sun Apr 27 17:43:34 EEST 2008
X software series/pixman-0.10.0-x86_64-3.tgz: Restored MMX optimizations.
+--------------------------+
Sat Apr 26 11:24:26 EEST 2008
A software series/aaa_base-12.1.0-noarch-3.tgz: More initial emails update.
KDE software series/kdelibs-3.5.9-x86_64-4.tgz: Patched to fix a security problem.
From the KDE advisory: "If start_kdeinit is installed as setuid root, a
local user might be able to send unix signals to other processes, cause
a denial of service or even possibly execute arbitrary code."
This issue affects KDE 3.5.5 through KDE 3.5.9.
We recommend upgrading to the new kdelibs package as soon as possible.
For more information, see:
http://www.kde.org/info/security/advisory-20080426-2.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1671
[*** Security fix ***]
isolinux/initrd.img: Patched /sbin/probe to look for formatted swap on RAID.
usb-and-pxe-installers/: Patched /sbin/probe in usbboot.img to look for
formatted swap on RAID.
EXTRA software/ktorrent/ktorrent-2.2.6-x86_64-1.tgz: Upgraded to ktorrent-2.2.6.
EXTRA software/slackpkg/slackpkg-2.70.2-noarch-2.tgz: Added a new mirror.
Thanks to Peter Polonkai for the devall.hu mirrors!
+--------------------------+
Thu Apr 24 10:53:16 EEST 2008
A software series/aaa_base-12.1.0-noarch-2.tgz: Updated the initial emails.
N software series/wireless-tools-29-x86_64-3.tgz: Increased the sleep time after bringing
up an interface to 3 seconds, since some of the new drivers need the additional
time to fully initialize.
+--------------------------+
Tue Apr 22 14:58:42 EEST 2008
This is Bluewhite64 12.1-RC2! There is a DVD iso available for download from the primary mirror,
other mirrors should be updated soon. Also, you can download through BitTorrent too
(see the "Get Bluewhite64"). Please TEST, TEST and TEST as much as you can and post the
possible problems to the forum

. Enjoy!
A software series/glibc-solibs-2.7-x86_64-10.tgz: Recompiled against Linux 2.6.24.5 headers.
A software series/glibc-zoneinfo-2.7-noarch-10.tgz: Rebuilt.
A software series/kernel-huge-2.6.24.5-x86_64-1.tgz:
Upgraded to Linux 2.6.24.5 SMP huge.s (full-featured) kernel.
A software series/kernel-modules-2.6.24.5-x86_64-1.tgz
Upgraded to Linux 2.6.24.5 SMP kernel modules.
A software series/pkgtools-12.1.0-noarch-7.tgz: Removed obsolete modem setup script (any
/dev/modem symlink would be wiped out by udev anyway).
AP software series/lm_sensors-2.10.6-x86_64-1.tgz: Upgraded to lm_sensors-2.10.6.
D software series/kernel-headers-2.6.24.5-x86_64-1.tgz:
Upgraded to Linux 2.6.24.5 SMP kernel headers.
A software series/mkinitrd-1.3.2-x86_64-2.tgz: Updated the version numbers in
README.initrd and manpage.
K software series/kernel-source-2.6.24.5-noarch-1.tgz
Upgraded to Linux 2.6.24.5 SMP kernel source package.
L software series/glibc-2.7-x86_64-10.tgz: Recompiled against Linux 2.6.24.5 headers.
L software series/glibc-i18n-2.7-noarch-10.tgz: Rebuilt.
L software series/glibc-profile-2.7-x86_64-10.tgz: Recompiled against Linux 2.6.24.5 headers.
L software series/jre-6u6-x86_64-2.tgz: Adjusted installation directory to avoid
removing files from kdebindings.
L software series/svgalib_helper-1.9.25_2.6.24.5-x86_64-1.tgz: Recompiled for Linux 2.6.24.5.
N software series/mcabber-0.9.7-x86_64-1.tgz: Upgraded to mcabber-0.9.7.
XAP software series/xine-lib-1.1.11.1-x86_64-3.tgz: Recompiled, with --without-speex (we didn't
ship the speex library in Bluewhite64 anyway, but for reference this issue
would be CVE-2008-1686), and with --disable-nosefart (the recently reported
as insecurely demuxed NSF format).
As before in -2, this package fixes the two regressions mentioned in the
release notes for xine-lib-1.1.12:
http://sourceforge.net/project/shownotes.php?release_id=592185&group_id=9655
Moving to xine-lib-1.1.12 right now doesn't seem prudent for RC2, as the
diff between 1.1.11.1 and 1.1.12 is many thousands of lines long.
[*** Security fix ***]
EXTRA software/brltty/brltty-3.9-i486-1.tgz: Upgraded to brltty-3.9.
EXTRA software/jdk-6/jdk-6u6-x86_64-2.tgz: Adjusted installation directory to avoid
removing files from kdebindings.
isolinux/initrd.img: Replaced kernel modules with 2.6.24.5 versions.
kernels/huge.s/*: Upgraded to huge.s 2.6.24.5 kernel.
usb-and-pxe-installers/: Replaced kernel modules with 2.6.24.5 versions.
Thanks to Amritpal Bath for writing a new README_RAID document explaining
how to install Bluewhite64 using various RAID levels.
+--------------------------+
Fri Apr 18 11:46:34 EEST 2008
AP software series/mysql-5.0.51a-x86_64-3.tgz: Edited rc.mysql to fix a missing '=' in the
example for mysql_install_db.
XAP software series/mozilla-firefox-2.0.0.14-x86_64-1.tgz:
Upgraded to firefox-2.0.0.14.
This upgrade fixes a potential security bug.
For more information, see:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox
[*** Security fix ***]
+--------------------------+
Fri Apr 18 00:17:29 EEST 2008
A software series/kernel-test-huge-2.6.25-x86_64-1.tgz:
Added Linux 2.6.25 SMP test.s (full-featured) testing kernel!
please NOTE: this kernel is only for testing! You have to install the
sources and the headers if you need them from testing/packages/kernel-test/*
A software series/kernel-test-modules-2.6.25-x86_64-1.tgz
Added Linux 2.6.25 SMP test.s kernel modules.
L software series/jre-6u6-x86_64-1.tgz: Upgraded to Java(TM) 2 Platform Standard Edition
Runtime Environment Version 6.0 update 6.
N software series/wireless-tools-29-x86_64-2.tgz:
Make sure that HWADDR in rc.wireless is all uppercase.
EXTRA software/jdk-6/jdk-6u6-x86_64-1.tgz: Upgraded to Java(TM) 2 Platform
Standard Edition Development Kit Version 6.0 update 6.
testing/packages/kernel-test/*: Added a testing kernel version 2.6.25.
kernels/test.s: Added a test.s (huge) SMP kernel 2.6.25 for testing!
isolinux/initrd.img: Updated binaries and shared libraries. Added test.s kernel modules.
Fixed to show the encrypted volume in the partitions list. Thanks to Virgil Moldoveanu
for reporting and testing.
usb-and-pxe-installers/: Added test.s kernel and modules. Updated binaries and shared libraries.
Fixed to show the encrypted volume in the partitions list. Thanks to Virgil Moldoveanu
for reporting and testing.
+--------------------------+
Tue Apr 15 17:46:44 EEST 2008
E software series/emacs-22.2-x86_64-1.tgz: Upgraded to GNU emacs-22.2.
X software series/xf86-video-radeonhd-1.2.1-x86_64-1.tgz: Upgraded to xf86-video-radeonhd-1.2.1.
EXTRA software/emacspeak/emacspeak-27.0-x86_64-1.tgz: Upgraded to emacspeak-27.0.
+--------------------------+
Mon Apr 14 18:39:31 EEST 2008
A software series/smartmontools-5.38-x86_64-1.tgz: Upgraded to smartmontools-5.38.
D software series/git-1.5.5-x86_64-1.tgz: Upgraded to git-1.5.5.
KDE software series/amarok-1.4.9.1-x86_64-1.tgz: Upgraded to amarok-1.4.9.1.
N software series/bind-9.4.2-x86_65-2.tgz: Patched rc.bind to add a short wait after starting
named, so that the startup script doesn't match "named " with a
failing startup and too quick a check. Upgraded to the latest named.root file.
T software series/xfig-3.2.4-x86_64-3.tgz: Patched to fix a wrong XFIGLIBDIR that was causing
some minor errors.
TCL software series/tclx-8.4-x86_64-2.tgz: Recompiled. Since some of the Tcl/Tk headers are now
considered "private", this needs -I flags to compile (for now).
XAP software series/xscreensaver-5.05-x86_64-1.tgz: Upgraded to xscreensaver-5.05.
+--------------------------+
Mon Apr 14 00:18:12 EEST 2008
AP software series/ghostscript-8.62-x86_64-5.tgz: Edited /usr/share/ghostscript/8.62/lib/cidfmap
to attempt support for Simplified Chinese (though Traditional Chinese and
Korean will still require cidfmap changes and additional fonts).
AP software series/man-1.6f-x86_64-1.tgz: Upgraded to man-1.6f.
D software series/cscope-15.6-x86_64-1.tgz: Upgraded to cscope-15.6.
F software series/linux-howtos-20080411-noarch-1.tgz: Updated to Linux-HOWTOs-20080411.
L software series/svgalib_helper-1.9.25_2.6.24.4-x86_64-2.tgz: Recompiled.
N software series/iproute2-2.6.16_060323-x86_64-2.tgz: Fixed hardcoded "/usr/local/lib/iptables"
path in two places within the source.
N software series/sendmail-8.14.2-x86_64-2.tgz: Recompiled. Fixed issues in the install script
with properly adding the smmsp user/group. When using SSL/TLS, disable SSLv2 by default.
Fixed the line ordering in sendmail-slackware-tls-sasl.mc. Fixed typos at the top of
example .mc files. Clamp down on security in the defaults some more by requiring
authentication when using the TLS/SASL .mc/.cf. Allow SSLv3 in both TLS configurations.
N software series/sendmail-cf-8.14.2-noarch-2.tgz: Rebuilt.
X software series/xf86-video-radeonhd-1.2.0-x86_64-1.tgz: Upgraded to xf86-video-radeonhd-1.2.0,
which adds support for RV620, RV635, and R680 chipsets, and 2D acceleration
for R5xx (including RS6xx) chipsets, both XAA and EXA. This driver also
enables the use of the second digital output on the RS690 chipset.
+--------------------------+
Fri Apr 11 14:30:59 EEST 2008
A software series/cryptsetup-1.0.5-x86_64-4.tgz: Recompiled against static libgpg-error and
got rid of --disable-libcrypt in cryptsetup.static's ./configure to prevent
the error "Command failed: Key processing error: No hash backend found"
when creating a new cryptographic volume.
A software series/ed-0.9-x86_64-2.tgz: Fixed missing man page.
D software series/guile-1.8.4-x86_64-1.tgz: Upgraded to guile-1.8.4.
N software series/ipw2200-fw-3.0-fw-2.tgz: Add an extra copy of the LICENSE file to the
/usr/doc/ipw2200-fw-3.0/ directory in addition to the one with the firmware.
N software series/libgcrypt-1.4.0-x86_64-2.tgz: Recompiled to include the static library.
N software series/libgpg-error-1.6-X86_64-3.tgz: Recompiled to include the static library.
N software series/mailx-12.3-x86_64-1.tgz: Upgraded to mailx-12.3.
XAP software series/gnuplot-4.2.3-x86_64-1.tgz: Upgraded to gnuplot-4.2.3.
isolinux/initrd.img: Replaced /sbin/cryptsetup.static.
usb-and-pxe-installers/: Replaced /sbin/cryptsetup.static.
+--------------------------+
Thu Apr 10 15:15:18 EEST 2008
The kernels were recompiled to add the experimental CONFIG_PATA_MARVELL option,
since some newer Intel motherboards are already using this chipset. Like
everything else, use it at your own risk. It was decided that having some
driver that was tested and found to work was better than no support at all.
A software series/kernel-huge-2.6.24.4-x86_64-2.tgz:
Recompiled Linux 2.6.24.4 SMP huge.s (full-featured) kernel.
A software series/kernel-modules-2.6.24.4-x86_64-2.tgz
Recompiled Linux 2.6.24.4 SMP kernel modules.
D software series/kernel-headers-2.6.24.4-x86_64-2.tgz:
Rebuild Linux 2.6.24.4 SMP kernel headers.
D software series/pkg-config-0.23-x86_64-2.tgz: Prevent unwanted output during package install.
D software series/ruby-1.8.6_p114-x86_64-1.tgz: Upgraded to ruby-1.8.6-p114.
K software series/kernel-source-2.6.24.4-noarch-2.tgz
Rebuilt Linux 2.6.24.4 SMP kernel source package.
L software series/libaio-0.3.106-x86_64-1.tgz: Added libaio-0.3.106 (asynchronous I/O library).
L software series/glib2-2.14.6-x86_64-4.tgz: Renamed /etc/profile.d/glib2.{csh,sh} to
/etc/profile.d/libglib2.{csh,sh} so that the lang.{csh,sh} scripts will run
first, setting the $LANG variable which these scripts require.
N software series/dhcp-3.0.6-x86_64-1.tgz: Upgraded to dhcp-3.0.6.
N software series/lftp-3.7.0-x86_64-1.tgz: Upgraded to lftp-3.7.0.
N software series/links-2.1pre33-x86_64-1.tgz: Upgraded to links-2.1pre33.
N software series/ncftp-3.2.1-x86_64-1.tgz: Upgraded to ncftp-3.2.1.
N software series/rsync-3.0.2-x86_64-1.tgz: Upgraded to rsync-3.0.2.
From the NEWS file:
"BUG FIXES: - Fixed a potential buffer overflow in the xattr code."
This is the security advisory, as the issue was present in -current only.
[*** Security fix ***)
N software series/tcpdump-3.9.8-x86_64-1.tgz: Upgraded to libpcap-0.9.8 and tcpdump-3.9.8.
X software series/compiz-0.7.4-x86_64-1.tgz: Upgraded to compiz-0.7.4.
X software series/scim-1.4.7-x86_64-6.tgz: Fixed locale example typo in profile.d scripts.
X software series/xf86-input-mouse-1.3.0-x86_64-1.tgz: Upgraded to xf86-input-mouse-1.3.0 to
fix a copy/paste bug when switching between the virtual consoles and X.
EXTRA software/slackpkg/slackpkg-2.70.2-noarch-1.tgz: Upgraded to slackpkg-2.70.2-noarch-1.
isolinux/initrd.img: Replaced kernel modules with recompiled versions.
kernels/huge.s/*: Recompiled huge.s 2.6.24.4 kernel.
usb-and-pxe-installers/: Replaced kernel modules with recompiled versions.
+--------------------------+
Tue Apr 8 15:26:23 EEST 2008
D software series/cmake-2.4.8-x86_64-1.tgz: Upgraded to cmake-2.4.8.
L software series/fribidi-0.10.9-x86_64-2.tgz: Recompiled. "left-to-right" was far too
egregious a mistake to leave in the slack-desc. Sorry about that.
X software series/pixman-0.10.0-x86_64-2.tgz: Symlink the headers into /usr/include to
temporarily accommodate software that isn't yet using pixman.pc to get the
-I/usr/include/pixman-1/ include path. Thanks to garry for reporting this.
XAP software series/xine-lib-1.1.11.1-x86_64-2.tgz: Patched to fix playback failure affecting
several media formats accidentally broken in the xine-lib-1.1.11.1 release.
A software series/aaa_elflibs-12.1.0-x86_64-1.tgz: Added libfuse. Updated libbz2 (which still
has the shared library name "libbz2.so.1.0.4").
A software series/bzip2-1.0.5-x86_64-1.tgz: Upgraded to bzip2-1.0.5.
Previous versions of bzip2 contained a buffer overread error that could cause
applications linked to libbz2 to crash, resulting in a denial of service.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1372
[*** Security fix ***]
A software series/cryptsetup-1.0.5-x86_64-3.tgz: Make cryptsetup in /sbin and /usr/sbin both
symlinks to /sbin/cryptsetup.static. This prevents "cryptsetup" failure if
someone installs only the A package series.
AP software series/cdrtools-2.01.01a38-x86_64-1.tgz: Upgraded to cdrtools-2.01.01a38.
AP software series/dvd+rw-tools-7.1-x86_64-1.tgz: Upgraded to dvd+rw-tools-7.1.
AP software series/ghostscript-8.62-x86_64-4.tgz: Fixed cidfmap for printing with the
wqy-zenhei.ttf font.
D software series/m4-1.4.11-x86_64-1.tgz: Upgraded to m4-1.4.11.
In addition to bugfixes and enhancements, this version of m4 also fixes two
issues with possible security implications. A minor security fix with the
use of "maketemp" and "mkstemp" -- these are now quoted to prevent the
(rather unlikely) possibility that an unquoted string could match an
existing macro causing operations to be done on the wrong file. Also,
a problem with the '-F' option (introduced with version 1.4) could cause a
core dump or possibly (with certain file names) the execution of arbitrary
code. For more information on these issues, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1687
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1688
[*** Security fix ***]
N software series/iptables-1.4.0-x86_64-1.tgz: Upgraded to iptables-1.4.0.
N software series/network-scripts-12.1-noarch-1.tgz: Fixed WLAN_IWPRIV[4] example
generated by netconfig.
N software series/whois-4.7.26-x86_64-1.tgz: Upgraded to whois-4.7.26.
XAP software series/xfce-4.4.2-x86_64-5.tgz: Fixed the build script to apply a couple
of bugfix patches correctly.
isolinux/initrd.img: Patched to fix expert mode FTP/HTTP installation, and
to allow installation from HTTP source with port number, such as:
http://somehost:8080
usb-and-pxe-installers/: Patched to fix expert mode FTP/HTTP installation,
and to allow installation from HTTP source with port number, such as:
http://somehost:8080
pasture/ia32-emulation/* Added the IA32 emulation found in Bluewhite64 12.0 testing.
If the new packages found in extra/ia32-emulation/* not working as you expected,
then you should use this one. Upgraded ia32-lib32asound-1.0.15.
NOTE: use "removepkg /var/log/packages/ia32-*" to remove the existing IA32 packages
and installpkg to install this ones.
+--------------------------+
Sun Apr 6 09:45:42 EEST 2008
XAP software series/xfce-4.4.2-x86_64-4.tgz: Show Orage Calendar only in XFce rather
than having it fall into KDE's "Lost & Found"

.
EXTRA software/ia32-emulation/ia32-lib32-0.3.0-x86_64-2.tgz: Recompiled libX11 without xcb.
Thanks to Roberto Gonzalez Azevedo for reporting and testing.
+--------------------------+
Sat Apr 5 09:45:47 EEST 2008
L software series/glibc-2.7-x86_64-9a.tgz: Added /bin/sln -> /sbin/sln symlink.
N software series/rsync-3.0.1-x86_64-1.tgz: Upgraded to rsync-3.0.1.
TESTING/packages/bash-3.2.029-x86_64-1.tgz: Brought up to patchlevel 029.
Last time we tried this as our main shell, it was still causing problems with
a lot of the scripts out there, but perhaps it will be tried again in the
next development cycle.
isolinux/initrd.img: Added test26.s kernel support.
usb-and-pxe-installers/usbboot.img: Added test26.s kernel support.
+--------------------------+
Sat Apr 5 01:51:22 EEST 2008
A software series/mkinitrd-1.3.2-x86_64-1.tgz: Patched to fix problems with previous settings
getting overwritten with a plain "mkinitrd", and added support for non-US
keyboards.
A software series/glibc-solibs-2.7-x86_64-9.tgz: Rebuilt.
A software series/glibc-zoneinfo-2.7-noarch-9.tgz: Updated timeconfig script.
D software series/mercurial-1.0-x86_64-1.tgz: Upgraded to mercurial-1.0.
L software series/glibc-2.7-x86_64-9.tgz: Removed /sbin/sln symlink.
L software series/glibc-i18n-2.7-noarch-9.tgz: Rebuilt.
L software series/glibc-profile-2.7-x86_64-9.tgz: Rebuilt
L software series/dbus-python-0.82.4-x86_64-1.tgz: Added dbus-python-0.82.4, which is needed
for the correct operation of hplip.
N software series/openssh-5.0p1-x86_64-1.tgz: Upgraded to openssh-5.0p1.
This version fixes a security issue where local users could hijack forwarded
X connections. Upgrading to the new package is highly recommended.
For more information on this security issue, please see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1483
[*** Security fix ***]
EXTRA software/ia32-emulation/ia32-glibc-2.7-x86_64-1.tgz: Added ia32-glibc-2.7.
From now one this is the place for the IA32 emulation packages for Bluewhite64.
If you like to run 32-bit software then you have to install all this packages.
Since the latest packages from BW64 12.0, all libraries have been updated to
the versions found in the --current tree. The ia32-glibc-2.7 automatically add
the /lib32 and /usr/lib32 to /etc/ld.so.conf and run ldconfig for you, so
now is more easy to run 32-bit software

.
NOTE: this packages are ONLY to run 32-bit software, NOT to compile.
Please test as much as you can and post success or failures to the
Bluewhite64 forum. Use removepkg /var/log/packages/ia32-* to remove the old ones
and use installpkg to install all this brand new ones

. Enjoy!
EXTRA software/ia32-emulation/ia32-lib32-0.3.0-x86_64-1.tgz: Added ia32-lib32-0.3.0.
EXTRA software/ia32-emulation/ia32-pango-1.20.0-x86_64-1.tgz: Added ia32-pango-1.20.0.
EXTRA software/ia32-emulation/ia32-zlib-1.2.3-x86_64-1.tgz: Added ia32-zlib-1.2.3.
EXTRA software/ia32-emulation/ia32-gtk+2-2.12.9-x86_64-1.tgz: Added ia32-gtk+2-2.12.9.
EXTRA software/ia32-emulation/ia32-lib32asound-1.0.15-x86_64-1.tgz: Added ia32-lib32asound.
EXTRA software/ia32-emulation/ia32-stdc++-6.0.9-x86_64-1.tgz: Added a32-stdc++6.0.9.
EXTRA software/ia32-emulation/linux32-1.0-x86_64-1.tgz: Added linux32-1.0.
testing/ia32-emulation/*: Moved to EXTRA software.
+--------------------------+
Thu Apr 3 17:50:11 EEST 2008
This is Bluewhite64 12.1-rc1, though there is still some more minor work to do.
No ISO for this RC, perhaps the RC2 will have one, I'm waiting for the 2.6.25 Linux kernel
to integrate it as a test26.s kernel. Please help test! And if we're missing anything major,
please let me know at arny at bluewhite64 dot com or post to the forum. Thank You!
A software series/aaa_elflibs-12.1.0-x86_64-1.tgz: Updated the initial "starter" library
package to the latest versions in -current.
A software series/cups-1.3.7-x86_64-1.tgz: Upgraded to cups-1.3.7.
This version of CUPS fixes some buffer overflows in the GIF image filter
and in cgiCompileSearch. Those running CUPS servers should upgrade.
For more information on these security issues, please see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0047
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1373
[*** Security fix ***]
A software series/cxxlibs-6.0.9-x86_64-1.tgz: Upgraded to libstdc++.so.6.0.9 from gcc-4.2.3.
A software series/mdadm-2.6.4-x86_64-1.tgz: Upgraded to mdadm-2.6.4.
A software series/pciutils-2.2.10-x86_64-1.tgz: Upgraded to pciutils-2.2.10.
A software series/sysvinit-2.86-x86_64-7.tgz: Fixed the /sbin/initscript path to match the man
pages. Thanks to Michiel Broek for the patch.
AP software series/hplip-2.8.4-x86_64-1.tgz: Upgraded to hplip-2.8.4.
AP software series/zsh-4.3.6-x86_64-1.tgz: Upgraded to zsh-4.3.6.
D software series/gdb-6.8-x86_64-1.tgz: Upgraded to gdb-6.8.
L software series/hal-0.5.10-x86_64-2.tgz: Recompiled with --enable-umount-helper, which allows
non-root users to umount hotplugged devices from the command line.
L software/hal-info-20080317-noarch-1.tgz: Upgraded to hal-info-20080317.
N software/bind-9.4.2-x86_64-1.tgz: Upgraded to bind-9.4.2.
N software/wpa_supplicant-0.5.10-x86_64-1.tgz: Upgrade/d to wpa_supplicant-0.5.10.
X software series/wqy-zenhei-font-ttf-0.5.23-noarch-1.tgz: Upgraded to wqy-zenhei-0.5.23.
X software series/xf86-video-intel-2.2.1-x86_64-1.tgz: Reverted to xf86-video-intel-2.2.1. We
suspected that might be needed, given the version number and development
status of the newer driver we tried, but gave it a try anyway. Probably
there will be no more driver updates at this point unless bugs are reported
that newer drivers fix.
XAP software series/pidgin-2.4.1-x86_64-1.tgz: Upgraded to pidgin-2.4.1.
Tue Apr 1 22:45:27 EEST 2008
A software series/acl-2.2.47_1-x86_64-1.tgz: Upgraded to acl-2.2.47_1.
A software series/attr-2.4.41_1-x86_64-1.tgz: Upgraded to attr-2.4.41_1.
A software series/etc-12.1-noarch-4.tgz: Give the mysql user a /bin/false "shell".
A software series/lilo-22.8-x86_64-10.tgz: Fixed a bug where liloconfig might not properly
determine the root directory where /boot is found.
A software series/sysvinit-scripts-1.2-noarch-20.tgz: Fixed a bug in rescan-scsi-bus that was
exposed by the CONFIG_SCSI_MULTI_LUN kernel option (which _should_ also make
rescan-scsi-bus unneccessary). Keep /usr/share/mime's mime.cache file updated.
A software series/util-linux-2.12r-x86_64-4.tgz: Removed. See below.
A software series/util-linux-ng-2.13.1-x86_64-1.tgz: Added util-linux-ng-2.13.1, which replaces
the old util-linux package. To install, either use upgradepkg with the "%"
option, or do this: installpkg util-linux-ng-2.13.1-x86_64-1.tgz ;
removepkg util-linux ; installpkg util-linux-ng-2.13.1-x86_64-1.tgz
A software series/xfsprogs-2.9.7_1-x86_64-1.tgz: Upgraded to xfsprogs-2.9.7_1.
AP software series/alsa-utils-1.0.15-x86_64-3.tgz: Don't load the mixer settings until after
the OSS modules have been loaded. Eliminate 'awk' usage in rc.alsa, using
sed and tr instead.
AP software series/dmapi-2.2.8_1-x86_64-1.tgz: Upgraded to dmapi-2.2.8_1.
AP software series/man-pages-2.79-noarch-1.tgz: Upgraded to man-pages-2.79, and retained the
POSIX pthread_* man pages this time.
AP software series/mysql-5.0.51a-x86_64-2.tgz: Modified /etc/rc.d/rc.mysqld's database
installation instructions to take into consideration that the mysql user no
longer has a login shell. In addition, the admin is told to consider locking
the database server down even further (if possible) by using the
mysql_secure_installation utility.
AP software series/xfsdump-2.2.48_1-x86_64-1.tgz: Upgraded to xfsdump-2.2.48_1.
L software series/libgsf-1.14.8-x86_64-1.tgz: Upgraded to libgsf-1.14.8.
N software series/net-tools-1.60-x86_64-2.tgz: Recompiled with latest Debian patch.
N software series/nfs-utils-1.1.2-x86_64-1.tgz: Upgraded to nfs-utils-1.1.2.
N software series/nmap-4.60-x86_64-3.tgz: Fixed the build script (third time's the charm?) to
use DESTDIR and remove the one item (useless, IMHO, within a package system)
that still can't get DESTDIR right: uninstall_zenmap.
N software series/openssh-4.9p1-x86_64-1.tgz: Upgraded to openssh-4.9p1.
N software series/wget-1.11.1-x86_64-1.tgz: Upgraded to wget-1.11.1.
X software series/scim-1.4.7-x86_64-5.tgz: Fixed scim.desktop to have more information,
and to place the SCIM startup utility in the "Utilities" menu rather than having it
fall into "Lost & Found".
X software series/xf86-video-intel-2.2.99.902-x86_64-1.tgz:
Upgraded to xf86-video-intel-2.2.99.902.
XAP software series/xine-lib-1.1.11.1-x86_64-1.tgz: Earlier versions of xine-lib suffer
from an integer overflow which may lead to a buffer overflow that could potentially
be used to gain unauthorized access to the machine if a malicious media
file is played back. File types affected this time include .flv, .mov, .rm,
.mve, .mkv, and .cak.
For more information on this security issue, please see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1482
[*** Security fix ***]
isolinux/initrd.img: Patched to have /etc/fstab mount /dev/shm.
Updated XFS utilities.
usb-and-pxe-installers/: Patched to have /etc/fstab mount /dev/shm.
Updated XFS utilities.
+--------------------------+
Sun Mar 30 18:53:02 EEST 2008
A software series/glibc-solibs-2.7-x86_64-8.tgz: Recompiled against 2.6.24.4 headers.
A software series/glibc-zoneinfo-2.7-noarch-8.tgz: Upgraded to tzdata2008b.
L software series/glibc-2.7-x86_64-8.tgz: Recompiled against 2.6.24.4 headers.
Upgraded to tzdata2008b.
L software series/glibc-i18n-2.7-noarch-8.tgz: Rebuilt.
L software series/glibc-profile-2.7-x86_64-8.tgz: Recompiled against 2.6.24.4 headers.
A software series/lilo-22.8-x86_64-9.tgz: Fixed reversed vt.default_utf8 kernel parameter
(0 <-> 1) in /etc/lilo.conf. Fxed liloconfig to at least create an empty
message file in /boot if none exists.
A software series/aaa_base-12.1.0-noarch-1.tgz: Added an empty /usr/share/wallpapers as this
seems to be a de-facto standard directory and (for example) XFce will give
an error if it is missing and one tries to change the desktop image.
Bumped version number of package, and of /etc/slackware-version.
A software series/etc-12.1-noarch-4.tgz: Installed root into the audio, cdrom, video, plugdev,
and floppy groups _correctly_

.
A software series/sysvinit-scripts-1.2-noarch-19.tgz: Keep any icon-theme.cache files updated.
A software series/kernel-huge-2.6.24.4-x86_64-1.tgz:
Upgraded to Linux 2.6.24.4 SMP huge.s (full-featured) kernel.
A software series/kernel-modules-2.6.24.4-x86_64-1.tgz
Upgraded to Linux 2.6.24.4 uniprocessor kernel modules.
AP software series/vim-7.1.285-x86_64-1.tgz: Upgraded to vim-7.1.285.
D software series/kernel-headers-2.6.24.4-x86_64-1.tgz:
Upgraded to Linux 2.6.24.4 SMP kernel headers.
K software series/kernel-source-2.6.24.4-noarch-1.tgz
Upgraded to Linux 2.6.24.4 SMP kernel source.
L software series/svgalib_helper-1.9.25_2.6.24.4-x86_64-1.tgz: Recompiled for Linux 2.6.24.4.
N software series/gnupg-1.4.9-x86_64-1.tgz: Upgraded to gnupg-1.4.9.
N software series/gnupg2-2.0.9-x86_64-1.tgz: Upgraded to gnupg-2.0.9.
N software series/nmap-4.60-x86_64-2.tgz: Recompiled. Some files were missing due to an
incompletely removed previous compile. It may also be necessary to reinstall
python after upgrading from -1.
TCL software series/tcl-8.4.18-x86_64-1.tgz: Upgraded to tcl8.4.18.
TCL software series/tk-8.4.18-x86_64-1.tgz: Upgraded to tk8.4.18.
X software series/liberation-fonts-ttf-1.0-noarch-1.tgz: Upgraded to Liberation Fonts 1.0.
X software series/pixman-0.10.0-x86_64-1.tgz: Upgraded to pixman-0.10.0.
XAP software series/mozilla-firefox-2.0.0.13-x86_64-1.tgz:
Upgraded to firefox-2.0.0.13.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox
[*** Security fix ***]
XAP software series/seamonkey-1.1.9-x86_64-1.tgz:
Upgraded to seamonkey-1.1.9.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#seamonkey
[*** Security fix ***]
XAP software series/xine-lib-1.1.11-x86_64-1.tgz: Earlier versions of xine-lib suffer from an
array index bug that may have security implications if a malicious RTSP
stream is played. Playback of other media formats is not affected.
If you use RTSP, you should probably upgrade xine-lib.
For more information on the security issue, please see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0073
[*** Security fix ***]
XAP software series/vim-gvim-7.1.285-x86_64-1.tgz: Upgraded to vim-7.1.285. This is the GTK+
version of vim (gvim). The normal vim package is also required.
XAP software series/windowmaker-0.92.0-x86_64-5.tgz: Repackaged to fix WPrefs missing icons.
Thanks to Garry for reporting this.
isolinux/initrd.img: Fixed huge.s kernel installation bug.
kernels/huge.s/*: Upgraded huge.s SMP kernel to 2.6.24.4.
pasture/gcc-3.4.6/: Removed, since this has gone unchanged since
Bluewhite64 12.0. I'm not sure if the one in 12.0's pasture still works,
but if it does, and you need it for something, that's where to find it.
usb-and-pxe-installers/: Updated USB and PXE installers to 2.6.24.4 modules.
+--------------------------+
Wed Mar 26 23:19:18 EET 2008
A software series/etc-12.1-noarch-3.tgz: Add root to the groups audio, cdrom, video, plugdev,
and floppy. Root already has access to most of these devices, but it doesn't
hurt to provide an example for people who edit /etc/groups manually.
A software series/shadow-4.0.6-x86_64-3.tgz: Took plugdev out of CONSOLE_GROUPS in
/etc/login.defs, since DBUS doesn't know about group memberships added that
way. Users not actually listed in /etc/groups as part of groups such as
plugdev wouldn't be able to use those devices even at the console when
logging in through a graphical login manager such as XDM, KDM, or GDM.
Stuart Winter enhanced the command-line adduser tool. Quote from the adduser
program history: "* To facilitate use of the automatic mounting features of
HAL, allow the admin to easily add users to the default groups:
audio,cdrom,video,plugdev,floppy.
The default is not to add new users to these groups. And by the way, this
script is "adduser from Slackware" not "superadduser from Gentoo"

"
If you trust your users, this is the correct way to give them access to these
devices. adduser will automatically edit /etc/groups for you. If you do not
trust your users and you give them access to these groups, they may create
mischief from afar with this access, so be aware of the security implications.
A software series/udev-118-x86_64-3.tgz: Fixed two broken symbolic links in /sbin.
AP software series/ntfsprogs-2.0.0-x86_64-2.tgz: Added back ntfsprogs-2.0.0, using (for now)
--disable-ntfsmount. It is still needed to manage NTFS partitions even if we
use the kernel driver or NTFS-3G to mount them.
N software series/epic4-2.8-x86_64-1.tgz: Upgraded to epic4-2.8.
N software series/irssi-0.8.12-x86_64-1.tgz: Upgraded to irssi-0.8.12.
N software series/nmap-4.60-x86_64-1.tgz: Upgraded to nmap-4.60.
Zenmap still isn't working because we don't include sqlite, but a zenmap
.desktop file was added anyway, and some paths in a script were fixed.
XAP software series/gimp-2.4.5-x86_64-1.tgz: Upgraded to gimp-2.4.5, added support for pyGTK.
isolinux/initrd.img: Fixed Speakup kernel detection. Added LVM swap partition detection.
usb-and-pxe-installers/: Fixed Speakup kernel detection. Added LVM swap partition detection.
+--------------------------+
Sun Mar 23 11:59:21 EET 2008
A software series/pkgtools-12.1.0-noarch-6.tgz: Fixed bogus bad gzipped file warnings.
AP software series/ghostscript-8.62-x86_64-3.tgz: Fixed default cidfmap installation.
N software series/mcabber-0.9.6-x86_64-1.tgz: Upgraded to mcabber-0.9.6.
XAP software series/audacious-1.5.0-x86_64-2.tgz: Don't use opcodes that break older computers.
XAP software series/audacious-plugins-1.5.0-x86_64-2.tgz: Recompiled.
+--------------------------+
Fri Mar 21 15:06:38 EET 2008
Is this Bluewhite64 12.1 RC 1 yet? It has to be close.
A software series/e2fsprogs-1.40.8-x86_64-1.tgz: Upgraded to e2fsprogs-1.40.8.
A software series/gpm-1.20.1-x86_64-7.tgz: Default item to imps2, which works well with KVM
boxes. If you use a Synaptics pad with the third party driver, you may have
to change this setting.
A software series/inotify-tools-3.13-x86_64-1.tgz: Upgraded to inotify-tools-3.13.
A software series/kernel-huge-2.6.24.3-x86_64-2.tgz: Recompiled with CONFIG_SCSI_MULTI_LUN.
A software series/kernel-modules-2.6.24.3-x86_64-2.tgz: Recompiled.
A software series/ntfs-3g-1.2310-x86_64-1.tgz: Added ntfs-3g-1.2310.
A software series/pkgtools-12.1.0-noarch-5.tgz: Default making a USB boot stick to off.

A software series/sysvinit-scripts-1.2-noarch-18.tgz: Removed /etc/rc.d/rc.scanluns.
A software series/udev-118-x86_64-2.tgz: Blacklist old bcm43xx driver (b43 and b43legacy are
the recommended drivers now).
AP software series/alsa-utils-1.0.15-x86_64-2.tgz: Set reasonable volume defaults
if there are none in /etc/asound.state.
AP software series/gutenprint-5.0.2-x86_64-1.tgz: Upgraded to gutenprint-5.0.2.
AP software series/ntfsprogs-2.0.0-x86_64-1.tgz: Removed (for now).
D software series/m4-1.4.10-x86_64-1.tgz: Upgraded to m4-1.4.10.
D software series/pkg-config-0.23-x86_64-1.tgz: Upgraded to pkg-config-0.23.
K software series/kernel-source-2.6.24.3-noarch-2.tgz: CONFIG_SCSI_MULTI_LUN is now the
default in the supplied Bluewhite64 huge .config.
L software series/atk-1.22.0-x86_64-1.tgz: Upgraded to atk-1.22.0.
L software series/dbus-1.1.20-x86_64-1.tgz: Upgraded to dbus-1.1.20.
L software series/dbus-glib-0.74-x86_64-2.tgz: Rebuilt.
L software series/dbus-qt3-0.70-x86_64-2.tgz: Rebuilt.
L software series/gnome-icon-theme-2.22.0-noarch-1.tgz: Upgraded to gnome-icon-theme-2.22.0.
L software series/glib2-2.14.6-x86_64-3.tgz: Set G_BROKEN_FILENAMES=1, and if the locale is
UTF-8, then set G_FILENAME_ENCODING="@locale" (which will override the
G_BROKEN_FILENAMES setting). This should get us a little closer with UTF.
L software series/gtk+2-2.12.9-x86_64-1.tgz: Upgraded to gtk+-2.12.9.
L software series/hal-info-20080313-noarch-1.tgz: Upgraded to hal-info-20080313.
L software series/hicolor-icon-theme-0.10-noarch-3.tgz: Don't make an icon-theme.cache file
in /usr/share/icons.
L software series/lcms-1.17-x86_64-1.tgz: Upgraded to lcms-1.17.
L software series/libart_lgpl-2.3.20-x86_64-1.tgz: Upgraded to libart_lgpl-2.3.20.
L software series/pango-1.20.0-x86_64-1.tgz: Upgraded to pango-1.20.0.
L software series/pygtk-2.12.1-x86_64-2.tgz: Robby said it would help to recompile this.
L software series/wavpack-4.41.0-x86_64-1.tgz: Added wavpack-4.41.0.
This is needed for audacious WAV format support.
N software series/gnupg2-2.0.8-x86_64-1.tgz: Upgraded to gnupg2-2.0.8.
N software series/gnutls-2.2.2-x86_64-1.tgz: Upgraded to gnutls-2.2.2.
N software series/gpgme-1.1.6-x86_64-1.tgz: Upgraded to gpgme-1.1.6.
N software series/libassuan-1.0.4-x86_64-1.tgz: Upgraded to libassuan-1.0.4.
N software series/libksba-1.0.3-x86_64-1.tgz: Upgraded to libksba-1.0.3.
N software series/libgcrypt-1.4.0-x86_64-1.tgz: Upgraded to libgcrypt-1.4.0.
N software series/libgpg-error-1.6-x86_64-2.tgz: Recompiled.
N software series/pinentry-0.7.5-x86_64-1.tgz: Upgraded to pinentry-0.7.5.
N software series/samba-3.0.28a-x86_64-1.tgz: Upgraded to samba-3.0.28a.
N software series/wireless-tools-29-x86_64-1.tgz: Upgraded to wireless-tools-29.
X software series/libXScrnSaver-1.1.3-x86_64-1.tgz: Upgraded to libXScrnSaver-1.1.3.
X software series/libXv-1.0.4-x86_64-1.tgz: Upgraded to libXv-1.0.4.
X software series/libxkbfile-1.0.5-x86_64-1.tgz: Upgraded to libxkbfile-1.0.5.
X software series/xf86-video-amd-2.7.7.7-x86_64-1.tgz: Upgraded to xf86-video-amd-2.7.7.7.
X software series/xf86-video-apm-1.2.0-x86_64-1.tgz: Upgraded to xf86-video-apm-1.2.0.
X software series/xf86-video-ark-0.7.0-x86_64-1.tgz: Upgraded to xf86-video-ark-0.7.0.
X software series/xf86-video-ast-0.85.0-x86_64-1.tgz: Upgraded to xf86-video-ast-0.85.0.
X software series/xf86-video-chips-1.2.0-x86_64-1.tgz: Upgraded to xf86-video-chips-1.2.0.
X software series/xf86-video-cirrus-1.2.0-x86_64-1.tgz: Upgraded to xf86-video-cirrus-1.2.0.
X software series/xf86-video-dummy-0.3.0-x86_64-1.tgz: Upgraded to xf86-video-dummy-0.3.0.
X software series/xf86-video-fbdev-0.4.0-x86_64-1.tgz: Upgraded to xf86-video-fbdev-0.4.0.
X software series/xf86-video-glint-1.2.0-x86_64-1.tgz: Upgraded to xf86-video-glint-1.2.0.
X software series/xf86-video-i128-1.3.0-x86_64-1.tgz: Upgraded to xf86-video-i128-1.3.0.
X software series/xf86-video-i740-1.2.0-x86_64-1.tgz: Upgraded to xf86-video-i740-1.2.0.
X software series/xf86-video-neomagic-1.2.0-x86_64-1.tgz: Upgraded to xf86-video-neomagic-1.2.0.
X software series/xf86-video-rendition-4.2.0-x86_64-1.tgz: Upgraded to xf86-video-rendition-4.2.0.
X software series/xf86-video-s3-0.6.0-x86_64-1.tgz: Upgraded to xf86-video-s3-0.6.0.
X software series/xf86-video-s3virge-1.10.0-x86_64-1.tgz: Upgraded to xf86-video-s3virge-1.10.0.
X software series/xf86-video-savage-2.2.0-x86_64-1.tgz: Upgraded to xf86-video-savage-2.2.0.
X software series/xf86-video-siliconmotion-1.6.0-x86_64-1.tgz: Upgraded to xf86-video-siliconmotion-1.6.0.
X software series/xf86-video-sis-0.10.0-x86_64-1.tgz: Upgraded to xf86-video-sis-0.10.0.
X software series/xf86-video-sisusb-0.9.0-x86_64-1.tgz: Upgraded to xf86-video-sisusb-0.9.0.
X software series/xf86-video-tdfx-1.4.0-x86_64-1.tgz: Upgraded to xf86-video-tdfx-1.4.0.
X software series/xf86-video-trident-1.3.0-x86_64-1.tgz: Upgraded to xf86-video-trident-1.3.0.
X software series/xf86-video-tseng-1.2.0-x86_64-1.tgz: Upgraded to xf86-video-tseng-1.2.0.
X software series/xf86-video-v4l-0.2.0-x86_64-1.tgz: Upgraded to xf86-video-v4l-0.2.0.
X software series/xf86-video-vmware-10.16.0-x86_64-1.tgz: Upgraded to xf86-video-vmware-10.16.0.
X software series/xf86-video-voodoo-1.2.0-x86_64-1.tgz: Upgraded to xf86-video-voodoo-1.2.0.
XAP software series/audacious-1.5.0-x86_64-1.tgz: Upgraded to audacious-1.5.0.
XAP software series/audacious-plugins-1.5.0-x86_64-1.tgz: Upgraded to audacious-plugins-1.5.0.
XAP software series/gkrellm-2.3.1-x86_64-2.tgz: Recompiled against gnutls-2.2.2.
XAP software series/pidgin-2.4.0-x86_64-2.tgz: Recompiled against gnutls-2.2.2.
XAP software series/xfce-4.4.2-x86_64-3.tgz: Patched two Thunar bugs.
XAP oftware series/xpdf-3.02pl2-x86_64-3.tgz: Rebuilt adding an icon and .desktop file.
EXTAR/parted/parted-1.8.8-x86_64-1.tgz: Upgraded to parted-1.8.8.
EXTRA/slackpkg/slackpkg-2.70.1-noarch-1.tgz: Upgraded to slackpkg-2.70.1-noarch-1.
isolinux/initrd.img: Offer ntfs-3g read-write mounts for NTFS partitions.
Upgraded to parted-1.8.8. Upgraded to e2fsprogs-1.40.8.
kernels/huge.s/*: Recompiled with CONFIG_SCSI_MULTI_LUN.
usb-and-pxe-installers/: Offer ntfs-3g read-write mounts for NTFS partitions.
Upgraded to parted-1.8.8. Upgraded to e2fsprogs-1.40.8.
+--------------------------+
Fri Mar 14 13:44:51 EET 2008
A software series/gettext-0.17-x86_64-2.tgz: Compressed the man pages.
D software series/gettext-tools-0.17-x86_64-2.tgz: Compressed the man pages.
L software series/sdl-1.2.13-x86_64-2.tgz: SDL_mixer looks for timidity files in
/usr/lib/timidity rather than /usr/local/lib/timidity.
N software series/zd1211-firmware-1.4-fw-1.tgz: Added ZD1211 USB WLAN firmware.
X software series/dejavu-fonts-ttf-2.24-noarch-1.tgz: Upgraded to dejavu-fonts-ttf-2.24.
isolinux/initrd.img: Updated dropbear version. More dropbear adjustments from Eric Hameleers.
usb-and-pxe-installers/: Updated dropbear version. More dropbear adjustments from Eric Hameleers.
+--------------------------+
Wed Mar 12 19:20:47 EET 2008
A software series/glibc-solibs-2.7-x86_64-7.tgz: Recompiled against Linux 2.6.24.3 headers.
A software series/glibc-zoneinfo-2.7-noarch-7.tgz: Upgraded to tzdata2008a.
A software series/gettext-0.17-x86_64-1.tgz: Upgraded to gettext-0.17.
A software series/sysvinit-scripts-1.2-noarch-17.tgz: Update gtk.immodules from rc.M at boot.
AP software series/flac-1.2.1-x86_64-1.tgz: Upgraded to flac-1.2.1.
AP software series/vorbis-tools-1.2.0-x86_64-1.tgz: Upgraded to vorbis-tools-1.2.0.
D software series/gettext-tools-0.17-x86_64-1.tgz: Upgraded to tools for gettext-0.17.
KDE software series/k3b-1.0.4-x86_64-3.tgz: Recompiled against flac-1.2.1.
KDE software series/kdemultimedia-3.5.9-x86_64-3.tgz: Recompiled against flac-1.2.1.
L software series/glibc-2.7-x86_64-7.tgz: Recompiled against Linux 2.6.24.3 headers.
L software series/glibc-i18n-2.7-noarch-7.tgz: Rebuilt.
L software series/glibc-profile-2.7-x86_64-7.tgz: Recompiled against Linux 2.6.24.3 headers.
L software series/jre-6u5-x86_64-1.tgz: Upgraded to Java(TM) 2 Platform Standard Edition
Runtime Environment Version 6.0 update 5.
L software series/libcddb-1.3.0-x86_64-1.tgz: Added libcddb-1.3.0. (needed by audacious-plugins)
L software series/libcdio-0.79-x86_64-1.tgz: Added libcdio-0.79. (needed by audacious-plugins)
N software series/ipw2100-fw-1.3-fw-1.tgz: Added ipw2100-fw-1.3.
N software series/ipw2200-fw-3.0-fw-1.tgz: Added ipw2200-fw-3.0.
N software series/rt61-firmware-1.2-fw-1.tgz: Added rt61-firmware-1.2.
N software series/rt71w-firmware-1.8-fw-1.tgz: Added rt71w-firmware-1.8.
X software series/compiz-0.7.2-x86_64-1.tgz: Upgraded to compiz-0.7.2.
X software series/font-xfree86-type1-1.0.1-noarch-1.tgz: Upgraded to font-xfree86-type1-1.0.1.
X software series/inputproto-1.4.3-noarch-1.tgz: Upgraded to inputproto-1.4.3.
X software series/libX11-1.1.4-x86_64-1.tgz: Upgraded to libX11-1.1.4.
X software series/libXfont-1.3.2-x86_64-1.tgz: Upgraded to libXfont-1.3.2.
X software series/libXinerama-1.0.3-x86_64-1.tgz: Upgraded to libXinerama-1.0.3.
X software series/libpciaccess-0.10-x86_64-1.tgz: Added libpciaccess-0.10.
X software series/mkfontdir-1.0.4-noarch-1.tgz: Upgraded to mkfontdir-1.0.4.
X software series/mkfontscale-1.0.4-x86_64-1.tgz: Upgraded to mkfontscale-1.0.4.
X software series/printproto-1.0.4-noarch-1.tgz: Upgraded to printproto-1.0.4.
X software series/rendercheck-1.3-x86_64-1.tgz: Upgraded to rendercheck-1.3.
X software series/twm-1.0.4-x86_64-1.tgz: Upgraded to twm-1.0.4.
X software series/util-macros-1.1.6-noarch-1.tgz: Upgraded to util-macros-1.1.6.
X software series/x11perf-1.5-x86_64-1.tgz: Upgraded to x11perf-1.5.
X software series/xauth-1.0.3-x86_64-1.tgz: Upgraded to xauth-1.0.3.
X software series/xcompmgr-1.1.4-x86_64-1.tgz: Added xcompmgr-1.1.4.
X software series/xdm-1.1.7-x86_64-1.tgz: Upgraded to xdm-1.1.7.
X software series/xev-1.0.3-x86_64-1.tgz: Upgraded to xev-1.0.3.
X software series/xf86-input-aiptek-1.1.1-x86_64-1.tgz: Upgraded to xf86-input-aiptek-1.1.1.
X software series/xf86-video-nv-2.1.8-x86_64-1.tgz: Upgraded to xf86-video-nv-2.1.8.
X software series/xfs-1.0.6-x86_64-1.tgz: Upgraded to xfs-1.0.6.
X software series/xinit-1.0.8-x86_64-1.tgz: Upgraded to xinit-1.0.8.
X software series/xkbcomp-1.0.4-x86_64-1.tgz: Upgraded to xkbcomp-1.0.4.
X software series/xprop-1.0.4-x86_64-1.tgz: Upgraded to xprop-1.0.4.
X software series/xproto-7.0.12-noarch-1.tgz: Upgraded to xproto-7.0.12.
X software series/xrandr-1.2.3-x86_64-1.tgz: Upgraded to xrandr-1.2.3.
X software series/xrdb-1.0.5-x86_64-1.tgz: Upgraded to xrdb-1.0.5.
X software series/xset-1.0.4-x86_64-1.tgz: Upgraded to xset-1.0.4.
X software series/xtrans-1.1-noarch-1.tgz: Upgraded to xtrans-1.1.
XAP software series/audacious-plugins-1.4.5-x86_64-2.tgz: Recompiled against flac-1.2.1.
XAP oftware series/pidgin-2.4.0-x86_64-1.tgz: Upgraded to pidgin-2.4.0 and
pidgin-encryption-3.0
EXTRA software/jdk-6/jdk-6u5-x86_64-1.tgz: Upgraded to Java(TM) 2 Platform
Standard Edition Development Kit Version 6.0 update 5.
isolinux/initrd.img: Made some dropbear changes. Thanks, Eric.
usb-and-pxe-installers/: Made some dropbear changes. Thanks, Eric.
+--------------------------+
Sat Mar 8 21:10:09 EET 2008
A software series/kernel-huge-2.6.24.3-x86_64-1.tgz:
Upgraded to Linux 2.6.24.3 SMP huge.s (full-featured) kernel.
A software series/kernel-modules-2.6.24.3-x86_64-1.tgz
Upgraded to Linux 2.6.24.3 SMP kernel modules.
A software series/lilo-22.8-x86_64-8.tgz: If the kernel is >= 2.6.24, then ask the user if they
want to override the kernel's new default to UTF-8 on the text consoles.
Most users will not want UTF-8 yet until all applications have been fixed to
work with it. This option will not affect the use of UTF-8 locales in X.
A software series/pcmciautils-014-x86_64-4.tgz: Improved the default configuration to work with
more hardware. Thanks to Piter Punk.
A software series/pkgtools-12.1.0-noarch-4.tgz: Added fuse to the installer's boot-start
(setup.services) menu. Patched makepkg to test gzipped files properly.
A software series/sysvinit-scripts-1.2-noarch-16.tgz: Modified rc.S to start FUSE.
A software series/udev-118-x86_64-1.tgz: Upgraded to udev-118.
AP software series/ntfsprogs-2.0.0-x86_64-1.tgz: Moved from /extra. ntfsprogs now includes
full read-write support when the NFTS filesystem is mounted with ntfsmount
or -t ntfs.fuse. This feature requires the new fuse package.
D software series/kernel-headers-2.6.24.3-x86_64-1.tgz:
Upgraded to Linux 2.6.24.3 SMP kernel headers.
K software series/kernel-source-2.6.24.3-noarch-1.tgz
Upgraded to Linux 2.6.24.3 SMP kernel source.
KDE software series/kdelibs-3.5.9-x86_64-3.tgz: Patched a problem with Kate mislocating the
cursor after a block paste.
L software series/fuse-2.7.3-x86_64-1.tgz: Added FUSE, a userspace filesystem interface.
Thanks to Antonio Hernández Blas for submitting the build script.
L software series/gtk+2-2.12.8-x86_64-3.tgz: Don't run gtk-query-immodules-2.0 from the
installer, because some of the libraries it needs would not yet be
on the machine. The SCIM scripts should pick this up later on.
L software series/hal-info-20080215-noarch-1.tgz: Upgraded to hal-info-20080215.
L software series/svgalib_helper-1.9.25_2.6.24.3-x86_64-1.tgz: Recompiled for Linux 2.6.24.3.
N software series/iwlwifi-3945-ucode-2.14.1.5-fw-1.tgz: Added Intel 3945 wireless firmware.
N software series/iwlwifi-4965-ucode-4.44.1.20-fw-1.tgz: Added Intel 4965 wireless firmware.
kernels/huge.s/*: Upgraded huge.s kernel to 2.6.24.3.
isolinux/initrd.img: Merged new dropbear and patches from Eric Hameleers.
usb-and-pxe-installers/: Updated USB and PXE installers to 2.6.24.3 modules.
+--------------------------+
Thu Mar 6 18:21:31 EET 2008
A software series/usbutils-0.73-x86_64-2.tgz: Don't compress usb.ids (this breaks HAL).
L software series/glib2-2.14.6-x86_64-2.tgz: Added /etc/profile.d/ scripts so that GTK+ will
use the $LANG variable instead of forcing UTF-8.
N software series/rsync-3.0.0-x86_64-1.tgz: Upgraded to rsync-3.0.0.
X software series/libXext-1.0.4-x86_64-1.tgz: Upgraded to libXext-1.0.4.
X software series/xf86-video-mga-1.4.8-x86_64-1.tgz: Upgraded to xf86-video-mga-1.4.8.
+--------------------------+
Tue Mar 4 23:06:56 EET 2008
AP software series/ghostscript-8.62-x86_64-2.tgz: Fixed the gs_res.ps file for CJK.
+--------------------------+
Mon Mar 3 02:45:53 EET 2008
AP software series/ghostscript-8.62-x86_64-1.tgz: Upgraded to ghostscript-8.62.
This new release of GPL Ghostscript fixes a buffer overflow.
For more information on the security issue, please see:
http://scary.beasts.org/security/CESA-2008-001.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0411
[*** Security fix ***]
L software series/gtk+2-2.12.8-x86_64-2.tgz: Patched to fix Flash in Konqueror.
L software series/hicolor-icon-theme-0.10-noarch-2.tgz: Since XFce adds a few
hicolor icons of its own, make sure the hicolor icon-cache is updated at
the end of the installation.
XAP software series/xpdf-3.02pl2-x86_64-2.tgz: Added support for Arabic, simplified and
traditional Chinese, Hebrew, Japanese, Korean, Thai, and Turkish (in addition
to the Cyrillic, Greek, and Latin2 support that had already been included).
D software series/python-2.5.2-x86_64-1.tgz: Upgraded to Python-2.5.2.
XAP software series/mozilla-thunderbird-2.0.0.12-x86_64-1.tgz:
Upgraded to thunderbird-2.0.0.12.
This update fixes the following security related issues:
MFSA 2008-12: Heap buffer overflow in external MIME bodies
MFSA 2008-05: Directory traversal via chrome: URI
MFSA 2008-03: Privilege escalation, XSS, Remote Code Execution
MFSA 2008-01: Crashes with evidence of memory corruption (rv:1.8.1.12)
For more information, see:
http://www.mozilla.org/security/announce/2008/mfsa2008-12.html
http://www.mozilla.org/security/announce/2008/mfsa2008-05.html
http://www.mozilla.org/security/announce/2008/mfsa2008-03.html
http://www.mozilla.org/security/announce/2008/mfsa2008-01.html
These are the related CVE entries:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0304
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0418
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0415
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0412
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0413
[*** Security fix ***]
A software series/ed-0.9-x86_64-1.tgz: Upgraded to ed-0.9. World's greatest line editor.
A software series/hdparm-8.6-x86_64-1.tgz: Upgraded to hdparm-8.6.
A software series/lilo-22.8-x86_64-7.tgz: Patched liloconfig to make using the boot splash
screen an expert option as well. Fixed a bug using append= in the expert menu.
A software series/pkgtools-12.1.0-noarch-3.tgz: Have makepkg warn of two more common
mistakes -- dropping man pages in /usr/share/man, or (now) using site_perl
in a non-local package.
A software series/usbutils-0.73-x86_64-1.tgz: Upgraded to usbutils-0.73 with fresh usb.ids.
AP software series/cdrtools-2.01.01a37-x86_64-1.tgz: Upgraded to cdrtools-2.01.01a37.
AP software series/linuxdoc-tools-0.9.21-x86_64-5.tgz: Upgraded to asciidoc-8.2.5,
docbook-utils-0.6.14-13.fc9, docbook-xsl-1.73.2, docbook-xsl-doc-1.73.2,
gtk-doc-1.9, libsgmls-perl_1.03ii-32.diff, linuxdoc-tools_0.9.21-0.11,
sgml-common-0.6.3-23.fc9, and xmlto-0.0.20.
AP software series/lm_sensors-2.10.5-x86_64-1.tgz: Upgraded to lm_sensors-2.10.5.
D software series/binutils-2.17.50.0.17-x86_64-1.tgz: Reverted to binutils-2.17.50.0.17.
D software series/doxygen-1.5.5-x86_64-1.tgz: Upgraded to doxygen-1.5.5.
D software series/git-1.5.4.3-x86_64-1.tgz: Upgraded to git-1.5.4.3. Switched to vendor_perl
for the Git perl module.
D software series/oprofile-0.9.2-x86_64-4.tgz: Reverted to oprofile-0.9.2 compiled against
binutils-2.17.50.0.17.
D software series/perl-5.8.8-x86_64-9.tgz: Use vendor_perl for Bluewhite64-added Perl modules, not
site_perl. Really, I think perl's handling of this (and other issues like
the registry-like handling of perllocal.pod) is flawed, but this is better
than nothing. IMHO, something like /usr/local/lib/perl5/site_perl/ would
fit much better with the FHS's recommendations.
Try not to clobber an existing perllocal.pod (hard to do after the fact, so
make backups if you care...)
F software series/linux-howtos-20080227-noarch-1.tgz: Upgraded to Linux-HOWTOs-20080227.
Recompiled all Qt things, since /usr/lib/qt-3.3.8/lib (no longer a valid path)
was turning up in .la files.
KDE software series/amarok-1.4.8-x86_64-2.tgz: Recompiled.
KDE software series/k3b-1.0.4-x86_64-2.tgz: Recompiled.
KDE software series/kdeaccessibility-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdeaddons-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdeadmin-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdeartwork-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdebase-3.5.9-x86_64-2.tgz: Patched a bug with lm_sensors.
KDE software series/kdebindings-3.5.9-x86_64-2.tgz: Recompiled. Use vendor_perl dir.
KDE software series/kdeedu-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdegames-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdegraphics-3.5.9-x86_64-2.tgz: Recompiled.
Patched with a fix for kdvi.
KDE software series/kdelibs-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdemultimedia-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdenetwork-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdepim-3.5.9-x86_64-2.tgz: Recompiled (against new pilot-link).
KDE software series/kdesdk-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdetoys-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdeutils-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/kdevelop-3.5.1-x86_64-2.tgz: Recompiled with official bugfix patch.
KDE software series/kdewebdev-3.5.9-x86_64-2.tgz: Recompiled.
KDE software series/knemo-0.4.8-x86_64-2.tgz: Recompiled.
KDE software series/koffice-1.6.3-x86_64-3.tgz: Recompiled.
L software series/arts-1.5.9-x86_64-2.tgz: Recompiled.
L software series/fribidi-0.10.9-x86_64-1.tgz: Upgraded to fribidi-0.10.9
L software series/gmime-2.2.17-x86_64-1.tgz: Upgraded to gmime-2.2.17.
L software series/gmp-4.2.2-x86_64-1.tgz: Upgraded to gmp-4.2.2.
L software series/jre-6u4-x86_64-1.tgz: Upgraded to Java(TM) 2 Platform Standard Edition
Runtime Environment Version 6.0 update 4.
L software series/libglade-2.6.2-x86_64-1.tgz: Upgraded to libglade-2.6.2.
L software series/libgtkhtml-2.11.1-x86_64-1.tgz: Upgraded to libgtkhtml-2.11.1
L software series/libidl-0.8.10-x86_64-1.tgz: Upgraded to libIDL-0.8.10.
L software series/libidn-1.5-x86_64-1.tgz: Upgraded to libidn-1.5.
L software series/libieee1284-0.2.11-x86_64-1.tgz: Upgraded to libieee1284-0.2.11.
L software series/libmng-1.0.10-x86_64-1.tgz: Upgraded to libmng-1.0.10.
L software series/libmcs-0.7.0-x86_64-1.tgz: Added libmcs-0.7.0 (replaces mcs package).
L software series/libpng-1.2.25-x86_64-1.tgz: Upgraded to libpng-1.2.25.
L software series/librsvg-2.22.1-x86_64-1.tgz: Upgraded to librsvg-2.22.1.
L software series/libtheora-1.0beta2-x86_64-1.tgz: Upgraded to libtheora-1.0beta2.
L software series/libwpd-0.8.14-x86_64-1.tgz: Upgraded to libwpd-0.8.14.
L software series/libxml2-2.6.31-x86_64-2.tgz: Moved the man pages to the right location.
L software series/mcs-0.4.1-x86_64-2.tgz: Removed.
L software series/mpfr-2.3.1-x86_64-1.tgz: Upgraded to mpfr-2.3.1.
L software series/pango-1.19.4-x86_64-1.tgz: Upgraded to pango-1.19.4.
L software series/pcre-7.6-x86_64-1.tgz: Upgraded to pcre-7.6
L software series/pilot-link-0.12.3-x86_64-1.tgz: Upgraded to pilot-link-0.12.3
L software series/qca-1.0-x86_64-5.tgz: Recompiled.
L software series/qca-tls-1.0-x86_64-7.tgz: Recompiled.
L software series/qt-3.3.8b-x86_64-2.tgz: Recompiled against gcc-4.2.3.
L software series/readline-5.2-x86_64-3.tgz: Applied all official patches
L software series/sdl-1.2.13-x86_64-1.tgz: Upgraded to SDL-1.2.13, SDL_image-1.2.6,
SDL_mixer-1.2.8, SDL_net-1.2.7, and SDL_ttf-2.0.9.
L software series/slang-2.1.3-x86_64-1.tgz: Upgraded to slang-2.1.3.
L software series/startup-notification-0.9-x86_64-1.tgz: Upgraded to startup-notification-0.9.
L software series/tango-icon-theme-0.8.1-noarch-1.tgz: Added Tango icon theme.
L software series/tango-icon-theme-extras-0.1.0-noarch-1.tgz: Added Tango theme extra icons.
L software series/vte-0.16.12-x86_64-1.tgz: Upgraded to vte-0.16.12.
N software series/dnsmasq-2.41-x86_64-1.tgz: Upgraded to dnsmasq-2.41.
N software series/iptraf-3.0.0-x86_64-2.tgz: Absorbed the latest Debian patch. (thanks!

Add support for the legacy Ralink 2500 driver.
N software series/net-snmp-5.4-x86_64-6.tgz: Recompiled to use vendor_perl.
N software series/obexftp-0.21-x86_64-2.tgz: Recompiled to use vendor_perl.
N software series/wget-1.11-x86_64-1.tgz: Upgraded to wget-1.11.
N software series/wpa_supplicant-0.5.9-x86_64-1.tgz: Upgraded to wpa_supplicant-0.5.9.
X software series/compiz-0.7.0-x86_64-1.tgz: Upgraded to compiz-0.7.0.
X software series/luit-1.0.3-x86_64-1.tgz: Upgraded to luit-1.0.3.
X software series/scim-1.4.7-x86_64-4.tgz: Default profile.d scripts to executable.
X software series/xf86-video-trident-1.2.4-x86_64-1.tgz: Upgraded to xf86-video-trident-1.2.4.
X software series/xf86-video-intel-2.2.1-x86_64-1.tgz: Upgraded to xf86-video-intel-2.2.1.
X software series/xf86-video-ati-6.8.0-x86_64-1.tgz: Upgraded to xf86-video-ati-6.8.0.
XAP software series/imagemagick-6.3.7_10-x86_64-1.tgz: Upgraded to ImageMagick-6.3.7-10.
Changed build script to install Perl modules under vendor_perl.
XAP software series/sane-1.0.19-x86_64-2.tgz: Fixed /var/lock permissions.
XAP software series/xfce-4.4.2-x86_64-2.tgz: Patched a memory leak. The recompile also seemed
to pick up new exo and pygtk features.
EXTRA software/intel-wlan-iwlwifi/*: This replaces the older ipw3945 driver and daemon
(no daemon required now). Support was also added for more chipsets, such as
the ipw4965 series.
EXTRA software/jdk-6/jdk-6u4-x86_64-1.tgz: Upgraded to Java(TM) 2 Platform
Standard Edition Development Kit Version 6.0 update 4.
EXTRA software/ktorrent/ktorrent-2.2.5-x86_64-1.tgz: Upgraded to ktorrent-2.2.5.
Mon Feb 25 19:44:53 EET 2008
A software series/mkinitrd-1.3.1-x86_64-3.tgz: Fixed a patch glitch glitch.
+--------------------------+
Sun Feb 24 16:56:50 EET 2008
A software series/mkinitrd-1.3.1-x86_64-2.tgz: Make sure to copy both devices and
symlinks to /dev in the initrd. Fixed a patch glitch.
AP software series/hplip-2.8.2-x86_64-2.tgz: Fixed udev rules.
X software series/m17n-lib-1.5.0-x86_64-2.tgz: Fixed --mandir. Thanks to Kris Karas.
X software series/scim-1.4.7-x86_64-3.tgz: Make the library links first in the install script.
isolinux/initrd.img: Made a minor cosmetic fix to the network script. Fixed an installer patch
that caused preformatted filesystems to be misdetected in some cases.
usb-and-pxe-installers/: Rebuilt.
+--------------------------+
Sat Feb 23 20:39:08 EET 2008
A software series/kernel-huge-2.6.23.16-x86_64-2.tgz: Recompiled.
A software series/kernel-modules-2.6.23.16-x86_64-2.tgz: Recompiled.
D software series/binutils-2.18.50.0.4-x86_64-1.tgz: Upgraded to binutils-2.18.50.0.4.
D software series/gcc-4.2.3-x86_64-1.tgz: Upgraded to gcc-4.2.3 (GCC).
D software series/gcc-g++-4.2.3-x86_64-1.tgz: Upgraded to gcc-4.2.3 (C++).
D software series/gcc-gfortran-4.2.3-x86_64-1.tgz: Upgraded to gcc-4.2.3 (FORTRAN).
D software series/gcc-gnat-4.2.3-x86_64-1.tgz: Upgraded to gcc-4.2.3 (Ada).
D software series/gcc-java-4.2.3-x86_64-1.tgz: Upgraded to gcc-4.2.3 (GCJ).
D software series/gcc-objc-4.2.3-x86_64-1.tgz: Upgraded to gcc-4.2.3 (Objective-C).
D software series/kernel-headers-2.6.23.16-x86_64-2.tgz: Rebuilt.
D software series/oprofile-0.9.2-x86_64-6.tgz: Recompiled.
K software series/kernel-source-2.6.23.16-noarch-2.tgz: Recompiled.
L software series/svgalib_helper-1.9.25_2.6.23.16-x86_64-2.tgz: Rebuilt.
L software series/qca-tls-1.0-x86_64-6.tgz: Rebuilt for Qt 3.3.8b.
N software series/bluez-hcidump-1.41-x86_64-1.tgz: Upgraded to bluez-hcidump-1.41.
N software series/bluez-libs-3.26-x86_64-1.tgz: Upgraded to bluez-libs-3.26.
N software series/bluez-utils-3.26-x86_64-1.tgz: Upgraded to bluez-utils-3.26.
isolinux/initrd.img: Rebuilt.
kernels/huge.s/*: Rebuilt.
usb-and-pxe-installers/: Updated.
+--------------------------+
Fri Feb 22 14:57:08 EET 2008
A software series/cups-1.3.6-x86_64-1.tgz: Upgraded to cups-1.3.6.
A software series/lilo-22.8-x86_64-6.tgz: Fixed some trivial bugs.
AP software series/foomatic-filters-3.0_20080211-x86_64-1.tgz:
Upgraded to foomatic-filters-3.0_20080211.
AP software series/hplip-2.8.2-x86_64-1.tgz: Upgraded to hplip-2.8.2.
D software series/git-1.5.4.2-x86_64-1.tgz: Upgraded to git-1.5.4.2.
D software series/perl-5.8.8-x86_64-8.tgz:
Added XML::Simple perl module for icon-naming-utils.
L software series/cairo-1.4.14-x86_64-1.tgz: Upgraded to cairo-1.4.14.
L software series/desktop-file-utils-0.14-x86_64-1.tgz: Upgraded to desktop-file-utils-0.14.

L software series/gnome-icon-theme-2.20.0-noarch-1.tgz: Upgraded to gnome-icon-theme-2.20.0.
L software series/gtk+2-2.12.8-x86_64-1.tgz: Upgraded to gtk+-2.12.8.
L software series/hicolor-icon-theme-0.10-noarch-1.tgz: Upgraded to hicolor-icon-theme-0.10.
L software series/icon-naming-utils-0.8.6-x86_64-1.tgz: Added utilities for naming icons.
L software series/librsvg-2.20.0-x86_64-1.tgz: Upgraded to librsvg-2.20.0.
L software series/ncurses-5.6-x86_64-3.tgz: Applied all official patches.
L software series/taglib-1.5-x86_64-1.tgz: Upgraded to taglib-1.5.
L software series/poppler-0.6.4-x86_64-1.tgz: Upgraded to poppler-0.6.4.
Activated --enable-xpdf-headers option.
L software series/poppler-data-0.2.0-noarch-1.tgz: Upgraded to poppler-data-0.2.0.
L software series/qt-3.3.8b-x86_64-1.tgz: Upgraded to qt-x11-free-3.3.8b.
L software series/shared-mime-info-0.23-x86_64-1.tgz: Upgraded to shared-mime-info-0.23.
X software series/xterm-232-x86_64-1.tgz: Upgraded to xterm-232.
XAP software series/sane-1.0.19-x86_64-1.tgz: Upgraded sane-backends to version 1.0.19.
Merged HAL/DBUS/udev fixes from Robby Workman.
+--------------------------+
Thu Feb 21 22:39:42 EET 2008
A software series/lilo-22.8-x86_64-5.tgz: Added a simple splash screen

.
A software series/mkinitrd-1.3.1-x86_64-1.tgz: Merged patches for LVM/LUKS,
hibernate, and RAID. Fixed a bug using -o with a relative path.
A software series/sysvinit-scripts-1.2-noarch-15.tgz: Patched /etc/rc.d/rc.S
for some of Eric's changes to LUKS handling in the initrd.
A software series/etc-12.1-noarch-2.tgz: Fixed shared libs PATH in ld.so.conf.
Thanks to Artur for reporting this.
KDE software series/k3b-1.0.4-x86_64-1.tgz: Upgraded to k3b-1.0.4.
KDE software series/kdeaccessibility-3.5.9-x86_64-1.tgz: Upgraded to kdeaccessibility-3.5.9.
KDE software series/kdeaddons-3.5.9-x86_64-1.tgz: Upgraded to kdeaddons-3.5.9.
KDE software series/kdeadmin-3.5.9-x86_64-1.tgz: Upgraded to kdeadmin-3.5.9.
KDE software series/kdeartwork-3.5.9-x86_64-1.tgz: Upgraded to kdeartwork-3.5.9.
KDE software series/kdebase-3.5.9-x86_64-1.tgz: Upgraded to kdebase-3.5.9.
KDE software series/kdebindings-3.5.9-x86_64-1.tgz: Upgraded to kdebindings-3.5.9.
KDE software series/kdeedu-3.5.9-x86_64-1.tgz: Upgraded to kdeedu-3.5.9.
KDE software series/kdegames-3.5.9-x86_64-1.tgz: Upgraded to kdegames-3.5.9.
KDE software series/kdegraphics-3.5.9-x86_64-1.tgz: Upgraded to kdegraphics-3.5.9.
KDE software series/kdelibs-3.5.9-x86_64-1.tgz: Upgraded to kdelibs-3.5.9.
KDE software series/kdemultimedia-3.5.9-x86_64-1.tgz: Upgraded to kdemultimedia-3.5.9.
KDE software series/kdenetwork-3.5.9-x86_64-1.tgz: Upgraded to kdenetwork-3.5.9.
KDE software series/kdepim-3.5.9-x86_64-1.tgz: Upgraded to kdepim-3.5.9.
KDE software series/kdesdk-3.5.9-x86_64-1.tgz: Upgraded to kdesdk-3.5.9.
KDE software series/kdetoys-3.5.9-x86_64-1.tgz: Upgraded to kdetoys-3.5.9.
KDE software series/kdeutils-3.5.9-x86_64-1.tgz: Upgraded to kdeutils-3.5.9.
KDE software series/kdevelop-3.5.1-x86_64-1.tgz: Upgraded to kdevelop-3.5.1.
KDE software series/kdewebdev-3.5.9-x86_64-1.tgz: Upgraded to kdewebdev-3.5.9.
KDEi software series/k3b-i18n-1.0.4-noarch-1.tgz: Upgraded to k3b-i18n-1.0.4.
KDEi software series/kde-i18n-*-3.5.9-noarch-1.tgz: Upgraded to kde-i18n-*-3.5.9.
L software series/arts-1.5.9-x86_64-1.tgz: Upgraded to arts-1.5.9.
L software series/libmad-0.15.1b-x86_64-3.tgz: Added mad.pc.
L software series/libmusicbrainz-2.1.4-x86_64-2.tgz: Removed.
L software series/libtunepimp-0.4.2-x86_64-3.tgz: Removed.
X software series/scim-1.4.7-x86_64-2.tgz: Don't try to use SCIM as the input
method if the package has been removed, or use scim-bridge if that
package is not installed. Remove the LANG variables and give a pointer
to the lang.* scripts. Install script bugfix.
X software series/scim-bridge-0.4.14-x86_64-2.tgz: Install script bugfix.
X software series/ttf-arphic-uming-0.1.20060928-noarch-1.tgz: Removed.
x/wqy-zenhei-font-ttf-0.4.23-noarch-1.tgz: Switched from Arphic to wqy-zenhei.
isolinux/initrd.img: Added network install patches from Eric Hameleers.
usb-and-pxe-installers/: Rebuilt with new patches.
+--------------------------+
Sun Feb 17 19:46:08 EET 2008
AP software series/mysql-5.0.51a-x86_64-1.tgz: Upgraded to mysql-5.0.51a.
X software series/anthy-9100e-x86_64-1.tgz: Added anthy-9100e.
X software series/dejavu-fonts-ttf-2.23-noarch-1.tgz: Upgraded to dejavu-fonts-ttf-2.23.
X software series/libhangul-0.0.7-x86_64-1.tgz: Added libhangul-0.0.7.
X software series/m17n-lib-1.5.0-x86_64-1.tgz: Added m17n-lib-1.5.0.
X software series/sazanami-fonts-ttf-20040629-noarch-1.tgz: Added sazanami-fonts-ttf-20040629.
X software series/scim-1.4.7-x86_64-1.tgz: Added scim-1.4.7.
X software series/scim-anthy-1.2.4-x86_64-1.tgz: Added scim-anthy-1.2.4.
X software series/scim-bridge-0.4.14-x86_64-1.tgz: Added scim-bridge-0.4.14.
X software series/scim-hangul-0.3.2-x86_64-1.tgz: Added scim-hangul-0.3.2.
X software seriesx/scim-m17n-0.2.2-x86_64-1.tgz: Added scim-m17n-0.2.2.
X software series/scim-pinyin-0.5.91-x86_64-1.tgz: Added scim-pinyin-0.5.91.
X software series/scim-tables-0.5.7-x86_64-1.tgz: Added scim-tables-0.5.7.
X software series/sinhala_lklug-font-ttf-20060929-noarch-1.tgz:
Added sinhala_lklug-font-ttf-20060929.
X software series/tibmachuni-font-ttf-1.901-noarch-1.tgz: Added tibmachuni-font-ttf-1.901.
X software series/ttf-arphic-uming-0.1.20060928-noarch-1.tgz:
Added ttf-arphic-uming-0.1.20060928.
+--------------------------+
Fri Feb 15 11:32:37 EET 2008
N software series/httpd-2.2.8-x86_64-1.tgz: Upgraded to httpd-2.2.8.
This fixes security and other bugs.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6421
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6422
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6388
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5000
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0005
[*** Security fix ***]
+--------------------------+
Wed Feb 13 09:42:39 EET 2008
XAP software series/mozilla-firefox-2.0.0.12-x86_64-1.tgz:
Upgraded to firefox-2.0.0.12.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox
[** Security fix ***]
XAP software series/seamonkey-1.1.8-x86_64-1.tgz:
Upgraded to seamonkey-1.1.8.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#seamonkey
[*** Security fix ***]
+--------------------------+
Tue Feb 12 17:59:48 EET 2008
A software series/kernel-huge-2.6.23.16-x86_64-1.tgz:
Upgraded to Linux 2.6.23.16 SMP huge.s (full-featured) kernel.
This kernel upgrade fix yesterday's local root exploit.
The kernel headers did not change, so a glibc rebuild is not required.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0010
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0163
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0600
(* Security fix *)
If you use lilo, don't forget to run it again after the upgrade.
A software series/kernel-modules-2.6.23.16-x86_64-1.tgz
Upgraded to Linux 2.6.23.16 SMP kernel modules.
D software series/kernel-headers-2.6.23.16-x64_64-1.tgz:
Upgraded to Linux 2.6.23.16 SMP kernel headers.
K software series/kernel-source-2.6.23.16-noarch-1.tgz
Upgraded to Linux 2.6.23.16 SMP kernel source.
(* Security fix *)
L software series/svgalib_helper-1.9.25_2.6.23.16-x86_64-1.tgz:
Rebuilt for 2.6.23.16 kernels.
isolinux/initrd.img: Upgraded modules to 2.6.23.16.
kernels/huge.s/*: Upgraded huge.s kernel to 2.6.23.16 (SMP).
(* Security fix *)
usb-and-pxe-installers/: Updated USB and PXE installers to 2.6.23.16 modules.
+--------------------------+
Mon Feb 11 18:30:16 EET 2008
A software series/cups-1.3.5-x86_64-1.tgz: Upgraded to cups-1.3.5.
A software series/e2fsprogs-1.40.6-x86_64-1.tgz: Upgraded to e2fsprogs-1.40.6.
L software series/glib2-2.14.6-x86_64-1.tgz: Upgraded to glib-2.14.6.
XAP software series/gimp-2.4.4-x86_64-1.tgz: Upgraded to gimp-2.4.4.
isolinux/initrd.img: Upgraded libraries and utilities to e2fsprogs-1.40.6.
usb-and-pxe-installers/: Updated libraries and utilities to e2fsprogs-1.40.6.
+--------------------------+
Sun Feb 10 13:42:01 EET 2007
K software series/kernel-source-2.6.23.15-noarch-2.tgz: Fixed /usr/src/linux symlink.
usb-and-pxe-installers/*: Upgraded to Linux 2.6.23.15 SMP kernel modules.
isolinux/initrd.img: Fixed some text in /etc/issue.
+--------------------------+
Sun Feb 10 02:16:11 EET 2008
A software series/device-mapper-1.02.24-x86_64-1.tgz: Upgraded to device-mapper.1.02.24.
A software series/glibc-solibs-2.7-x86_64-6.tgz: Recompiled against 2.6.23.15.
Bumped everything to -6 since glibc-zoneinfo has been at -5 already.
A software series/glibc-zoneinfo-2.7-noarch-6.tgz: Rebuilt.
A software series/kernel-huge-2.6.23.15-x86_64-1.tgz:
Upgraded to Linux 2.6.23.15 SMP huge.s (full-featured) kernel.
A software series/kernel-modules-2.6.23.15-x86_64-1.tgz:
Upgraded to Linux 2.6.23.15 SMP kernel modules.
D software series/kernel-headers-2.6.23.15-x86_64-1.tgz:
Upgraded to Linux 2.6.23.15 SMP kernel headers.
K software series/kernel-source-2.6.23.15-noarch-1.tgz:
Upgraded to Linux 2.6.23.15 SMP kernel source.
A software series/lvm2-2.02.33-x86_64-1.tgz: Upgraded to LVM2.2.02.33.
L software series/glibc-2.7-x86_64-6.tgz: Recompiled against 2.6.23.15.
L software series/glibc-i18n-2.7-noarch-6.tgz: Rebuilt.
L software series/glibc-profile-2.7-x86_64-6.tgz: Recompiled against 2.6.23.15.
L software series/svgalib_helper-1.9.25_2.6.23.15-x86_64-1.tgz:
Rebuilt for 2.6.23.15 kernels.
XAP software series/xine-lib-1.1.10.1-x86_64-1.tgz: Upgraded to xine-lib-1.1.10.1.
isolinux/initrd.img: Massive overhaul, primarily the work and initiative of
Eric Hameleers. Work above and beyond the call of duty. If we gave out
medals of honor, this would deserve one.

The installer now supports network installs from not just NFS, but also
HTTP and FTP. Please be nice to our mirrors -- this feature is _intended_
for use within private networks from your own "site".
Work is also underway to fully support unattended/remote installs. The
installer has both a small ssh and sshd (dropbear). Thanks again Eric!
This is something that's been on the drawing board for many years.
isolinux/network.dsk: Upgraded to Linux 2.6.23.15 SMP kernel modules.
isolinux/pcmcia.dsk: Upgraded to Linux 2.6.23.15 SMP kernel modules.
kernels/huge.s/*: Upgraded huge.s kernel to 2.6.23.15.
usb-and-pxe-installers/: usbboot.img: Converted to FAT (16 bit) FS.
Thanks to Gerardo Exequiel Pozzi for reporting that usbboot.img uses ext2fs.
+--------------------------+
Wed Feb 6 12:19:42 EET 2008
E software series/emacs-info-21.4a-x86_64-1.tgz: Renamed to emacs-info-21.4a.
E software series/emacs-leim-21.4a-x86_64-1.tgz: Renamed to emacs-leim-21.4a.
E software series/emacs-lisp-21.4a-x86_64-1.tgz: Renamed to emacs-lisp-21.4a.
E software series/emacs-nox-21.4a-x86_64-2.tgz: Renamed to emacs-nox-21.4a.
E software series/emacs-misc-21.4a-x86_64-1.tgz: Renamed to emacs-misc-21.4a.
Thanks to Gerardo Exequiel for pointing out that this emacs packages has
a wrong version name. Only the packages, the software itself is 21.4a

.
L software series/arts-1.5.8-x86_64-1.tgz: Upgraded to arts-1.5.8.
Thanks to Gerardo Exequiel Pozzi for reporting this.
KDEi/software series/k3b-i18n-1.0.3-noarch-1.tgz: Upgraded to /k3b-i18n-1.0.3.
Thanks to Gerardo Exequiel Pozzi for reporting this.
This two upgrades was unintentionally missed

.
+--------------------------+
Sat Feb 2 11:07:31 EET 2008
A software series/e2fsprogs-1.40.5-x86_64-1.tgz: Upgraded to e2fsprogs-1.40.5.
D software series/subversion-1.4.6-x86_64-1.tgz: Upgraded to subversion-1.4.6.
KDE software series/kdesdk-3.5.8-x86_64-2.tgz: Recompiled to pick up new apr/neon/svn libs.
A couple of bugzilla-related files have now appeared in the package.
KDE software series/kdevelop-3.5.0-x86_64-2.tgz: Recompiled to pick up new apr/neon/svn libs.
L software series/apr-1.2.12-x86_64-1.tgz: Upgraded to apr-1.2.12.
L software series/apr-util-1.2.12-x86_64-1.tgz: Upgraded to apr-util-1.2.12.
L software series/neon-0.26.4-x86_64-1.tgz: Upgraded to neon-0.26.4. There are newer versions,
but this is newer than what we had and allows everything to work for now.
XAP software series/audacious-1.4.6-x86_64-1.tgz: Upgraded to audacious-1.4.6.
XAP software series/audacious-plugins-1.4.5-x86_64-1.tgz: Upgraded to audacious-plugins-1.4.5.
Now with an upgraded neon library, this uses neon for http/https transport.
+--------------------------+
Fri Feb 1 18:27:07 EET 2008
AP software series/alsa-utils-1.0.15-x86_64-1.tgz: Upgraded to alsa-utils-1.0.15.
L software series/alsa-lib-1.0.15-x86_64-1.tgz: Upgraded to alsa-lib-1.0.15.
L software series/alsa-oss-1.0.15-x86_64-1.tgz: Upgraded to alsa-oss-1.0.15.
X software series/font-misc-misc-1.0.0-noarch-3.tgz: Removed bogus fonts.alias.
The install scripts will make it.
X software series/libXmu-1.0.4-x86_64-1.tgz: Upgraded to libXmu-1.0.4.
X software series/xf86-video-nv-2.1.7-x86_64-1.tgz: Upgraded to xf86-video-nv-2.1.7.
X software series/xinput-1.3.0-x86_64-1.tgz: Added xinput-1.3.0.
+--------------------------+
Thu Jan 31 18:29:59 EET 2008
D software series/ruby-1.8.6_p111-x86_64-2.tgz: Moved some comments out
of the ./configure part of the build script to fix a couple of missed options.
KDE software series/amarok-1.4.8-x86_64-1.tgz: Upgraded to amarok-1.4.8.
L software series/atk-1.21.5-x86_64-1.tgz: Upgraded to atk-1.21.5.
L software series/gtk+2-2.12.7-x86_64-1.tgz: Upgraded to gtk+-2.12.7.
L software series/libmowgli-0.6.0-x86_64-1.tgz:
Added libmowgli-0.6.0, which is needed by Audacious.
L software series/libmtp-0.2.5-x86_64-1.tgz: Upgraded to libmtp-0.2.5.
L software series/libgpod-0.6.0-x86_64-1.tgz:
Upgraded to libgpod-0.6.0 (major version bump).
L software series/pango-1.19.3-x86_64-1.tgz: Upgraded to pango-1.19.3.
XAP software series/audacious-1.4.5-x86_64-1.tgz: Upgraded to audacious-1.4.5.
XAP software series/audacious-plugins-1.4.4-x86_64-1.tgz:
Upgraded to audacious-plugins-1.4.4-x86_64-1.tgz.
XAP software series/xine-lib-1.1.10-x86_64-1.tgz: Upgraded to xine-lib-1.1.10.
EXTRA software/slackpkg/slackpkg-2.70-noarch-1.tgz: Upgraded to slackpkg-2.70.
+--------------------------+
Wed Jan 9 21:24:05 EET 2008
AP software series/nano-2.0.7-x86_64-1.tgz: Upgraded to nano-2.0.7.
D software series/mercurial-0.9.5-x86_64-1.tgz: Upgraded to mercurial-0.9.5.
D software series/ruby-1.8.6_p111-x86_64-1.tgz: Upgraded ruby-1.8.6 to patchlevel 111.
L software series/atk-1.20.0-x86_64-1.tgz: Upgraded to atk-1.20.0.
L software series/glib2-2.14.5-x86_64-1.tgz: Upgraded to glib-2.14.5.
L software series/gtk+2-2.12.4-x86_64-1.tgz: Upgraded to gtk+-2.12.4.
L software series/libxml2-2.6.30-x86_64-1.tgz: Upgraded to libxml2-2.6.30.
L software series/libxslt-1.1.22-x86_64-1.tgz: Upgraded to libxslt-1.1.22.
L software series/pango-1.19.2-x86_64-1.tgz: Upgraded to pango-1.19.2.
L software series/pycairo-1.4.12-x86_64-1.tgz: Added pycairo-1.4.12.
L software series/pygobject-2.14.1-x86_64-1.tgz: Added pygobject-2.14.1.
L software series/pygtk-2.12.1-x86_64-1.tgz: Added pygtk-2.12.1.
L software series/pyrex-0.9.6.4-x86_64-1.tgz: Added Pyrex-0.9.6.4.
X software series/dejavu-fonts-ttf-2.22-noarch-1.tgz: **NOTE PACKAGE NAME CHANGE**
Upgraded to version 2.22.
X software series/liberation-fonts-ttf-0.2-noarch-3.tgz: Added liberation-fonts-ttf-0.2-3.
X software series/xf86-video-ati-6.7.197-i486-1.tgz: Upgraded to xf86-video-ati-6.7.197.
X software series/xf86-video-radeonhd-1.1.0-i486-1.tgz: Upgraded to xf86-video-radeonhd-1.1.0.
XAP software series/seamonkey-1.1.7-x86_64-2.tgz: Use the system cairo to avoid a compile error.
Patched a Makefile.in to avoid another compile error with the new GTK+.
+--------------------------+
Tue Jan 1 15:57:16 EET 2008
A software series/glibc-zoneinfo-2.7-noarch-5.tgz: Upgraded to tzdata2007k.
A new year should be started with the latest timezone data, so here it is.
Happy holidays, and a happy new year to all!

+--------------------------+
Mon Dec 24 12:56:19 EET 2007
isolinux/network.dsk, pcmcia.dsk: Recreated to reflect the current changes.
usb-and-pxe-installers/usbboot.img: Recreated to reflect the current changes.
+--------------------------+
Sun Dec 23 17:55:14 EET 2007
L software series/libgsf-1.14.7-x86_64-1.tgz: Upgraded to libgsf-1.14.7.
A software series/glibc-solibs-2.7-x86_64-4.tgz: Upgraded to glibc-2.7 compiled against Linux
2.6.23.12 kernel headers.
A software series/glibc-zoneinfo-2.7-noarch-4.tgz: Upgraded to tzdata2007j.
A software series/kernel-huge-2.6.23.12-x86_64-1.tgz:
Upgraded to Linux 2.6.23.12 SMP huge.s (full-featured) kernel.
A software series/kernel-modules-2.6.23.12-x86_64-1.tgz
Upgraded to Linux 2.6.23.12 SMP kernel modules.
D software series/kernel-headers-2.6.23.12-x86_64-1.tgz:
Upgraded to Linux 2.6.23.12 SMP kernel headers.
D software series/kernel-source-2.6.23.12-noarch-1.tgz
Upgraded to Linux 2.6.23.12 SMP kernel source.
L software series/glibc-2.7-x86_64-4.tgz: Rebuilt against Linux 2.6.23.12 kernel headers.
L software series/glibc-i18n-2.7-noarch-4.tgz: Rebuilt.
L software series/glibc-profile-2.7-x86_64-4.tgz: Rebuilt against Linux 2.6.23.12 headers.
L software series/svgalib_helper-1.9.25_2.6.23.12-x86_64-1.tgz: Recompiled for Linux 2.6.23.12.
isolinux/network.dsk, pcmcia.dsk; Upgraded to 2.6.23.12 kernel modules.
kernels/huge.s/*: Upgraded huge.s kernel to 2.6.23.12.
usb-and-pxe-installers/: Updated USB and PXE installers.
A software series/pkgtools-12.1.0-noarch-2.tgz: Fixed a regex bug in a grep in installpkg that
could cause packages that do not conform to the FHS (those containing single-
character top-level directories) to not be removable or upgradeable through
the pkgtools. Made the top-line with -infobox more terse since some of the package names
have become too long to fit, and were disturbing the infobox's formatting.
isolinux/initrd.img: Upgraded to the latest installpkg.
+--------------------------+
Sat Dec 15 13:40:34 EET 2007
A software series/mkinitrd-1.3.0-x86_64-4.tgz: Fixed a bug that could cause modprobe to
attempt to load the same module more than once (due to whitespace differences in
the initramfs's load_kernel_modules script).
AP software series/mysql-5.0.51-x86_64-1.tgz: Upgraded to mysql-5.0.51.
This release fixes several bugs, including some security issues.
However, it also includes a potentially incompatible change, so be sure
to read the release notes before upgrading. It is possible that some
databases will need to be fixed in order to work with this (and future)
releases:
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-51.html
For more information about the security issues fixed, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3781
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5925
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5969
[*** Security fix ***]
F software series/linux-howtos-20071214-noarch-1.tgz: Upgraded to linux-howtos-20071214.
L software series/hal-info-20071212-noarch-1.tgz: Upgraded to hal-info-20071212.
L software series/libpng-1.2.24-x86_64-1.tgz: Upgraded to libpng-1.2.24.
N software series/nmap-4.50-x86_64-1.tgz: Upgraded to nmap-4.50.
X software series/xf86-input-joystick-1.3.1-x86_64-1.tgz: Upgraded to xf86-input-joystick-1.3.1.
X software series/xf86-video-radeonhd-1.0.0-x86_64-1.tgz: Added xf86-video-radeonhd-1.0.0.
X software series/xorg-server-1.4.0.90-x86_64-1.tgz: Upgraded to xorg-server-1.4.0.90.
X software series/xorg-server-xnest-1.4.0.90-x86_64-1.tgz: Upgraded to xorg-server-xnest-1.4.0.90.
X software series/xorg-server-xvfb-1.4.0.90-x86_64-1.tgz: Upgraded to xorg-server-xvfb-1.4.0.90.
XAP software series/imagemagick-6.3.7_4-x86_64-1.tgz: Upgraded to ImageMagick-6.3.7-4.
+--------------------------+
Tue Dec 11 21:52:51 EET 2007
L software series/vte-0.16.10-x86_64-1.tgz: Upgraded to vte-0.16.10.
N software series/proftpd-1.3.1-x86_64-1.tgz: Upgraded to proftpd-1.3.1.
N software series/samba-3.0.28-x86_64-1.tgz:
Upgraded to samba-3.0.28.
Samba 3.0.28 is a security release in order to address a boundary failure
in GETDC mailslot processing that can result in a buffer overrun leading
to possible code execution.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6015
http://www.samba.org/samba/history/samba-3.0.28.html
http://secunia.com/secunia_research/2007-99/advisory/
[*** Security fix ***]
XAP software series/gkrellm-2.3.1-x86_64-1.tgz: Upgraded to gkrellm-2.3.1.
XAP software series/pidgin-2.3.1-x86_64-1.tgz: Upgraded to pidgin-2.3.1.
XAP software series/xchat-2.8.4-x86_64-1.tgz: Upgraded to xchat-2.8.4.
EXTRA/ktorrent/ktorrent-2.2.4-x86_64-1.tgz: Upgraded to ktorrent-2.2.4.
+--------------------------+
Thu Dec 6 11:02:11 EET 2007
A software series/hdparm-7.7-x86_64-1.tgz: Upgraded to hdparm-7.7.
Moved hdparm binary to /sbin.
A software series /kernel-huge-2.6.23.9-x86_64-2.tgz: Rebuilt.
A software series/kernel-modules-2.6.23.9-x86_64-2.tgz Added JFFS2 modules.
D software series/kernel-headers-2.6.23.9-x86_64-2.tgz: Rebuilt.
K software series/kernel-source-2.6.23.9-noarch-2.tgz: Reconfigured to include
the option for JFFS2, a journalling flash file system.
L software series/svgalib_helper-1.9.25_2.6.23.9-x86_64-2.tgz: Recompiled.
XAP software series/gimp-2.4.2-i486-1.tgz: Upgraded to gimp-2.4.2.
isolinux/network.dsk, pcmcia.dsk; Upgraded kernel modules.
kernels/huge.s/*: Upgraded huge.s kernel.
usb-and-pxe-installers/: Updated USB and PXE installers.
+--------------------------+
Tue Dec 4 23:53:02 EET 2007
A software series/inotify-tools-3.12-x86_64-1.tgz: Added inotify-tools-3.12.
AP software series/cdparanoia-III10pre0-x86_64-1.tgz: Upgraded to cdparanoia-III-10pre0.
AP software series/hplip-2.7.10-x86_64-2.tgz: Rebuilt with some fixes to the build script.
KDE software series/amarok-1.4.7-x86_64-2.tgz: Recompiled against libmtp-0.2.4.
L software series/cairo-1.4.12-x86_64-1.tgz: Upgraded to cairo-1.4.12.
This fixes a possible security risk when decoding PNG files that may have
been maliciously tampered with:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5503
[*** Security fix ***]
L software series/libmtp-0.2.4-x86_64-1.tgz: Upgraded to libmtp-0.2.4.
L software series/libnjb-2.2.6-i486-2.tgz: Updated udev rules.
N software series/bluez-hcidump-1.40-x86_64-1.tgz: Upgraded to bluez-hcidump-1.40.
N software series/bluez-libs-3.22-x86_64-1.tgz: Upgraded to bluez-libs-3.22.
N software series/bluez-utils-3.22-x86_64-1.tgz: Upgraded to bluez-utils-3.22.
N software series/gnupg2-2.0.7-x86_64-1.tgz: Upgraded to gnupg2-2.0.7.
N software series/gnutls-2.0.4-x86_64-1.tgz: Upgraded to gnutls-2.0.4.
N software series/gpgme-1.1.5-x86_64-1.tgz: Upgraded to gpgme-1.1.5.
N software series/libassuan-1.0.3-x86_64-1.tgz: Upgraded to libassuan-1.0.3.
N software series/libgpg-error-1.6-x86_64-1.tgz: Upgraded to libgpg-error-1.6.
N software series/libksba-1.0.2-x86_64-1.tgz: Upgraded to libksba-1.0.2.
N software series/mcabber-0.9.5-x86_64-1.tgz: Upgraded to mcabber-0.9.5.
N software series/pinentry-0.7.4-x86_64-1.tgz: Upgraded to pinentry-0.7.4.
N software series/samba-3.0.27a-x86_64-1.tgz: Upgraded to samba-3.0.27a.
This update fixes a crash bug regression experienced by smbfs clients caused
by the fix for CVE-2007-4572.
XAP software/xfce-4.4.2-x86_64-1.tgz: Upgraded to xfce-4.4.2.
Thanks to Robby Workman for the build script.
This fixes a minor security bug in Terminal:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3770
[*** Security fix ***]
+--------------------------+
Sun Dec 2 11:48:09 EET 2007
N software series/rsync-2.6.9-x86_64-2.tgz:
Patched some security bugs.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4091
http://lists.samba.org/archive/rsync-announce/2007/000050.html
[*** Security fix ***]
XAP software series/mozilla-firefox-2.0.0.11-x86_64-1.tgz:
Upgraded to Firefox 2.0.0.11, which fixed a bug introduced by the
2.0.0.10 update in the < canvas > feature that affected some web pages
and extensions.
+--------------------------+
Fri Nov 30 20:16:36 EET 2007
XAP software series/seamonkey-1.1.7-x86_64-1.tgz:
Upgraded to seamonkey-1.1.7.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#seamonkey
[*** Security fix ***]
A software series/mkinitrd-1.3.0-x86_64-3.tgz: Fixed a missing '--parents'
in a cp command.
A software series/glibc-solibs-2.7-x86_64-3.tgz: Fixed incorrect version
numbers in the install script.
A software series/glibc-zoneinfo-2.7-noarch-3.tgz: Rebuilt.
L software series/glibc-2.7-x86_64-3.tgz: Fixed incorrect version
numbers in the install script.
L software series/glibc-i18n-2.7-noarch-3.tgz: Rebuilt.
L software series/glibc-profile-2.7-x86_64-3.tgz: Rebuilt.
+--------------------------+
Thu Nov 29 22:18:43 EET 2007
AP software series/cdrtools-2.01.01a36-x86_64-1.tgz: Upgraded to cdrtools-2.01.01a36.
A software series/glibc-solibs-2.7-x86_64-2.tgz: Upgraded to glibc-2.7 compiled against
Linux 2.6.23.9 kernel headers.
A software series/glibc-zoneinfo-2.7-noarch-2.tgz: Upgraded to tzdata2007i.
A software series/kernel-huge-2.6.23.9-x86_64-1.tgz:
Upgraded to Linux 2.6.23.9 SMP huge.s (full-featured) kernel.
A software series/kernel-modules-2.6.23.9-x86_64-1.tgz:
Upgraded to Linux 2.6.23.9 SMP kernel modules.
AP software series/ghostscript-8.61-x86_64-1.tgz: Upgraded to ghostscript-8.61.
This is still under the GPL -- just FYI, I do not know why the package name
changed. This package replaces gnu-ghostscript-8.60.0-x86_64-2.
D software series/kernel-headers-2.6.23.9-x86_64-1.tgz:
Upgraded to Linux 2.6.23.9 SMP kernel headers.
K software series/kernel-source-2.6.23.9-noarch-1.tgz:
Upgraded to Linux 2.6.23.9 SMP kernel source.
L software series/gamin-0.1.9-x86_64-1.tgz: Upgraded to gamin-0.1.9.
L software series/glibc-2.7-x86_64-2.tgz: Upgraded to glibc-2.7, built against
Linux 2.6.23.9 kernel headers.
* NOTE: Packages for -current built after this batch of packages (up to
* the datestamp above) will be linked against glibc-2.7 and _may_ not work
* on systems running earlier versions of glibc (such as Bluewhite64 12.0
* systems running glibc-2.5).
L software series/glibc-i18n-2.7-noarch-2.tgz: Upgraded to glibc-2.7 locale files.
L software series/glibc-profile-2.7-x86_64-2.tgz: Upgraded to glibc-2.7 profile libs.

L software series/svgalib_helper-1.9.25_2.6.23.9-x86_64-1.tgz: Recompiled for Linux 2.6.23.9.
isolinux/initrd.img: Upgraded to glibc-2.7. Added dmidecode.
isolinux/network.dsk, pcmcia.dsk; Upgraded to 2.6.23.9 kernel modules.
kernels/huge.s/*: Upgraded huge.s kernel to 2.6.23.9.
usb-and-pxe-installers/: Updated USB and PXE installers.
+--------------------------+
Wed Nov 28 23:13:59 EET 2007
A software series/mkinitrd-1.3.0-x86_64-2.tgz: Edited two spots where grep was searching
for / rather than ' on / '.
+--------------------------+
Wed Nov 28 20:40:53 EET 2007
A software series/mkinitrd-1.3.0-x86_64-1.tgz: Upgraded to mkinitrd-1.3.0.
This fixes a bug where some module options could be ignored.
XAP software series/mozilla-firefox-2.0.0.10-x86_64-1.tgz:
Upgraded to firefox-2.0.0.10.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox
[*** Security fix ***]
+--------------------------+
Wed Nov 21 22:12:46 EET 2007
A software series/kernel-huge-2.6.23.8-x86_64-1.tgz:
Upgraded to Linux 2.6.23.8 SMP huge.s (full-featured) kernel.
A software series/kernel-modules-2.6.23.8-x86_64-1.tgz
Upgraded to Linux 2.6.23.8 SMP kernel modules.
D software series/kernel-headers-2.6.23.8-x86_64-1.tgz:
Upgraded to Linux 2.6.23.8 SMP kernel headers.
K software series/kernel-source-2.6.23.8-noarch-1.tgz
Upgraded to Linux 2.6.23.8 SMP kernel source.
L software series/libpng-1.2.23-x86_64-1.tgz:
Upgraded to libpng-1.2.23.
Previous libpng versions may crash when loading malformed PNG files.
It is not currently known if this vulnerability can be exploited to
execute malicious code.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5266
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5267
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5268
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5269
[*** Security fix ***]
L software series/svgalib_helper-1.9.25_2.6.23.8-x86_64-1.tgz: Recompiled for Linux 2.6.23.8.
isolinux/network.dsk, pcmcia.dsk; upgraded to 2.6.23.8 kernel modules.
initrd.img: Upgraded to hdparm-7.6.
kernels/huge.s/*: Upgraded huge.s kernel to 2.6.23.8.
usb-and-pxe-installers/: Updated USB and PXE installers.
XAP software series/mozilla-thunderbird-2.0.0.9-x86_64-1.tgz:
Upgraded to thunderbird-2.0.0.9.
This update fixes the following security related issues:
URIs with invalid %-encoding mishandled by Windows (MFSA 2007-36).
Crashes with evidence of memory corruption (MFSA 2007-29).
OK, so the first one obviously does not affect us.

The second fix has
to do with the same JavaScript handling problem fixed before in Firefox.
JavaScript is not enabled by default in Thunderbird, and the developers
(at least in MFSA 2007-36) do not recommend turning it on.
For more information, see:
http://www.mozilla.org/security/announce/2007/mfsa2007-36.html
http://www.mozilla.org/security/announce/2007/mfsa2007-29.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4841
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5339
[*** Security fix ***]
+--------------------------+
Sun Nov 18 00:36:19 EET 2007
AP software series/cdparanoia-IIIalpha9.8-x86_64-4.tgz: Recompiled with SG_IO patch.
This didn't seem to make a noticable difference, but to someone it might.
X software series/xf86-video-intel-2.2.0-x86_64-1.tgz: Upgraded to xf86-video-intel-2.2.0
X software series/xf86-video-sis-0.9.4-x86_64-1.tgz: Upgraded to xf86-video-sis-0.9.4.
OK, now that that Samba fix is done, we can give you a working X server.

Evidently, the HAL/D-Bus enabled X server, xf86-input-evdev, and one of HAL's
.fdi files aren't playing well together. After considering three possible
workarounds, it was decided to disable D-Bus/HAL support in the X server for
now. If you really want to play with X input hotplugging, it's easy enough to
modify the source/x/x11/configure xorg-server configure file to enable D-Bus
and HAL and run: ./x11.SlackBuild xserver xorg-server
Xdmx remains gone per X build recommendations.
X software series/xorg-server-1.4-x86_64-4.tgz: Recompiled without input hotplugging support.
X software series/xorg-server-xnest-1.4-x86_64-4.tgz: Rebuilt.
X software series/xorg-server-xvfb-1.4-x86_64-4.tgz: Rebuilt.
XAP software series/xscreensaver-5.04-x86_64-1.tgz: Upgraded to xscreensaver-5.04.
N software series/samba-3.0.27-x86_64-1.tgz:
Upgraded to samba-3.0.27.
Samba 3.0.27 is a security release in order to address a stack buffer
overflow in nmbd's logon request processing, and remote code execution in
Samba's WINS server daemon (nmbd) when processing name registration followed
name query requests.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4572
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5398
[*** Security fix ***]
+--------------------------+
Thu Nov 15 13:58:13 EET 2007
X software series/xf86-input-evdev-1.2.0-x86_64-1.tgz: Upgraded to xf86-input-evdev-1.2.0.
X software series/xf86-input-joystick-1.3.0-x86_64-1.tgz: Upgraded to xf86-input-joystick-1.3.0.
X software series/mesa-7.0.2-x86_64-1.tgz: Upgraded to mesa-7.0.2.
X software series/xf86-video-ati-6.7.196-x86_64-1.tgz: Upgraded to xf86-video-ati-6.7.196.
X software series/xf86-video-intel-2.1.99-x86_64-1.tgz: Upgraded to xf86-video-intel-2.1.99.
X software series/xorg-server-1.4-x86_64-2.tgz: Rebuilt against Mesa 7.0.2.
Removed support for XDMX, as the code is not maintained and interferes with
input hotplug support.
X software series/xorg-server-xdmx-1.4-x86_64-1.tgz: Removed.
X software series/xorg-server-xnest-1.4-x86_64-2.tgz: Rebuilt.
X software series/xorg-server-xvfb-1.4-x86_64-2.tgz: Rebuilt.
+--------------------------+
Mon Nov 12 22:23:43 EET 2007
KDE software series/kdegraphics-3.5.8-x86_64-2.tgz:
Patched xpdf related bugs.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3387
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4352
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5392
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5393
[*** Security fix ***]
KDE software series/koffice-1.6.3-x86_64-2.tgz:
Patched xpdf related bugs.
For more information, see:
http://www.kde.org/info/security/advisory-20071107-1.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3387
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4352
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5392
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5393
[*** Security fix ***]
L software series/pcre-7.4-x86_64-1.tgz: Upgraded to pcre-7.4.
L software series/poppler-0.6.2-x86_64-1.tgz: Upgraded to poppler-0.6.2.
This release fixes xpdf related bugs.
For more information, see:
http://poppler.freedesktop.org/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4352
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5392
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5393
[*** Security fix ***]
XAP software series/xpdf-3.02pl2-x86_64-1.tgz: Upgraded to xpdf-3.02pl2.
The pl2 patch fixes a crash in xpdf.
Some theorize that this could be used to execute arbitrary code if an
untrusted PDF file is opened, but no real-world examples are known (yet).
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3387
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4352