Security List Updates

ruario · 01-19-2012, 04:08 PM

Quote:

Originally Posted by ruario

To be totally fair, I haven't reported this yet. I must remember to do that tomorrow.

Screw it, I have done it now so I don't forget again:
https://sourceforge.net/apps/trac/salix/ticket/762

brianL · 01-20-2012, 02:13 AM

Ah, I haven't opened anything with this Firefox via the terminal, so I haven't noticed that. It will be going when an "official" Slackware update comes along.

BlackRider · 01-20-2012, 03:06 AM

You can download the binary package for Firefox from their web page and unpack it in /opt, then make some kind of shortcut to it.

It works perfectly in my computer.

brianL · 01-20-2012, 03:14 AM

Yeah, I did that with 8.0.1. Just thought I'd try the Salix package this time.

ruario · 01-20-2012, 05:29 AM

Quote:

Originally Posted by brianL

Yeah, I did that with 8.0.1. Just thought I'd try the Salix package this time.

I see that gapan has already closed the bug I opened fixed the build script on the main mirror so I suspect that new packages will appear fairly soon. Or you could always try my script as an alternative.

brianL · 01-20-2012, 05:38 AM

Thanks, but I don't often open anything in Firefox from the terminal. Usually use the right-click context menu. So I'll leave it as it is, for now.

bonixavier · 01-20-2012, 08:28 PM

Quote:

Originally Posted by mlangdn

If you are running -current like I am, you will have to first recompile libnotify and probably notify-python as well. I did both before ff-9.0.1 would compile on -current.

I set up a clean -current vm in qemu and it compiled fine. The same goes for Thunderbird 9.0.1, but you have to change the references from beta to release in the SlackBuild in /testing.

mlangdn · 01-21-2012, 01:41 AM

Then it looks like somewhere along the way libnotify got screwed up by something I did. Last night I went ahead and compiled Firefox-10b5 and Thunderbird-10b4. Happily running both.

ponce · 01-27-2012, 01:55 AM

FYI: if someone, like me

, updates curl (the current slackbuild works fine with latest sources and certificates), you will probably hit a message of a missing include "curl/types.h" when rebuilding some other software over it: the reason is that the header in question has been deprecated.

reading the commit, if we're not dealing with very ancient sources (last seen, april 2004), should be safe to cut the requirement out of them (until the upstream maintainers handle the matter).
here, avoiding patches, I opted for sed on libofa and conky slackbuilds, like (for the latter)

Code:

sed -i "s|^#include <curl/types\.h>||" src/{eve.c,ccurl_thread.c}

hope this saves some hassle

ponce · 01-31-2012, 11:26 AM

Updated apache to 2.2.22 (using the current slackbuild), fixes CVE-2012-0053.

Updated also seamonkey to 2.7, firefox to 10.0 and thunderbird to 10.0.

All of these seem to run fine, no probs so far.

dive · 01-31-2012, 04:33 PM

A couple of guys on IRC have also been working on this:

http://slackwiki.com/Category:Security:SSA

ponce · 02-01-2012, 02:49 AM

I missed that, nice! Thanks, David

major.tom · 02-01-2012, 08:59 PM

Our prayers have been answered. It seems PV has had a "bit" of bother...

ftp://ftp.osuosl.org/pub/slackware/s.../ChangeLog.txt

Quote:

Wed Feb 1 23:20:04 UTC 2012
$(fortune) just obtained logging in to stamp the Changelog, finally:
"You single-handedly fought your way into this hopeless mess."
Well, we'll work on rectifying that situation. :-) Sorry about the
lack of updates... everything here blew up all at once, it seemed, but
equipment, upstream targets, and reality all seem to be settling down
enough to get these updates out and have them be an actual improvement
over what's already up. Hope to have more soon. Cheers!

D1ver · 02-01-2012, 09:19 PM

Praise Bob

brianL · 02-02-2012, 07:26 AM

Yes, you can all stop having panic attacks and lay off the tranquilizers now.