Thu Aug 30 23:35:53 UTC 2012
Well, we fixed a lot of bugs and took some upgrades that we pretty much
needed to take since they were important bug and/or security fixes, so
it looks like we'll need to have a 14.0 release candidate 4 and another
(last?) round of testing.  Hopefully the fourth time is the charm!
a/cpio-2.11-x86_64-2.txz:  Rebuilt.
  Fix CRC evaluation.
  Thanks to appzer0 and Nekrodes.
a/dbus-1.4.20-x86_64-3.txz:  Rebuilt.
  Patched to set HOME properly to avoid a /.config directory.  The fix is
  a little ugly, but seems harmless enough (and is less ugly than /.config).
a/glibc-solibs-2.15-x86_64-6.txz:  Rebuilt.
a/glibc-zoneinfo-2012e_2012e-noarch-6.txz:  Rebuilt.
a/pkgtools-14.0-noarch-2.tgz:  Rebuilt.
  In setup.services, don't say that D-Bus is needed by HAL.
a/slocate-3.1-x86_64-4.txz:  Rebuilt.
  Patched to use lstat64 and -D_LARGEFILE64_SOURCE.  Thanks to Mancha+.
  Patched to fix information leak of filenames in protected directories.
  For more information, see:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0227
  (* Security fix *)
a/usb_modeswitch-1.2.4-x86_64-2.txz:  Rebuilt.
  Compressed man page.
ap/mysql-5.5.27-x86_64-1.txz:  Upgraded.
  Thanks to Ken Zalewski.
ap/powertop-2.1-x86_64-2.txz:  Rebuilt.
  Compressed man page.
ap/slackpkg-2.82.0-noarch-8.tgz:  Rebuilt.
  Merged updated mirrors lists.  Thanks to Jordan Clarke.
ap/vim-7.3.645-x86_64-1.txz:  Upgraded.
  Upgraded to the latest patchlevel.
d/git-1.7.12-x86_64-1.txz:  Upgraded.
l/glibc-2.15-x86_64-6.txz:  Rebuilt.
  Patched multiple integer overflows in the strtod, strtof, strtold, and
  strtod_l functions in stdlib in the GNU C Library allow local users to
  cause a denial of service (application crash) and possibly execute
  arbitrary code via a long string, which triggers a stack-based buffer
  overflow.
  For more information, see:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480
  (* Security fix *)
l/glibc-i18n-2.15-x86_64-6.txz:  Rebuilt.
l/glibc-profile-2.15-x86_64-6.txz:  Rebuilt.
l/keybinder-0.3.0-x86_64-2.txz:  Rebuilt.
  Disabled the python module which isn't currently used by anything and
  causes a crash when trying to get a module list from help('modules').
l/qt-4.8.2-x86_64-4.txz:  Rebuilt.
  Reverted JIT patch that was causing kwin crashes.
l/seamonkey-solibs-2.12-x86_64-1.txz:  Upgraded.
n/gpa-0.9.3-x86_64-1.txz:  Upgraded.
  Fixes a crash.  Thanks to ponce on LQ.
n/openssh-6.1p1-x86_64-1.txz:  Upgraded.
xap/fvwm-2.6.5-x86_64-6.txz:  Rebuilt.
  Added back the icons from ancient-icons.tar.gz, which are still used in
  the system.fvwm2rc-sample-95 example.  Thanks to Jens Rottmann.
xap/gimp-2.8.2-x86_64-1.txz:  Upgraded.
xap/mozilla-firefox-15.0-x86_64-1.txz:  Upgraded.
  This release contains security fixes and improvements.
  For more information, see:
    http://www.mozilla.org/security/known-vulnerabilities/firefox.html
  (* Security fix *)
xap/mozilla-thunderbird-15.0-x86_64-1.txz:  Upgraded.
  This release contains security fixes and improvements.
  For more information, see:
    http://www.mozilla.org/security/known-vulnerabilities/thunderbird.html
  (* Security fix *)
xap/seamonkey-2.12-x86_64-1.txz:  Upgraded.
  This release contains security fixes and improvements.
  For more information, see:
    http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html
  (* Security fix *)
xap/vim-gvim-7.3.645-x86_64-1.txz:  Upgraded.
xfce/xfce4-notifyd-0.2.2-x86_64-2.txz:  Rebuilt.
  Compressed man page.
extra/xf86-video-fbdev/xf86-video-fbdev-0.4.3-x86_64-1.txz:  Added.
  This might be needed in cases where X doesn't provide a driver for a
  video device, but the kernel supports a framebuffer for it.  It can't
  be in the main tree, though, because it breaks starting X without an
  xorg.conf.  Thanks to Jens Rottmann.
testing/packages/rp-pppoe-3.11-x86_64-1.txz:  Added.