[A-1281] New on Slackware-stable

Wed Oct 20 21:54:05 UTC 2010
patches/packages/glibc-2.11.1-i486-4_slack13.1.txz: Rebuilt.
Patched "dynamic linker expands $ORIGIN in setuid library search path".
This security issue allows a local attacker to gain root if they can create
a hard link to a setuid root binary. Thanks to Tavis Ormandy.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3847
http://seclists.org/fulldisclosure/2010/Oct/257
(* Security fix *)
patches/packages/glibc-i18n-2.11.1-i486-4_slack13.1.txz: Rebuilt.
patches/packages/glibc-profile-2.11.1-i486-4_slack13.1.txz: Rebuilt.
patches/packages/glibc-solibs-2.11.1-i486-4_slack13.1.txz: Rebuilt.
patches/packages/glibc-zoneinfo-2.11.1-noarch-4_slack13.1.txz: Rebuilt.
patches/packages/mozilla-thunderbird-3.0.9-i686-1.txz: Upgraded.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/thunderbird30.html
(* Security fix *)
patches/packages/mozilla-firefox-3.6.11-i686-1.txz: Upgraded.
This fixes some security issues.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox36.html
(* Security fix *)

Wed Oct 20 21:54:05 UTC 2010
patches/packages/glibc-2.11.1-x86_64-4_slack13.1.txz: Rebuilt.
Patched "dynamic linker expands $ORIGIN in setuid library search path".
This security issue allows a local attacker to gain root if they can create
a hard link to a setuid root binary. Thanks to Tavis Ormandy.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3847
http://seclists.org/fulldisclosure/2010/Oct/257
(* Security fix *)
patches/packages/glibc-i18n-2.11.1-x86_64-4_slack13.1.txz: Rebuilt.
patches/packages/glibc-profile-2.11.1-x86_64-4_slack13.1.txz: Rebuilt.
patches/packages/glibc-solibs-2.11.1-x86_64-4_slack13.1.txz: Rebuilt.
patches/packages/glibc-zoneinfo-2.11.1-noarch-4_slack13.1.txz: Rebuilt.
patches/packages/mozilla-thunderbird-3.0.9-x86_64-1.txz: Upgraded.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/thunderbird30.html
(* Security fix *)
patches/packages/mozilla-firefox-3.6.11-x86_64-1_slack13.1.txz: Upgraded.
This fixes some security issues.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox36.html
(* Security fix *)