[A-2375] New on Slackware-current

Thu Apr 21 03:13:14 UTC 2011
xap/rdesktop-1.6.0-i486-2.txz: Rebuilt.
Patched a traversal vulnerability (disallow /.. requests).
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1595
(* Security fix *)
isolinux/initrd.img: Rebuilt.
Support GPT on RAID devices.
Thanks to Greg Chandler.
usb-and-pxe-installers/usbboot.img: Rebuilt.
Support GPT on RAID devices.

Thu Apr 21 03:13:14 UTC 2011
xap/rdesktop-1.6.0-x86_64-2.txz: Rebuilt.
Patched a traversal vulnerability (disallow /.. requests).
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1595
(* Security fix *)
isolinux/initrd.img: Rebuilt.
Support GPT on RAID devices.
Thanks to Greg Chandler.
usb-and-pxe-installers/usbboot.img: Rebuilt.
Support GPT on RAID devices.

Wed Apr 20 20:11:15 UTC 2011
a/aaa_elflibs-13.37-arm-4.tgz: Rebuilt.
a/acl-2.2.50-arm-1.tgz: Upgraded.
Fix the --physical option in setfacl and getfacl to prevent symlink attacks.
Thanks to Martijn Dekker for the notification.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4411
(* Security fix *)
a/attr-2.4.45-arm-1.tgz: Upgraded.
l/polkit-0.101-arm-2.tgz: Rebuilt.
Patched to fix a race condition that could allow a local user to execute
arbitrary code as root. Thanks to Neel Mehta of Google.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1485
(* Security fix *)
extra/bash-completion/bash-completion-1.3-noarch-4.tgz: Rebuilt.
Fixed slapt file and added --terse support for pkgtools.
Thanks to _GArik_.