[A-4006] New on Slackware-stable

Thu Feb 2 00:13:21 UTC 2012
patches/packages/ca-certificates-20111211-noarch-1_slack13.37.txz: Upgraded.
Removes DigiNotar and other untrusted certificates.
(* Security fix *)
patches/packages/coreutils-8.15-i486-1_slack13.37.txz: Upgraded.
This will be provided as a patch to fix some important issues with ext4.
Thanks to Georgy Salnikov for the notification.
patches/packages/freetype-2.4.8-i486-1_slack13.37.txz: Upgraded.
Some vulnerabilities in handling CID-keyed PostScript fonts have been fixed.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3439
(* Security fix *)
patches/packages/mozilla-firefox-10.0-i486-1_slack13.37.txz: Upgraded.
This fixes some security issues.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox.html
(* Security fix *)
patches/packages/mozilla-thunderbird-10.0-i486-1_slack13.37.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/thunderbird.html
(* Security fix *)
patches/packages/openssl-0.9.8t-i486-1_slack13.37.txz: Upgraded.
This fixes a bug where DTLS applications were not properly supported. This bug could have allowed remote attackers to cause a denial of service via unspecified vectors.
CVE-2012-0050 has been assigned to this issue.
For more details see:
http://openssl.org/news/secadv_20120118.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0050
(* Security fix *)
patches/packages/openssl-solibs-0.9.8t-i486-1_slack13.37.txz: Upgraded.
This fixes a bug where DTLS applications were not properly supported. This bug could have allowed remote attackers to cause a denial of service via unspecified vectors.
CVE-2012-0050 has been assigned to this issue.
For more details see:
http://openssl.org/news/secadv_20120118.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0050
(* Security fix *)
patches/packages/seamonkey-2.7-i486-1_slack13.37.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html
(* Security fix *)
patches/packages/seamonkey-solibs-2.7-i486-1_slack13.37.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html
(* Security fix *)

Thu Feb 2 00:13:21 UTC 2012
patches/packages/ca-certificates-20111211-noarch-1_slack13.37.txz: Upgraded.
Removes DigiNotar and other untrusted certificates.
(* Security fix *)
patches/packages/coreutils-8.15-x86_64-1_slack13.37.txz: Upgraded.
This will be provided as a patch to fix some important issues with ext4.
Thanks to Georgy Salnikov for the notification.
patches/packages/freetype-2.4.8-x86_64-1_slack13.37.txz: Upgraded.
Some vulnerabilities in handling CID-keyed PostScript fonts have been fixed.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3439
(* Security fix *)
patches/packages/mozilla-firefox-10.0-x86_64-1_slack13.37.txz: Upgraded.
This fixes some security issues.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox.html
(* Security fix *)
patches/packages/mozilla-thunderbird-10.0-x86_64-1_slack13.37.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/thunderbird.html
(* Security fix *)
patches/packages/openssl-0.9.8t-x86_64-1_slack13.37.txz: Upgraded.
This fixes a bug where DTLS applications were not properly supported. This bug could have allowed remote attackers to cause a denial of service via unspecified vectors.
CVE-2012-0050 has been assigned to this issue.
For more details see:
http://openssl.org/news/secadv_20120118.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0050
(* Security fix *)
patches/packages/openssl-solibs-0.9.8t-x86_64-1_slack13.37.txz: Upgraded.
This fixes a bug where DTLS applications were not properly supported. This bug could have allowed remote attackers to cause a denial of service via unspecified vectors.
CVE-2012-0050 has been assigned to this issue.
For more details see:
http://openssl.org/news/secadv_20120118.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0050
(* Security fix *)
patches/packages/seamonkey-2.7-x86_64-1_slack13.37.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html
(* Security fix *)
patches/packages/seamonkey-solibs-2.7-x86_64-1_slack13.37.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html
(* Security fix *)