If you are subscribed to my repository’s RSS feed or if you are using slackpkg+ to keep your Slackware system updated, you will already have noticed and are probably already using the new packages – for the rest of you, here is the harvest of last week.
Chromium
Chrome and Chromium were updated to version 33.0, bringing fixes for 28 security issues. The new version number is 33.0.1750.117 to be exact.
The most important fixes (for high-risk vulnerabilities) are:
- [$2000][334897] High CVE-2013-6652: Issue with relative paths in Windows sandbox named pipe policy. Credit to tyranid.
- [$1000][331790] High CVE-2013-6653: Use-after-free related to web contents. Credit to Khalil Zhani.
- [$3000][333176] High CVE-2013-6654: Bad cast in SVG. Credit to TheShow3511.
- [$3000][293534] High CVE-2013-6655: Use-after-free in layout. Credit to cloudfuzzer.
- [$500][331725] High CVE-2013-6656: Information leak in XSS auditor. Credit to NeexEmil.
I have packages ready for the new chromium (Slackware 14.0, 14.1 and -current):
- http://slackware.com/~alien/slackbuilds/chromium/ (primary server)
- http://taper.alienbase.nl/mirrors/people/alien/slackbuilds/chromium/ (my own US mirror)
- http://alien.slackbook.org/slackbuilds/chromium/ (US)
- http://slackware.org.uk/people/alien/slackbuilds/chromium/ (UK)
In the same locations you will also find updated packages for chromium-pepperflash-plugin and chromium-pdf-plugin. Both these packages contain binaries taken from the official Chrome distribution: respectively an Adobe Flash player and a PDF reader plugin. The Flash player is a security update (new version of the Pepper Flash plugin is 12.0.0.70), just like the other Flash player plugins I will mention further down.
LibreOffice
LibreOffice 4.2.1 packages for Slackware 14.1 and -current are ready too. The first minor increment in the 4.2 series took only 3 weeks, solving over 100 bugs which were introduced because of the relatively large amount of new code that was added since the prior 4.1 series. You can read more in the ChangeLog for 4.2.1.
Note that I ship my LibreOffice 4.1 and 4.2 packages with additional “libreoffice-dict-<language>” packages, containing dictionary and spellchecker support! If you are still running Slackware 13.37 there’s LibreOffice 3.6.7 for which I also have packages, and users of Slackware 14.0 are served well with LibreOffice 4.1.4 (I will compile packages for 4.1.5 shortly).
Package locations:
- http://www.slackware.com/~alien/slackbuilds/libreoffice/ (master site)
- http://taper.alienbase.nl/mirrors/people/alien/slackbuilds/libreoffice/ (my own US mirror)
- http://repo.ukdw.ac.id/alien-libreoffice/ (Indonesia)
- http://alien.slackbook.org/slackbuilds/libreoffice/ (US)
- http://slackware.org.uk/people/alien/slackbuilds/libreoffice/ (UK)
Pipelight
The new pipelight release brings updates and fixes. More Windows browser plugins are supported, but being able to view Netflix will still be the major benefit for many of its users. Note that the update will also bring you the newest Flash Player version (fixing several security issues as already pointed out when I wrote about Chrome’s PepperFlash update). Together with the newest pipelight, I also created new packages for its wine-pipelight dependency, bringing the version of Wine to 1.7.13.
Let me remind you that in my original post about pipelight, you will find full installation and configuration instructions, as well as a troubleshooting section.
Package location:
- http://www.slackware.com/~alien/slackbuilds/pipelight/
- http://www.slackware.com/~alien/slackbuilds/wine-pipelight/
Linux Flash Player
Of course there is the normal¨ Flash Player plugin for Linux as well – it received an update from Adobe just like its Chrome and Windows pendants. That same Adobe security bulletin mentions that the new version of the Linux browser plugin is 11.2.202.341. Package location:
Have fun! Eric
Thanks again, Eric 🙂
I really appreciate all that you do.
2014-02-26 06:11:37 URL:http://taper.alienbase.nl/mirrors/people/alien/multilib/14.1/CHECKSUMS.md5.asc [198/198] -> “/tmp/slackpkg.w4WcQO/CHECKSUMS.md5-multilib.asc” [1]
ERROR: Verification of the gpg signature on CHECKSUMS.md5
failed! This could mean that the file is out of date
or has been tampered with.
Hi “Me”
That will be an error on your side, as a result of a partial download. I checked the server file, it is fine.
Eric
Thanks, Eric. waiting for your VLC 2.1.4 conpilation 😉
Hi , the link to wine-pipeline has a extra “l” in it 🙂
Hi Daniel, you’re right… it has been fixed now.
Eric
@Erik you’re right it was at my end, sorry.
Wow
Libreofice 400MB bigger than previous release.
Can’t upgrade slackware:
2015-09-10 13:37:33 URL:http://repository.slacky.eu/slackware64-14.1/CHECKSUMS.md5.asc [473/473] -> “/tmp/slackpkg.Son6ob/CHECKSUMS.md5-slacky.asc” [1]
ERROR: Verification of the gpg signature on CHECKSUMS.md5 failed! This could mean that the file is out of date or has been tampered with.