Slackware Blog

There’re new OpenSSL packages for all recent versions of the Slackware Linux distro. Details of this update are as follows:

New OpenSSL packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. Under certain conditions, an attacker acting as a “man in the middle” may force a client and server to fall back to the less-secure SSL 2.0 protocol.

More details about this issue may be found here:

http://www.openssl.org/news/secadv_20051011.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2969

Updated packages can be downloaded from the Slackware Package Browser or using automated package management tools like Swaret or slapt-get.

A new xine-lib package, version 1.0.3a, is avilable for slackware. The new package is a security fix and can be downloaded from the Slackware package browser.

More info from the ChangeLog:

This fixes a format string bug where an attacker, if able to upload malicious information to a CDDB server and then get a local user to play a certain audio CD, may be able to run arbitrary code on the machine as the user running the xine-lib linked application. For more information, see:
http://xinehq.de/index.php/security/XSA-2005-1

See HTNet for more.

I think wordpress.com started having problems almost instantly after I logged into the Dashboard of this blog. Various blogs are returning errors but that’s expected. I remember when gmail was in it’s earlier beta stages, I couldn’t rely on it at all for a total of two weeks or so. But, like I said, that’s to be expected with kick ass new apps like gmail was and wordpress.com is now.

Welcome to the Slackware Blog. I’m excited about this. I can’t yet say wether all the excitement comes from a new blog, a Slackware blog, or just this WordPress install. The WordPress dashboard here at wordpress.com rocks, it’s very beautiful.

I don’t really know how quickly this blog is going to grow, it all depends I guess. I’d like to find someone to co-author this blog with me, but that may prove difficult. There’s no way in hell I can devote as much time to this blog as I do my original and, until today, my only blog.

With Slackware 10.2 recently released, I figure it makes sense to start a Slackware blog. Don’t ask me why that makes sense, cuz I can’t answer that. I’ve got so many ideas for posts, hopefully they stick around till I get em down on paper or into this blog. More tomorrow…