KaarPux / Blog: Recent posts

• Building packages with clang/llvm 3.4
• LibreOffice updated to version 4.1.4.2
• Linux Kernel updated to version 3.12.6
• Bugs fixed, packages updated and minor improvements

We now include clang version 3.4.
Most packages are now compiled with this clang version.
However, bootstrap packages, and a few "troublesome" packages are compiled with gcc.

• Java 7 u 45 / IcedTea 2.4.3
• Mozilla and related packages updated
• Package SPICE added
• Other packages updated and bugs fixed

• Linux kernel 3.10
• Java 7 u 40 / IcedTea 2.4.1
• Improved printing subsystem
• XOrg updates
• Other packages updated and bugs fixed

• Mozilla and LibreOffice Updated
• Other packages updated and added
• Bugs fixed and minor improvements
• Signature check on many upstream packages

• Java update
• Systemtap improvements
• OpenVAS

• Mozilla and dependencies updated
• Many other packages updated
• Packages added
• Bugs fixed
• Many minor improvements

• Bugs fixed
• Packages updated
• Test cases added

• Java security fix
• Other packages updated
• Minor changes

• GNOME 3.8
• LibreOffice 4.0
• Upstream security fixes
• Many minor changes

• Upstream Security Fixes
• Merge core phase into bootstrap_8
• Make systemtap work with dash
• Several minor updates and bugs fixed

KaarPux 3.5.0: dash as default shell, parallel bootstrap, updates and fixes

• Now using dash as default shell
• Parallel build of bootstrap phase
• Packages updated and bugs fixed

• Upstream Security Fixes
• Linux Kernel Updated to v 3.8.2
• Improved verification framework and testcases
• Packages updated and bugs fixed

• Linux kernel security update
• Java / IcedTea security update
• Mozilla security updates
• Other security updates
• Several (mostly minor) changes

• Java security update
• Flashplayer security update
• Mozilla updates
• Bugs fixed, packages updated, and other minor changes

• Mozilla updated
• Mesa updated
• printing updated
• Expert scripts (to build KaarPux with just two commands) added
• Parallel building.

• Security update (TurkTrust cert)
• Bugs fixed (minor issues)
• Improved dependency tracking
• Packages updated (pulseaudio, libcanberra)

• Added: Kernel-based Virtual Machine and ruby.
• Updated: tool-chain and bootstrap packages, and packages dependent on those.
• Updated: flash_player_11 (v 11.2.202.258), noscript (v 2.6.4.1), WebKit (v 1.10.2).
• Bug fixes.

• support x86_64 (64-bit) AMD/Intel platforms.

• icedtea updated to version 2.3.3
• a few bugs fixed
• a few packages updated

• Mozilla software updated to 16.0.1

• Flash Player updated to 11.2.202.243

• Printing improved

• Added Haskell

• Many other updates, additions, and fixes

Bugs Fixed

• /etc/profile: install with execute permission
• kx_ver_wiz.pl: use List::Util and Time::Hires (just as kx_version.pl)
• move py2cairo before pygobject
• gdm: aboslute path for ExecStart in .service file
• bash: do not set PS1 prompt for non-interactive shells

Packages Updated

• valgrind: v 3.8.0
• graphite2 libexttextcat libvisio libwps mdds mythes raptor2 rasqal SampleICC (for LibreOffice)
• libreoffice: v 3.6.2.1
• thunderbird: v 15.0.1
• ghostery: v 2.8.3
• noscript: v 2.5.6... read more

Updated packages:

• alsa-*: v 1.0.26
• xulrunner firefox: v 15.0.1
• icedtea-web: v 1.3
• noscript: v 2.5.4

Bugfixes

• gdm: register gdm sessions with systemd/logind in pam
• polkit: new download location

Merge / and /usr filesystems.

The main changes are:

• Install everything in the / (root) file system
• Make /usr a link to / (to satisfy historical dependencies)

See http://kaarpux.kaarposoft.dk/changes_3_0_0.html

Security fixes for icedtea / Java

Upstream:

• http://blog.fuseyism.com/index.php/2012/08/31/security-icedtea6-1-10-9-1-11-4-icedtea-2-3-2-released/

Fix:

• CVE-2012-1682: XMLDecoder security issue via ClassFinder
• CVE-2012-0547: Simplify toolkit internals references
• CVE-2012-3136: Improve long term persistence of java.beans objects

Reference:

• http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2012-1682
• http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2012-0547
• http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2012-3136... read more

• fix CVE-2012-4681

Oracle Java 7 Update 6, and possibly other versions, allows remote attackers to execute arbitrary code via a crafted applet, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.

• http://blog.fuseyism.com/index.php/2012/08/30/security-icedtea-2-3-1-released/
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=2012-4681
• http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html... read more