news

JNSoftware Releases Update to JABMenu, a System-Wide Address Book Menu - Published on 07/29/08 JNSoftware is proud to announce a significant update to JABMenu, a convenient and intuitive way to utilize your Mac OS X Address Book data through a system-wide menu. JABMenu provides quick access to your contacts' phone numbers, email, instant messaging, & postal addresses, URLs, and notes. Selecting a menu item can trigger an action such as displaying the content in large type, copying it to the clipboard, creating a new email message, dialing the phone, or showing an address on a map. New York, NY - JNSoftware is proud to announce the release of JABMenu v2.0. With a convenient and intuitive system-wide menu, JABMenu provides a great way to access and utilize your Mac OS X Address Book data. Using JABMenu, you can quickly drill down through your Address Book information in a variety of ways: alphabetically, by company or group, even by geographic location. Once you've found the contact you need, simply select the specific information you want (such as an email address or a phone number) and do something useful with it: insert it into your current document, copy it to the clipboard, show in large type, create a new email message and more. System Requirements: JABMenu v2.0 is a complete re-write from the ground up to provide better features, improved speed & stability, and a streamlined and polished interface. JABMenu, a Universal Binary for both Intel and PowerPC-based Macs, requires Mac OS X 10.4.9 or later including Mac OS X 10.5 "Leopard" and is available in English & French. JABMenu Webpage: http://www.jonn8.com/jabm/ JNSoftware Website: http://www.jonn8.com/ JNSoftware Store: https://order.kagi.com/?ELJ JABMenu User's Guide: http://www.jonn8.com/jabm/ug/ JABMenu Version History: http://www.jonn8.com/jabm/ug/pgs/c06/t01.html JABMenu Screenshots and Icon: http://www.jonn8.com/jabm/promo/ Located in New York, NY/USA, JNSoftware, founded by Jonathan Nathan, has been developing software exclusively for Macintosh for over 10 years. Top JNSoftware commercial titles include Dialectic, Finder Window Manager, JABMenu, EntourageABMenu, DayliteABMenu, Docktop, and more. JNSoftware also produces many freeware applications including the highly-regarded utility Preferential Treatment. All Material and Software © 2008 Jonathan Nathan & JNSoftware. All Rights Reserved. All other products and services mentioned are copyright of their respective owners. No endorsement of or affiliation with any third-party product or service mentioned is implied. ### Jonathan Nathan info ( -at -) jonn8.com *******

Hi, It's Kristofer from DragonSteelMods, and I have a new review today that I think your readers might find interesting. Title: Monster ScreenClean for Cell Phone/PDA Reviewed ( -at -) DragonSteelMods Review Link: http://www.dragonsteelmods.com/index.php?option=com_content&task=view&id=8735&Itemid=1 Review Snipit: "Does the Monster ScreenClean for Cell Phone/PDA provide a clean slate for your touch screen device or does it come short? I have had a chance to test it out on several devices, let's see what the verdict is. " Review Picture(200x150): http://www.dragonsteelmods.com/Images/reviews3/monsterscreenclean/A2.JPG Main site link: http://www.dragonsteelmods.com A post in your news would be greatly appreciated. Any and all news sent to me will be posted! If you would like to be added to our 'News Feeds' page please feel free to send me your http link to the feed and I will gladly add it ASAP. If you'd like to swap links for affiliation, I'd be happy to, just drop me a message...

Second Gear releases Today 1.3 with enhanced iCal Task Management - Published on 07/29/08 Second Gear is pleased to announce the release of Today 1.3, an update to their popular Mac OS X application for managing iCal events and tasks. Version 1.3 focuses in greatly enhancing Today's management of tasks. Users can now see tasks for more than just a specific day to look ahead at what's on their schedule. Today 1.3 also adds a variety of sorting options to make tracking tasks a breeze. Evansville, Indiana - Second Gear is pleased to announce the release of Today 1.3, an update to their popular Mac OS X application for managing iCal events and tasks. Version 1.3 focuses in greatly enhancing Today's management of tasks. Users can now see tasks for more than just a specific day to look ahead at what's on their schedule. Today 1.3 also adds a variety of sorting options to make tracking tasks a breeze. Today makes it easy to get a one day snapshot view of your upcoming events and tasks in a compact window. Assign a keyboard shortcut, and you can toggle Today's visibility in a split second. Adding new events and tasks is just as easy. You can quickly schedule next week's meeting or a quick task in Today. No iCal required. Today is a first class citizen for Mac OS X Leopard. Since Today uses the same calendaring and tasks system as iCal and Apple Mail, changes you make either application are automatically shared with Today. Events created or edited on your iPhone or iPod touch will also be shared with Today on your next sync. Feature Highlights in Version 1.2: * You can now view tasks for more than just today. They are available for 3, 7, 14 and 30 days in advance. * Tasks can now be sorted based on calendar, title, priority and due date. * Added ability to set priority when creating new tasks. * Added shortcuts for next and previous day navigation. * Today no longer shows declined event invitations for users on CalDAV servers * Various bug fixes and enhancements. System Requirements: * Requires Mac OS X v10.5 or later * Universal Binary for PowerPC and Intel * 5.4MB of hard drive space Pricing and Availability: Today 1.3 may be purchased for $15.00 USD and offers a fully featured 10 day trial period. Second Gear LLC: http://secondgearllc.com Today 1.3: http://secondgearllc.com/today/ Direct Download Link: http://secondgearllc.com/today/downloads/Today.zip Purchase Link: https://store.secondgearllc.com Screenshot: http://secondgearllc.com/today/img/mainwindow.jpg Screenshot/App Icon: http://secondgearllc.com/today/img/Today.png Second Gear LLC is based Evansville, Indiana. Founded in 2006 by Crew Chief Justin Williams, Second Gear focuses on building beautiful Mac OS X and iPhone applications for consumers and business. Their first application, PocketTweets, is the most popular Twitter client for Apple's revolutionary iPhone. ### Justin Williams Crew Chief 812-669-1001 justin ( -at -) secondgearllc.com *******

Jumsoft offers Home Business Trio '08 for Mac OS X - Published on 07/29/08 Jumsoft today has released Home Business Trio '08, a pack of user-friendly applications for small or home-based business for Mac OS X. Home Business Trio '08 consists of three applications: Money 3.0 for accounting, Relationship 1.1 for customer relationship management and Process 3.0, for project management. Vilnius, Lithuania - Jumsoft today has released Home Business Trio '08, a pack of user-friendly applications for small or home-based business for Mac OS X. Home Business Trio '08 consists of three applications: Money 3.0 for accounting, Relationship 1.1 for customer relationship management and Process 3.0, for project management. About Money: Money 3 is an application for personal or small-business accounting for Mac OS X. It helps people to manage their finances effortlessly, providing users with everything they need to create, manage, and develop their budget, accounts, reports, invoices, inventory list, portfolio, and much more. Money 3 is fully compatible with almost all of the standards and key concepts of accounting that allow users to easily take care of these tasks without outside help. About Relationship: Relationship 1 helps people organize and manage their contact information, titles (roles, i.e., CEO, Manager, Worker, etc.), campaigns, and resources quickly and easily. It has all the features required for personal or small business uses. It is an easy-to-use and yet powerful application that lets you collect information about your customers, partners, and suppliers; organize contacts by groups and Smart Groups; add custom columns or sub-columns to groups; sync contacts with Apple's Address Book; manage events; write and send e-mails; manage campaigns for contacts; manage associations; and add attachments and notes to contacts. About Process: Process 3 gives users the freedom necessary to be creative and provides the flexible framework needed to get things done. In just one versatile window, users can brainstorm, organize, schedule, plan, coordinate, collaborate - and do the work. With just a keystroke, a user can instantly share a project with all the Macs on a local network. Everyone on the network - colleagues, students, business associates, or family members - can collaborate on the project, downloading and uploading resource documents and more. System Requirements: Home Business Trio '08 requires Mac OS X Leopard 10.5 or later. For more information about Home Business Trio '08 visit the Jumsoft website. Pricing and Availability: Home Business Trio '08 may be purchased for only $59 USD; a savings of $58 off individual prices of all three applications. Jumsoft: http://www.jumsoft.com/ Home Business Trio '08: http://www.jumsoft.com/businesstrio/ A dedicated group of Apple Macintosh experts launched Jumsoft in 2002 with the goal of creating and marketing exciting, easy-to-use and powerful applications for Mac OS X. Jumsoft most recently focused its attention on maximizing the potential of Apple's iWork, quickly becoming the leading provider of Keynote themes and objects. Copyright 2002-2008 Jumsoft. All Rights Reserved. Apple, Keynote, the Apple logo, and the Keynote logo are registered trademarks of Apple Computer in the U.S. and/or other countries. ### Algirdas Unguvaitis General Manager 37065510612 algirdas ( -at -) jumsoft.com *******

Soulcalibur has been one of the most successful combat based franchises and finally it makes a debut on Playstation 3 and Xbox 360 platforms. IV offers the same style of fantastic weapons based 3d fighting with a wonderful and wacky list of characters which is sure to appeal to both casual gamers as well as dedicated fans of the series. The game isn't flawless as we will find out, but it should be shortlisted by any self respecting gamer. http://www.driverheaven.net/gamingreviews.php?reviewid=621 DriverHeaven and GamingHeaven News Mailer

GeForce 9500 GT review <http://www.guru3d.com/article/geforce-9500-gt-review/>'>http://www.guru3d.com/article/geforce-9500-gt-review/> Today NVIDIA launches a new budget product. It's called the GeForce 9500 GT and pretty much is the GeForce 8600 GT yet made at a 65nm fab. The good thing is that the card is real cheap, even better is that we have been promised that the card will be faster than that two year old GeForce 8600 GT at half the price. The card we'll test is an actual retail sample from the folks at Galaxy technology. This is the Galaxy GeForce 9500 GT Overclock edition by the way. Read review: http://www.guru3d.com/article/geforce-9500-gt-review/ <http://www.guru3d.com/article/geforce-9500-gt-review/> --

The NVIDIA GeForce 9500 GT is a budget card with a sub $100 price tag that offers up impressive features and performance for the price. Does your girlfriend or dad finally get that much-needed gaming upgrade?? Or does this new GPU have potential for stingy gamers everywhere? URL: http://www.pcper.com/article.php?aid=596&type=expert Quote: "That being said, the new GeForce 9500 GT did perform very well when compared to AMD's current budget level competition, the Radeon HD 3650. The GeForce 9500 GT was able to play through some of the latest titles at decent image quality settings very well. A line up like Call of Duty 4, Unreal Tournament 3 and Crysis is nothing to sneeze at - especially when you take into account the price point that you'll find this card selling for." Thanks for a post! Ryan Shrout Owner - PC Perspective rshrout ( -at -) pcper.com

Good Morning All, NVIDIA's new GeForce 9500 GT is the company's latest weapon in its arsenal of sub-$100 graphics cards but don't let the relatively low price fool you. Of course the card won't offer the same level of 3D performance as current high-end, more expensive products. However, its feature set is comparable to just about anything else on the market. Direct Link: http://www.hothardware.com/articles/NVIDIA_GeForce_9500_GT_Mainstream_GPU/ Snip: In comparison to the recently released GeForce GTX series, the GeForce 9500 GT has only a fraction of the number of stream processors, ROPs, and texture units available, but the GPU's configuration does put it on par with or ahead of the GeForce 8500 / 8600 series of graphics cards, that the 9500 GT will eventually replace (along with the already released GeForce 9600 GT). Thanks for your time and for stopping by. Best Regards, Dave Altavilla Editor In Chief HotHardware.com http://www.hothardware.com <http://www.hothardware.com/> RSS: http://www.hothardware.com/mobile/news.aspx Subscribe to HH Feedblitz Email Alerts! http://www.feedblitz.com/f/?Sub=237542

Hello Webmasters and News Posters, NEW CONTENT (Visual) - Leadtek WinFast GeForce PX9500 GT QUOTE: "If you find yourself getting sick to the stomach when you see how much cards like the GTX 280 and GTX 260 are and just can’t understand why people would spend so much money on a graphics card, the 9500 GT could be in your league. The 9500 GT, as you might have guessed comes in below the 9600 series and well below the 9800s. It’s designed for people who are looking at getting away from onboard graphics but don’t want to blow too much money. You have to wonder with the new GTX 280 / 260 naming scheme as to why NVIDIA are still continuing to update the older 9000 series of cards. Either way, we have a new low to mid-range graphics card that’s cheap and can hopefully offer low resolution gamers something that doesn’t break the bank." For more information, please visit - http://www.tweaktown.com/reviews/1521/leadtek_winfast_geforce_px9500_gt/index.html Best Regards, The TweakTown Team http://www.tweaktown.com

Hello Webmasters and News Posters, NEW CONTENT (Visual) - GIGABYTE 9800 GT Zalman Edition QUOTE: "It seems like NVIDIA graphics card releases run as clock work with the Catalyst drivers from AMD. With the GTX 280, GTX 260 and 9800 GTX+ released not all that long ago, it comes as no real surprise that NVIDIA has gotten up once again and released not only one new card today, but two. The first card is the 9800 GT which is what we have here with us now. The other is a 9500 GT which of course sits at the lower end of the scale when it comes to performance. Unlike some of the more recent releases, it seems that companies are already prepared to attack the 9800 GT with new cooling methods and overclocks. We see here that GIGABYTE has already strapped a Zalman cooler onto the newly released card and Palit are ready to go with an overclocked model carrying the "Sonic" naming scheme, too." For more information, please visit - http://www.tweaktown.com/reviews/1520/gigabyte_9800_gt_zalman_edition/index.html Best Regards, The TweakTown Team http://www.tweaktown.com

Hello, - White Gold: War in Paradise Screens #11 http://www.gamershell.com/news_56434.html - Theatre of War 2: Afrika 1943 Screens #2 http://www.gamershell.com/news_56432.html - Sacred 2: Fallen Angel Concept Art #3 http://www.gamershell.com/news_56430.html Best Regards, GamersHell.com Staff =============================================================================

Hello, - Cold War Crisis v1.0 Released http://www.gamershell.com/news_56426.html - Bus Simulator 2008 Bonus 3/v1.40 Patch Released http://www.gamershell.com/news_56424.html - Runes of Magic Fan Site Kit http://www.gamershell.com/news_56422.html Best Regards, GamersHell.com Staff =============================================================================

Hi all, We have just published a review of Be Quiet! Dark Power Pro 650W. If you could post a link on your site that would be very much appreciated. *Link: http://www.bit-tech.net/hardware/2008/07/29/be-quiet-dark-power-pro-650w/1* *Picture: http://images.bit-tech.net/content_images/2008/07/be-quiet-dark-power-pro-650w/psu1-3.jpg* *Quote: *Overall it has to be said that Be Quiet! has made a fantastic product - it works, it has supreme efficiency, excellent quality outputs, lots of cable variation (which is perfect for a modular PSU) and is damn near silent to boot. We were really struggling to find things wrong with it because it's really not /that/ expensive when you look at the whole package, and the only thing that grates us is the RMA to Germany - other companies offer better after-sales support. * *Cheers guys! Tim Smalley www.bit-tech.net

Hello, - Dracula 3: The Path of the Dragon New Trailers http://www.gamershell.com/news_56420.html - Depths of Peril v1.012 Beta Patch for Mac http://www.gamershell.com/news_56418.html - SwitchBlade v3.0.5 http://www.gamershell.com/news_56416.html Best Regards, GamersHell.com Staff =============================================================================

Bigbruin.com has new content posted... A mention in your site's news section would be greatly appreciated! Title: Tuniq Ensemble 1200W Power Supply URL: http://www.bigbruin.com/2008/tuniqensemble_1 Image URL (150x70 pixels): http://www.bigbruin.com/2008/tuniqensemble/logo.gif Quote: I expected the Tuniq Ensemble 1200W power supply to perform well after seeing what the 950W Tuniq Miniplant had to offer a few months ago, and my expectations wound up being exceeded. The unit ran cool and quiet, managing to provide stable power to the beefiest system I could put together while producing a trivial ripple of a fraction of one percent. Thank you. Best regards, Jason www.bigbruin.com

Hello, - Time of War Demo http://www.gamershell.com/news_56412.html - Command & Conquer: Red Alert 3 Battlecast Primetime Episode 12 http://www.gamershell.com/news_56404.html - Offworld: Fall from Mars v2.0 Released http://www.gamershell.com/news_56402.html - Numen: Contest of Heroes Screens #16 http://www.gamershell.com/news_56400.html - The Conduit Wins Best of E3 2008 Awards http://www.gamershell.com/news_56398.html - Help from Hell - 28 July 2008 - Metal Gear Solid 4: Guns of the Patriots: Game Script http://www.gamershell.com/news_56394.html - Cryptic Studios Gets Star Trek Online License and Screens #2 http://www.gamershell.com/news_56392.html Best Regards, GamersHell.com Staff =============================================================================

Hello, - Legendary BTS Trailer http://www.gamershell.com/news_56410.html - Fading Shadows Trailer http://www.gamershell.com/news_56408.html - The Princess Bride Game Demo for Mac http://www.gamershell.com/news_56406.html Best Regards, GamersHell.com Staff =============================================================================

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] mtr (SSA:2008-210-06) New mtr packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2357 Here are the details from the Slackware 12.1 ChangeLog: +--------------------------+ patches/packages/mtr-0.73-i486-1_slack12.1.tgz: Upgraded to mtr-0.73. This fixes a minor security bug where a very long hostname in the trace path could lead to an overflow (and most likely just a crash). (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/mtr-0.73-i486-1_slack12.0.tgz Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/mtr-0.73-i486-1_slack12.1.tgz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/mtr-0.73-i486-1.tgz MD5 signatures: +-------------+ Slackware 12.0 package: a6e7fb366f0cff5b1911566a64eb4e68 mtr-0.73-i486-1_slack12.0.tgz Slackware 12.1 package: db3acb5ce1d51eee9065b02c951b1e81 mtr-0.73-i486-1_slack12.1.tgz Slackware -current package: 004f78f13e150f34d25b5c586b211ca7 mtr-0.73-i486-1.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg mtr-0.73-i486-1_slack12.1.tgz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security ( -at -) slackware.com +------------------------------------------------------------------------+

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] libxslt (SSA:2008-210-03) New libxslt packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about the issue may be found in the Common Vulnerabilities and Exposures (CVE) database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1767 Here are the details from the Slackware 12.1 ChangeLog: +--------------------------+ patches/packages/libxslt-1.1.24-i486-1_slack12.1.tgz: Upgraded to libxslt-1.1.24. A buffer overflow when processing XSL stylesheets could result in the execution of arbitrary code. For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1767 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/libxslt-1.1.24-i486-1_slack12.0.tgz Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/libxslt-1.1.24-i486-1_slack12.1.tgz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/libxslt-1.1.24-i486-1.tgz MD5 signatures: +-------------+ Slackware 12.0 package: 05b1ef4bd3f29ec42dcd8cbff6da82ce libxslt-1.1.24-i486-1_slack12.0.tgz Slackware 12.1 package: f3205966df9af275046d5cd3d785b94c libxslt-1.1.24-i486-1_slack12.1.tgz Slackware -current package: 49150c048e96386d040417646ccf094e libxslt-1.1.24-i486-1.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg libxslt-1.1.24-i486-1_slack12.1.tgz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security ( -at -) slackware.com +------------------------------------------------------------------------+

Dear Editors, we just posted a new article which might be interesting to your readers. A post in your news section would be appreciated. Title: AirLive AirTV-1000U Link: http://www.techpowerup.com/reviews/AirLive/AirTV_1000U Brief: The AirTV-1000U DVB-T TV Tuner is something you would not expect from a company like AirLive. They are known for their excellent networking products, not TV Tuners. The USB based AirTV-1000U features some interesting features, like recording, EPG and time shifting support.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] pcre (SSA:2008-210-09) New pcre packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2371 Here are the details from the Slackware 12.1 ChangeLog: +--------------------------+ patches/packages/pcre-7.7-i486-1_slack12.1.tgz: Upgraded to pcre-7.7. Tavis Ormandy of the Google Security Team found a buffer overflow triggered when handling certain regular expressions. This could lead to a crash or possible execution of code as the user of the PCRE-linked application. For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2371 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/pcre-7.7-i486-1_slack12.0.tgz Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/pcre-7.7-i486-1_slack12.1.tgz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/pcre-7.7-i486-1.tgz MD5 signatures: +-------------+ Slackware 12.0 package: 30bf87a8e58d7dc8ece0df73ddbd1aec pcre-7.7-i486-1_slack12.0.tgz Slackware 12.1 package: a7d990fa0b1ff0c5eddc4592ee53bc72 pcre-7.7-i486-1_slack12.1.tgz Slackware -current package: feb0296bd7135808d4ed987204234f73 pcre-7.7-i486-1.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg pcre-7.7-i486-1_slack12.1.tgz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security ( -at -) slackware.com +------------------------------------------------------------------------+

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] openssl (SSA:2008-210-08) New openssl packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues. More details about this issues may be found in the Common Vulnerabilities and Exposures (CVE) database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0891 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1672 Upgraded OpenSSH packages have been provided to make sure that ssh is not broken my the update -- especially if your machine is a remote one, be SURE to upgrade to the new openssh package as well! Here are the details from the Slackware 12.1 ChangeLog: +--------------------------+ patches/packages/openssl-0.9.8h-i486-1_slack12.1.tgz: Upgraded to OpenSSL 0.9.8h. The Codenomicon TLS test suite uncovered security bugs in OpenSSL. If OpenSSL was compiled using non-default options (Slackware's package is not), then a malicious packet could cause a crash. Also, a malformed TLS handshake could also lead to a crash. For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0891 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1672 When upgrading OpenSSL, it is VERY IMPORTANT to also upgrade OpenSSH, or it is possible to be unable to log back into sshd! (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated packages for Slackware 11.0: ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/openssl-solibs-0.9.8h-i486-1_slack11.0.tgz ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/openssl-0.9.8h-i486-1_slack11.0.tgz ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/openssh-5.1p1-i486-1_slack11.0.tgz Updated packages for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/openssl-solibs-0.9.8h-i486-1_slack12.0.tgz ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/openssl-0.9.8h-i486-1_slack12.0.tgz ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/openssh-5.1p1-i486-1_slack12.0.tgz Updated packages for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/openssl-solibs-0.9.8h-i486-1_slack12.1.tgz ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/openssl-0.9.8h-i486-1_slack12.1.tgz ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/openssh-5.1p1-i486-1_slack12.1.tgz Updated packages for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/openssl-solibs-0.9.8h-i486-1.tgz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/openssl-0.9.8h-i486-1.tgz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/openssh-5.1p1-i486-1.tgz MD5 signatures: +-------------+ Slackware 11.0 packages: 8ee9a3b3366a29a84b7314fb40a7c808 openssl-0.9.8h-i486-1_slack11.0.tgz 863b5deeffd7eb58ef41b1b49759bff5 openssl-solibs-0.9.8h-i486-1_slack11.0.tgz 617456c059e8d7761de7e3c92ee5e473 openssh-5.1p1-i486-1_slack11.0.tgz Slackware 12.0 packages: ae721f8dd900c930d6c2e27581f577a9 openssl-0.9.8h-i486-1_slack12.0.tgz 30271692b6253c5dc733c80a986d13d1 openssl-solibs-0.9.8h-i486-1_slack12.0.tgz 5fd2eae44bf0d311bdfebb930790ab88 openssh-5.1p1-i486-1_slack12.0.tgz Slackware 12.1 packages: cb3674edf80bfabe23a1901f9eecea09 openssl-0.9.8h-i486-1_slack12.1.tgz dc0df15982723244c920417d5fa9c15a openssl-solibs-0.9.8h-i486-1_slack12.1.tgz 0684a119d56721053e1f57b06692642d openssh-5.1p1-i486-1_slack12.1.tgz Slackware -current packages: b72f7a417b524f06f8443ea9a13b58ca openssl-0.9.8h-i486-1.tgz fa6658aabc7ab02736a01e511b9cc9ec openssl-solibs-0.9.8h-i486-1.tgz 97d4828d0b5d88b16d83d7265a54f9de openssh-5.1p1-i486-1.tgz Installation instructions: +------------------------+ Upgrade the packages as root: # upgradepkg openssl-0.9.8h-i486-1_slack12.1.tgz openssl-solibs-0.9.8h-i486-1_slack12.1.tgz openssh-5.1p1-i486-1_slack12.1.tgz Then, restart sshd if you use it: sh /etc/rc.d/rc.sshd restart +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security ( -at -) slackware.com +------------------------------------------------------------------------+

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] net-snmp (SSA:2008-210-07) New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0960 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2292 Here are the details from the Slackware 12.1 ChangeLog: +--------------------------+ patches/packages/net-snmp-5.4.1.2-i486-1_slack12.1.tgz: Upgraded to net-snmp-5.4.1.2. A vulnerability was discovered where an attacked could spoof an authenticated SNMPv3 packet due to incorrect HMAC checking. Also, a buffer overflow was found that could be exploited if an application using the net-snmp perl modules connects to a malicious server. For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0960 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2292 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/net-snmp-5.4.1.2-i486-1_slack12.0.tgz Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/net-snmp-5.4.1.2-i486-1_slack12.1.tgz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/net-snmp-5.4.1.2-i486-1.tgz MD5 signatures: +-------------+ Slackware 12.0 package: e5c916d2bf7a865d48547b727fc21d26 net-snmp-5.4.1.2-i486-1_slack12.0.tgz Slackware 12.1 package: 9e42a9a2aad1caffde814d4d5346b707 net-snmp-5.4.1.2-i486-1_slack12.1.tgz Slackware -current package: 611ca8b6481ff2e9860f6ecff5e6367c net-snmp-5.4.1.2-i486-1.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg net-snmp-5.4.1.2-i486-1_slack12.1.tgz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security ( -at -) slackware.com +------------------------------------------------------------------------+

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] links (SSA:2008-210-04) New links packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix a security issue when using proxies. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3329 Here are the details from the Slackware 12.1 ChangeLog: +--------------------------+ patches/packages/links-2.1-i486-1_slack12.1.tgz: Upgraded to links-2.1. Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to external programs." For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3329 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 11.0: ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/links-2.1-i486-1_slack11.0.tgz Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/links-2.1-i486-1_slack12.0.tgz Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/links-2.1-i486-1_slack12.1.tgz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/links-2.1-i486-1.tgz MD5 signatures: +-------------+ Slackware 11.0 package: 938eccef79b71343d4e2f13ef4454450 links-2.1-i486-1_slack11.0.tgz Slackware 12.0 package: 0207e7720de54574ef773a0e1f3a35e8 links-2.1-i486-1_slack12.0.tgz Slackware 12.1 package: 343b0f3f6b33d1097faafa66c777651b links-2.1-i486-1_slack12.1.tgz Slackware -current package: f137305bc4c7ea5fd0670760b10d653d links-2.1-i486-1.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg links-2.1-i486-1_slack12.1.tgz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security ( -at -) slackware.com +------------------------------------------------------------------------+

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] vim (SSA:2008-210-10) New vim packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues. More details about this issue may be found here: http://www.rdancer.org/vulnerablevim.html Here are the details from the Slackware 12.1 ChangeLog: +--------------------------+ patches/packages/vim-7.1.330-i486-1_slack12.1.tgz: Upgraded to vim-7.1.330. This fixes several security issues related to the automatic processing of untrusted files. For more information, see: http://www.rdancer.org/vulnerablevim.html (* Security fix *) patches/packages/vim-gvim-7.1.330-i486-1_slack12.1.tgz: Upgraded to vim-gvim-7.1.330. See "vim" above for details. (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated packages for Slackware 11.0: ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/vim-7.1.330-i486-1_slack11.0.tgz ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/vim-gvim-7.1.330-i486-1_slack11.0.tgz Updated packages for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/vim-7.1.330-i486-1_slack12.0.tgz ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/vim-gvim-7.1.330-i486-1_slack12.0.tgz Updated packages for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/vim-7.1.330-i486-1_slack12.1.tgz ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/vim-gvim-7.1.330-i486-1_slack12.1.tgz Updated packages for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/vim-7.1.330-i486-1.tgz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/vim-gvim-7.1.330-i486-1.tgz MD5 signatures: +-------------+ Slackware 11.0 packages: 64e048da0cb73ac3f9c88da8e6936dba vim-7.1.330-i486-1_slack11.0.tgz 768f50ec4d6ade1a2a7e48abb74a349f vim-gvim-7.1.330-i486-1_slack11.0.tgz Slackware 12.0 packages: 9217c35b78117440771dc969e3e01cb8 vim-7.1.330-i486-1_slack12.0.tgz 2b023a1d7b6bd33258ba86d3a71ce21a vim-gvim-7.1.330-i486-1_slack12.0.tgz Slackware 12.1 packages: 0ca3022524333f2399463dc838c7be69 vim-7.1.330-i486-1_slack12.1.tgz 2cc80e4171409a6cc11de63d5fef9814 vim-gvim-7.1.330-i486-1_slack12.1.tgz Slackware -current packages: 52fa9f16856191656e02d1b3cb2c9a21 vim-7.1.330-i486-1.tgz 8579e841c779af8916299cc69c0bf663 vim-gvim-7.1.330-i486-1.tgz Installation instructions: +------------------------+ Upgrade the packages as root: # upgradepkg vim-7.1.330-i486-1_slack12.1.tgz vim-gvim-7.1.330-i486-1_slack12.1.tgz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security ( -at -) slackware.com +------------------------------------------------------------------------+