GNOME 2.20 release notes can be found at
http://www.gnome.org/start/2.20/notes/en/ . Beyond that, this update
includes the new GIMP 2.4 (courtesy of ahze).
The GNOME 2.20 update also includes a huge change in the FreeBSD GNOME
hierarchy. We are now using the more standard DATADIR of ${PREFIX}/share
rather than ${PREFIX}/share/gnome. The result is that fewer patches and
hacks are needed to port GNOME components to FreeBSD. This will mean some
user changes may be required, so be sure to read /usr/ports/UPDATING for
more details.
This release and the things we accomplished in it would not have been
possible without mezz's crazy idea to collapse DATADIR, and his persistence
to make it happen successfully. Ahze and pav also deserve thanks for
their work on porting modules and testing the whole ball of wax on
pointyhat (respectively).
The FreeBSD GNOME team would also like to thank our various testers and
contributors:
Yasuda Keisuke
Frank Jahnke
Pawel Worach
Brian Gruber
Franz Klammer
Yuri Pankov
Nick Barkas
Cristian KLEIN
Tony Maher
Scot Hetzel
Martin Matuska (mm)
Benoit Dejean
Martin Wilke (miwi)
(And anyone else I may have missed)
PRs fixed in this release:
111272, 113470, 115995, 116338
<snip>
Cdrdao changes:
o SECURITY FIX: cdrdao now gives up its root privileges after setting
up real-time scheduling, as well as before saving settings through
the --save option. This fixes a potential local root exploit when
cdrdao is installed with the +s chmod flag. Using --save now also
forces an early exit after the settings are saved.
o Added MP3 and Ogg Vorbis file support (through respectively the
libmad and libvorbis libraries). cdrdao will decode the MP3 and
Ogg files into temporary WAV files that will be deleted upon exit
(unless the new option --keep is used). The directory used to
store those temporary WAV files can be specified with the --tmpdir
option (default is /tmp).
o Improved native CUE file support: replaced old incomplete existing
parser with the one from Matthias Czapla's excellent
cue2toc. Added support for cutting binary files.
o Added --rspeed option to manually set the device reading speed. Be
warned not all devices support this.
o Packaged scsilib library upgraded from cdrtools 2.01 (previously
was from 2.01a31).
o Added --no-mode2-mixed option. Don't read a MODE2 disk as
MODE2_FORM_MIXED, only read MODE2_FORM1 or MODE2_FORM2 (Matthieu
Castet).
o Added help for little-known drive-info command.
GCDMaster changes:
o MP3 and Ogg Vorbis support: you can drag and drop .mp3, .m3u and
.ogg files from Nautilus into the sample display window.
o Switched to gtkmm24 API. Improved file browsers.
o CUE files support.
o Sound output now uses libao library.
o Added 'Select All' item in menu.
o Added 'Eject' button to progress dialog.
o Bug fixes (sample selection weirdness, couldn't close window during
play, problems with gcdmaster command-line argument, crashes with
multiple project windows, drive status not reported correctly).
<snip>
Note that the FreeBSD ports doesn't install cdrdao setuid root so you are
not vulnerable by default.
- Fix building on FreeBSD 7.
- Turn on the usage of mlockall(2) again as it no longer causes negative side
effects on FreeBSD >= 502113.
Requested by: will [1]
Approved by: portmgr (linimon)
Security: http://vuxml.freebsd.org/d51a7e6e-c546-11d9-9aed-000e0c2e438a.html
