[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.60.0-i586-1slack14.2.txz: Upgraded. This release contains security fixes: FTP: shutdown response buffer overflow RTS...

Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2018-136-01)

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-136-01. The text itself is copyright C Slackware Linux,...

Slackware 14.0 / 14.1 / 14.2 : php (SSA:2018-136-02)

New php packages are available for Slackware 14.0, 14.1, and 14.2 to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-136-02. The text itself is copyright C Slackware Linux, Inc...

Slackware 14.1 / 14.2 : mariadb (SSA:2018-130-01)

New mariadb packages are available for Slackware 14.1 and 14.2 to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-130-01. The text itself is copyright C Slackware Linux, Inc...

[slackware-security] mariadb

New mariadb packages are available for Slackware 14.1 and 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mariadb-10.0.35-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : wget (SSA:2018-129-02)

New wget packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-129-02. The text itself is copyrigh...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-52.7.4esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] libwmf

New libwmf packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libwmf-0.2.8.4-i586-7slack14.1.txz: Rebuilt. Patched denial of service and possible execution of...

[slackware-security] openvpn

New openvpn packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openvpn-2.4.6-i586-1slack14.2.txz: Upgraded. This is a security update fixing a potential double-fre...

CVE-2018-9101

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient...

Cross site scripting

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient...

Sql injection

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for...

CVE-2018-9104

Mit el MiVoice Connect conferencing component is affected by CVE-2018-9104. Affected versions: Mitel MiVoice Connect R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2 GA27 (19.49.5200.0) and earlier. Issue: unauthenticated attacker can trigger a reflected cross-site scripting (XSS) due...

CVE-2018-9103

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient...

CVE-2018-9103

A CVE entry for CVE-2018-9103 describes a reflected cross-site scripting (XSS) vulnerability in Mitel MiVoice Connect’s conferencing component. Affected products are Mitel MiVoice Connect (R1707-PREM SP1 / 21.84.5535.0 and earlier) and Mitel ST (14.2 GA27 / 19.49.5200.0 and earlier). The issue ar...

CVE-2018-9101

Summary: CVE-2018-9101 is a reflected XSS vulnerability in the Mitel MiVoice Connect conferencing component. The issue affects Mitel MiVoice Connect versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2 GA27 (19.49.5200.0) and earlier. Root cause: insufficient validation on the la...

[slackware-security] libidn

New libidn packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: This update fixes security issues: Fix integer overflow in combinehangul Fix integer overflow in punycode decoder Fix...

Slackware 14.2 / current : ruby (SSA:2018-088-01)

New ruby packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-088-01. The text itself is copyright C Slackware Linux, Inc...

[slackware-security] openssl

New openssl packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openssl-1.0.2o-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: Constructed ASN.1 types with a recursive definitio...

Slackware 14.2 / current : openssl (SSA:2018-087-01)

New openssl packages are available for Slackware 14.2 and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-087-01. The text itself is copyright C Slackware Linux, Inc...