Slackware: Security Advisory (SSA:2023-041-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] gnutls

New gnutls packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/gnutls-3.7.9-i586-1slack15.0.txz: Upgraded. libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. Reported by Hubert...

Slackware Linux 15.0 / current gnutls Vulnerability (SSA:2023-041-01)

The version of gnutls installed on the remote host is prior to 3.7.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-041-01 advisory. - A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficien...

Slackware: Security Advisory (SSA:2023-038-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2023-038-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-7slack15.0.txz: Rebuilt. PATCH Xi: fix potential use-after-free in DeepCopyPointerClasses. Also merged...

[slackware-security] openssl

New openssl packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssl-1.1.1t-i586-1slack15.0.txz: Upgraded. This update fixes security issues: X.400 address type confusion in X.509 GeneralName...

Slackware Linux 15.0 / current openssl Multiple Vulnerabilities (SSA:2023-038-01)

The version of openssl installed on the remote host is prior to 1.1.1t. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-038-01 advisory. - A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a...

Slackware Linux 15.0 / current xorg-server Vulnerability (SSA:2023-038-02)

The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.4 / 21.1.7 / 22.1.8. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-038-02 advisory. - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation CVE-2023-0494...

Slackware Linux 15.0 / current openssh Vulnerability (SSA:2023-033-01)

The version of openssh installed on the remote host is prior to 9.2p1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-033-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Slackware: Security Advisory (SSA:2023-033-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] openssh

New openssh packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssh-9.2p1-i586-1slack15.0.txz: Upgraded. This release contains fixes for two security problems and a memory safety problem. The...

Slackware: Security Advisory (SSA:2023-032-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2023-032-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2023-032-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-102.7.1-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mo...

[slackware-security] apr-util

New apr-util packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/apr-util-1.6.3-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: Integer Overflow or Wraparound vulnerability in...

[slackware-security] apr

New apr packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/apr-1.7.2-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Integer Overflow or Wraparound vulnerability in aprencode...

Slackware Linux 15.0 / current apr Multiple Vulnerabilities (SSA:2023-032-01)

The version of apr installed on the remote host is prior to 1.7.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-032-01 advisory. - When aprtimeexp or aprosexptime functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 a...

Slackware Linux 15.0 / current apr-util Vulnerability (SSA:2023-032-02)

The version of apr-util installed on the remote host is prior to 1.6.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-032-02 advisory. - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker...