[slackware-security] httpd

New httpd packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/httpd-2.4.55-i586-1slack15.0.txz: Upgraded. This update fixes bugs and the following security issues: modproxy allow...

[slackware-security] git

New git packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/git-2.35.6-i586-1slack15.0.txz: Upgraded. This release fixes two security issues: CVE-2022-41903: git log has the...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current httpd Multiple Vulnerabilities (SSA:2023-018-02)

The version of httpd installed on the remote host is prior to 2.4.55. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-018-02 advisory. - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current libXpm Multiple Vulnerabilities (SSA:2023-018-03)

The version of libXpm installed on the remote host is prior to 3.5.15. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-018-03 advisory. - A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compre...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2023-018-04)

The version of mozilla-firefox installed on the remote host is prior to 102.7.0esr / 109.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-018-04 advisory. - An out of date library libusrsctp contained vulnerabilities that could potentially be exploited. This...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current sudo Vulnerability (SSA:2023-018-01)

The version of git installed on the remote host is prior to 2.30.7 / 2.35.6 / 2.39.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-018-01 advisory. - In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user- provide...

Slackware: Security Advisory (SSA:2023-013-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] netatalk

New netatalk packages are available for Slackware 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/netatalk-3.1.14-i586-1slack15.0.txz: Upgraded. Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow...

Slackware Linux 14.1 / 14.2 / 15.0 / current netatalk Vulnerability (SSA:2023-013-01)

The version of netatalk installed on the remote host is prior to 3.1.14. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-013-01 advisory. - Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This...

Slackware: Security Advisory (SSA:2023-006-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2023-006-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/php-7.4.33-i586-2slack15.0.txz: Rebuilt. This update fixes a security issue: PDO::quote may return unquoted string. For more information...

[slackware-security] mozilla-nss

New mozilla-nss packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-nss-3.87-i586-1slack15.0.txz: Upgraded. Fixed memory corruption in NSS via DER-encoded DSA and RSA-PSS signatures. For...

Slackware Linux 15.0 / current mozilla-nss Vulnerability (SSA:2023-006-01)

The version of mozilla-nss installed on the remote host is prior to 3.87. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-006-01 advisory. - NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded D...

Slackware Linux 15.0 / current php Vulnerability (SSA:2023-006-02)

The version of php installed on the remote host is prior to 7.4.33 / 8.0.27 / 8.1.14. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-006-02 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

[slackware-security] vim

New vim packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-9.0.1146-i586-1slack15.0.txz: Upgraded. Fixed security issues: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2023-004-01)

The version of vim installed on the remote host is prior to 9.0.1146. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-004-01 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 - Heap-based Buffer Overflow in GitHub...

Slackware: Security Advisory (SSA:2023-004-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] rxvt-unicode

New rxvt-unicode packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/rxvt-unicode-9.26-i586-3slack15.0.txz: Rebuilt. When the "background" extension was loaded, an attacker able to control the dat...

[slackware-security] libtiff

New libtiff packages are available for Slackware 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libtiff-4.4.0-i586-1slack15.0.txz: Upgraded. Patched various security bugs. For more information, see:...