[slackware-security] zlib

New zlib packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/zlib-1.2.12-i586-1slack15.0.txz: Upgraded. This update fixes memory corruption when deflating i.e., when compressing...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/seamonkey-2.53.11.1-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

Slackware Linux 15.0 / current seamonkey Vulnerability (SSA:2022-084-01)

The version of seamonkey installed on the remote host is prior to 2.53.11.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-084-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

[slackware-security] Slackware 15.0 bind

New bind packages are available for Slackware 15.0, since the previous patch mistakenly moved to a newer BIND branch. These packages do not fix any security issues that weren't already fixed in the bind-9.18.1 packages, which have been moved into /testing, but the BIND 9.16 LTS version is the...

Slackware Linux 15.0 bind Multiple Vulnerabilities (SSA:2022-080-01)

The version of bind installed on the remote host is prior to 9.16.27. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-080-01 advisory. - BIND 9.16.11 - 9.16.26, 9.17.0 - 9.18.0 and versions 9.16.11-S1 - 9.16.26-S1 of the BIND Supported Preview Edition...

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.11-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues: libexpat upgraded from 2.4.1 to 2.4.7 bundl...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current bind Multiple Vulnerabilities (SSA:2022-076-01)

The version of bind installed on the remote host is prior to 9.11.37 / 9.18.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-076-01 advisory. - BIND 9.16.11 - 9.16.26, 9.17.0 - 9.18.0 and versions 9.16.11-S1 - 9.16.26-S1 of the BIND Supported Preview Edition...

Slackware Linux 15.0 / current python3 Vulnerability (SSA:2022-077-01)

The version of python3 installed on the remote host is prior to 3.9.11. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-077-01 advisory. - The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxie...

[slackware-security] openssl

New openssl packages are available for Slackware 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssl-1.1.1n-i586-1slack15.0.txz: Upgraded. This update fixes a high severity security issue: The BNmodsqrt function, which...

[slackware-security] bind

New bind packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/bind-9.18.1-i586-1slack15.0.txz: Upgraded. This update fixes bugs and the following security issues: An assertion cou...

[slackware-security] httpd

New httpd packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/httpd-2.4.53-i586-1slack15.0.txz: Upgraded. This update fixes bugs and the following security issues: modsed:...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current httpd Multiple Vulnerabilities (SSA:2022-073-01)

The version of httpd installed on the remote host is prior to 2.4.53. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-073-01 advisory. - A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issu...

Slackware Linux 15.0 / current polkit Vulnerability (SSA:2022-071-01)

The version of polkit installed on the remote host is prior to 0.120. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-071-01 advisory. - There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion...

[slackware-security] polkit

New polkit packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/polkit-0.120-i586-3slack15.0.txz: Rebuilt. Patched to fix a security issue where an unprivileged user could cause a denial of service...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-91.7.0-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mor...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2022-068-01)

The version of mozilla-thunderbird installed on the remote host is prior to 91.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-068-01 advisory. - If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, the...

[slackware-security] Slackware 15.0 kernel

New kernel packages are available for Slackware 15.0 to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/linux-5.15.27/: Upgraded. These updates fix various bugs and security issues, including the recently announced "Dirty Pipe" vulnerability which...

Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-067-01)

The version of kernel-generic installed on the remote host is prior to 5.15.27 / 5.15.27smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-067-01 advisory. - A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c ...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-91.7.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For more...

Slackware Linux 15.0 / current mozilla-firefox Vulnerability (SSA:2022-066-01)

The version of mozilla-firefox installed on the remote host is prior to 91.7.0esr / 98.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-066-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...