[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-91.6.1esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For more...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2022-064-02)

The version of mozilla-thunderbird installed on the remote host is prior to 91.6.2. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-064-02 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2022-064-01)

The version of mozilla-firefox installed on the remote host is prior to 91.6.1esr / 97.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-064-01 advisory. - An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/seamonkey-2.53.11-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

Slackware Linux 15.0 / current seamonkey Vulnerability (SSA:2022-061-01)

The version of seamonkey installed on the remote host is prior to 2.53.11. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-061-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

[slackware-security] libxslt

New libxslt packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxslt-1.1.35-i586-1slack15.0.txz: Upgraded. This update fixes bugs and the following security issues: Fix...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.9.13-i586-1slack15.0.txz: Upgraded. This update fixes bugs and the following security issues:...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current libxslt Vulnerability (SSA:2022-059-02)

The version of libxslt installed on the remote host is prior to 1.1.35. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-059-02 advisory. - Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current libxml2 Vulnerability (SSA:2022-059-01)

The version of libxml2 installed on the remote host is prior to 2.9.13. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-059-01 advisory. - valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. CVE-2022-23308 Note that Nessus has not tested f...

[slackware-security] cyrus-sasl

New cyrus-sasl packages are available for Slackware 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/cyrus-sasl-2.1.28-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

Slackware Linux 14.2 / 15.0 / current cyrus-sasl Multiple Vulnerabilities (SSA:2022-055-01)

The version of cyrus-sasl installed on the remote host is prior to 2.1.28. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-055-01 advisory. - cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of- service in...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current expat Multiple Vulnerabilities (SSA:2022-050-01)

The version of expat installed on the remote host is prior to 2.4.3 / 2.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-050-01 advisory. - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a...

[slackware-security] flac

New flac packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/flac-1.3.4-i586-1slack15.0.txz: Upgraded. This update fixes overflow issues with encoding and decoding. For more...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current flac Multiple Vulnerabilities (SSA:2022-052-01)

The version of flac installed on the remote host is prior to 1.3.4. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-052-01 advisory. - In FLACbitreaderreadricesignedblock of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. Thi...

[slackware-security] expat

New expat packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/expat-2.4.5-i586-1slack15.0.txz: Upgraded. Fixed security issues that could lead to denial of service or potentially...

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/php-7.4.28-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: UAF due to phpfilterfloat failing for ints. For...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-91.6.1-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mor...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2022-048-01)

The version of mozilla-thunderbird installed on the remote host is prior to 91.6.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-048-01 advisory. - It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of- bounds writ...

Slackware Linux 15.0 / current php Multiple Vulnerabilities (SSA:2022-048-02)

The version of php installed on the remote host is prior to 7.4.28 / 8.0.16 / 8.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-048-02 advisory. - In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions...

Slackware Linux 15.0 / current aaa_base Vulnerability (SSA:2022-046-01)

The version of aaabase installed on the remote host is prior to 15.0 / 15.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-046-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...