[slackware-security] proftpd

New proftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to a fix security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/proftpd-1.3.3c-i486-1slack13.1.txz: Upgraded. Fixed Telnet IAC stack overflow vulnerability...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/pidgin-2.7.5-i486-1slack13.1.txz: Upgraded. This update addresses some denial of service bugs. For more...

Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : proftpd (SSA:2010-305-03)

New proftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to a fix security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-305-03. The...

SSA-2010-060-01 : seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, and -current to fix security issues. %NASLMINLEVEL 70300 This script was automatically generated from Slackware security advisory SSA-2010-060-01. It is released under the Nessus Script Licence. Slackware Security Advisories are...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.10-i486-1slack13.1.txz: Upgraded. This release fixes some more security vulnerabilities. For more...

Slackware 12.2 / 13.0 / 13.1 / current : seamonkey (SSA:2010-305-01)

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-305-01. The text itself is...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.12-i686-1.txz: Upgraded. This fixes some security issues. For more information, see:...

[slackware-security] glibc

New glibc packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/glibc-2.11.1-i486-5slack13.1.txz: Rebuilt. Patched "The GNU C library dynamic linker will dlopen arbitrary DS...

Slackware 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : glibc (SSA:2010-301-01)

New glibc packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-301-01. The text itse...

Slackware 12.2 / 13.0 / 13.1 / current : seamonkey (SSA:2010-300-01)

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-300-01. The text itself is...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.9-i486-1slack13.1.txz: Upgraded. This release fixes some more security vulnerabilities. For more...

Linux kernel RDS protocol vulnerability

Overview The RDS protocol implementation of Linux kernels 2.6.30 through 2.6.38-rc8 contain a local privilege escalation vulnerability. Description Kernel functions fail to properly check if a user supplied address exists in the user segment of memory. By providing a kernel address to a socket ca...

GNU C library dynamic linker expands $ORIGIN in setuid library search path

Overview Certain versions of glibc unsafely handle the $ORIGIN ELF substitution sequence which can be exploited to gain local privilege escalation. Description Tavis Ormandy's advisory states:"$ORIGIN is an ELF substitution sequence representing the location of the executable being loaded in the...

Slackware 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : glibc (SSA:2010-295-01)

New glibc packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-295-01. The text itse...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.1 and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-thunderbird-3.0.9-i686-1.txz: Upgraded. This upgrade fixes some more security bugs. For more information, see:...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.11-i686-1.txz: Upgraded. This fixes some security issues. For more information, see:...

[slackware-security] glibc

New glibc packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/glibc-2.11.1-i486-4slack13.1.txz: Rebuilt. Patched "dynamic linker expands $ORIGIN in setuid library search...

[slackware-security] 64-bit kernel

New kernel packages are available for Slackware x8664 13.1, and -current to fix security issues. Here are the details from the Slackware64 13.1 ChangeLog: patches/packages/linux-2.6.33.4-2/kernel-firmware-2.6.33.4-noarch-2.txz: Rebuilt...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 8.1 / 9.0 / 9.1 / current : bzip2 (SSA:2010-263-01)

New bzip2 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware...

[slackware-security] bzip2

New bzip2 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/bzip2-1.0.6-i486-1slack13.1.txz: Upgraded. This update fixes an intege...