[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.14.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.14.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

GHSA-Q496-Q274-JGH9 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-PPH6-FVMV-FJRC vulnerabilities

Vulnerabilities for packages: exim...

connectwise-automate-AiTM-rce

ConnectWise Automate 中間者攻撃によるリモートコード実行 目次 背景 タイムライン 考察と学び 責任ある開示 PoC コード ConnectWise に提供したレポート 概要 脆弱な構成 影響 技術的詳細 1. HTTP トランスポート 2. 不十分なプロトコルセキュリティ（暗号化と検証の欠如） 2.1 依存関係チェックとダウンロードにおける不十分な検証 2.2 リプレイプロテクションの欠如 2.3 自己アップデートにおける不十分な検証 3. RMM コマンド＆コントロールの乗っ取り 緩和策 背景 ペネトレーションテストの一環として、ConnectWise...

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73071 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73071 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70463 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70463 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70461 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70461 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70455 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70455 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73076 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73076 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73078 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73078 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70459 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70459 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-4224 affecting package python3 for versions less than 3.12.14-1

CVE-2026-4224 affecting package python3 for versions less than 3.12.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73077 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73077 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70464 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70464 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154create CVE-2024-56602 kernel: ip6gre: Use cached t-net in ip6erspanchangelink CVE-2026-46120 kernel: sched/psi: fix race...

Oracle Linux 10 / 9 : java-25-openjdk (ELSA-2026-55798)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55798 advisory. 1:25.0.4.1.1-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:25.0.4.1.1-1.1 - Update to jdk-25.0.4.1+1 GA - Update release notes to...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2026-55781)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55781 advisory. 17.0.20.1.1-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.20.1.1-1.1 - Update to jdk-17.0.20.1+1 GA - Add to .gitignore...