[slackware-security] GTK+ image loading flaws

New GTK+ version 2 packages are available for Slackware 10.0 and -current to fix issues in the image loader routines that can crash applications. Here are the details from the Slackware 10.0 ChangeLog: l/gtk+2-2.4.10-i486-1.tgz: Upgraded to gtk+-2.4.10. This fixes security issues in the image...

[SECURITY] [DSA 552-1] New imlib2 packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 552-1 [email protected] http://www.debian.org/security/ Martin Schulze September 22nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 552-1] New imlib2 packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 552-1 [email protected] http://www.debian.org/security/ Martin Schulze September 22nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 551-1] New lukemftpd packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 551-1 [email protected] http://www.debian.org/security/ Martin Schulze September 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 550-1] New wv packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 550-1 [email protected] http://www.debian.org/security/ Martin Schulze September 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 550-1] New wv packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 550-1 [email protected] http://www.debian.org/security/ Martin Schulze September 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 549-1] New gtk+2.0 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 549-1 [email protected] http://www.debian.org/security/ Martin Schulze September 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 549-1] New gtk+2.0 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 549-1 [email protected] http://www.debian.org/security/ Martin Schulze September 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 547-1] New Imagemagic packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 547-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 546-1] New gdk-pixbuf packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 546-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 546-1] New gdk-pixbuf packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 546-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 545-1] New cupsys packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 545-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory

-------------------------------------------------------------------------- Debian Security Advisory DSA 544-1 [email protected] http://www.debian.org/security/ Martin Schulze September 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory

-------------------------------------------------------------------------- Debian Security Advisory DSA 544-1 [email protected] http://www.debian.org/security/ Martin Schulze September 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 543-1] New krb5 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 543-1 [email protected] http://www.debian.org/security/ Martin Schulze August 31st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 458-2] New python2.2 packages really fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-2 [email protected] http://www.debian.org/security/ Martin Schulze Aughst 31st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 458-2] New python2.2 packages really fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-2 [email protected] http://www.debian.org/security/ Martin Schulze Aughst 31st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 542-1] New Qt packages fix arbitrary code execution and denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 542-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2004 http://www.debian.org/security/faq -...

GLSA-200408-15 : Tomcat: Insecure installation

The remote host is affected by the vulnerability described in GLSA-200408-15 Tomcat: Insecure installation The Gentoo ebuild for Tomcat sets the ownership of the Tomcat init scripts as tomcat:tomcat, but those scripts are executed with root privileges when the system is started. This may allow a...

[slackware-security] gaim updated again

A couple of bugs were found in the gaim 0.82 release, and gaim-0.82.1 was released to fix them. In addition, gaim-encryption-2.29 did not work with gaim-0.82 due to changes in the header files, so the gaim-encryption plugin has also been updated to gaim-encryption-2.30. Here are the details from...