[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.24-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues. For details, see...

EUVD-2017-18222

Malware in sbrugna...

CVE-2025-38601 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38601 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] [DLA 4313-1] node-tar-fs security update

From: Xavier Guimard [email protected] To: [email protected] Subject: SECURITY DLA 4313-1 node-tar-fs security update - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4313-1 [email protected]...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the Terraformer process. An attacker can execute arbitrary code with elevated privileges by injecting malicious Terraform configurations during infrastructure provisioning. Note: This is only exploitable if ...

Fedora: Security Advisory (FEDORA-2025-d72429a1f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4300 : libapache2-mod-shib - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4300 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4300-1 [email protected] https://www.debian.org/lts/security/...

Use of Password Hash With Insufficient Computational Effort

Overview Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort due to the use of a simple, unsalted hash for storing user passwords and API keys. An attacker can obtain sensitive information by performing offline rainbow table attacks...

CVE-2025-38428 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38428 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-4743 affecting package SDL2 for versions less than 2.30.9-1

CVE-2022-4743 affecting package SDL2 for versions less than 2.30.9-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38424 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38424 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-54090 affecting package httpd for versions less than 2.4.65-1

CVE-2025-54090 affecting package httpd for versions less than 2.4.65-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-6491 affecting package php for versions less than 8.1.33-1

CVE-2025-6491 affecting package php for versions less than 8.1.33-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-50104 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50104 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-53905 affecting package vim for versions less than 9.1.1552-1

CVE-2025-53905 affecting package vim for versions less than 9.1.1552-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-50093 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50093 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-53023 affecting package mysql for versions less than 8.0.43-1

CVE-2025-53023 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-53906 affecting package vim for versions less than 9.1.1552-1

CVE-2025-53906 affecting package vim for versions less than 9.1.1552-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-50102 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50102 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-50099 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50099 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...