Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / current : xine-lib (SSA:2008-089-03)

New xine-lib packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-089-03. The text...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-0073 Here are the details from the Slackware...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 11.0, 12.0, and -current to fix security issues. For more information, see: http://www.mozilla.org/projects/security/known-vulnerabilities.htmlseamonkey Here are the details from the Slackware 12.0 ChangeLog:...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. For more information, see: http://www.mozilla.org/projects/security/known-vulnerabilities.htmlfirefox Here are the details from the Slackware 12.0 ChangeLog:...

Slackware 10.2 / 11.0 / 12.0 / current : mozilla-thunderbird (SSA:2008-061-01)

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-061-01. The text...

Slackware 11.0 / 12.0 / current : espgs/ghostscript (SSA:2008-062-01)

New espgs or ghostscript packages are available for 11.0, 12.0, and -current to fix a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-062-01. The text itself is...

[slackware-security] espgs/ghostscript

New espgs or ghostscript packages are available for 11.0, 12.0, and -current to fix a buffer overflow. Here are the details from the Slackware 12.0 ChangeLog: patches/packages/espgs-8.15.4-i486-3slack12.0.tgz: This patched version of ESP Ghostscript fixes a buffer overflow. For more information o...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. Here are the details from the Slackware 12.0 ChangeLog: patches/packages/mozilla-thunderbird-2.0.0.12-i686-1.tgz: Upgraded to thunderbird-2.0.0.12. This update fixes the following...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : apache (SSA:2008-045-02)

New apache 1.3.41 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. A new matching modssl package is also provided. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Slackware 10.2 / 11.0 : php (SSA:2008-045-03)

New php-4.4.8 packages are available for Slackware 10.2 and 11.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-045-03. The text itself is copyright C Slackwar...

Slackware 12.0 / current : httpd (SSA:2008-045-01)

New httpd packages are available for Slackware 12.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-045-01. The text itself is copyright C Slackwa...

[slackware-security] php

New php-4.4.8 packages are available for Slackware 10.2 and 11.0 to fix security issues. More details about the issues may be found here: http://bugs.php.net/43010 Here are the details from the Slackware 11.0 ChangeLog: patches/packages/php-4.4.8-i486-1slack11.0.tgz: Upgraded to php-4.4.8. This i...

[slackware-security] apache

New apache 1.3.41 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. A new matching modssl package is also provided. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database:...

[slackware-security] httpd

New httpd packages are available for Slackware 12.0, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-6421 https://vulners.com/cve/CVE-2007-6422...

Slackware 10.2 / 11.0 / 12.0 / current : firefox, seamonkey (SSA:2008-043-01)

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. New seamonkey updates are available for Slackware 11.0, 12.0, and -current to address similar issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

[slackware-security] firefox, seamonkey

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. New seamonkey updates are available for Slackware 11.0, 12.0, and -current to address similar issues. Here are the details from the Slackware 12.0 ChangeLog:...

[slackware-security] kernel exploit fix

New kernel packages are available for Slackware 12.0, and -current to fix a local root exploit. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-0010 https://vulners.com/cve/CVE-2008-0163...

Slackware 12.0 / current : kernel exploit fix (SSA:2008-042-01)

New kernel packages are available for Slackware 12.0, and -current to fix a local root exploit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-042-01. The text itself is copyright C...

Mozilla Firefox and SeaMonkey Windows.Location Property HTTP Referer头欺骗漏洞

Mozilla Firefox Seamonkey的一个弱点，允许攻击者以欺骗的HTTP referer头。弱点是由于要将一个小时间性差异时，用模态'警报（ ） '对话框，可以让使用者产生假的HTTP referer头。 攻击者可以利用这个问题来欺骗的HTTP referer头。这可能导致其它安全机制依赖于这个数据要失败的，或者让他们回到具误导性的资料。 此问题将影响之前的所有版本的Mozilla Firefox 2.0.0.10和Mozilla Seamonkey的1.1.7 。 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7....

Slackware 11.0 / 12.0 / current : mysql (SSA:2007-348-01)

New mysql packages are available for Slackware 11.0, 12.0, and -current to fix bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-348-01. The text itself is...