Slackware 9.0 / 9.1 / current : INN security update (SSA:2004-014-02)

INN InterNetNews is used to run a news NNTP server. New INN packages are available for Slackware 9.0, 9.1, and -current. These have been upgraded to inn-2.4.1 to fix a potentially exploitable buffer overflow. All sites running INN should upgrade. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Slackware 10.0 / 10.1 / current : xine-lib (SSA:2005-121-02)

New xine-lib packages are available for Slackware 10.0, 10.1, and -current to fix security issues. The xine frontends have also been upgraded. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisor...

Slackware 10.0 / 10.1 / 8.1 / 9.0 / 9.1 / current : java (jre, j2sdk) (SSA:2005-170-01)

Sun has released a couple of security advisories pertaining to both the Java Runtime Environment and the Standard Edition Development Kit. These could allow applets to read or write to local files. For more details, Sun's advisories may be found here:...

Slackware 9.0 / 9.1 / current : mc (SSA:2004-136-01)

New mc packages are available for Slackware 9.0, 9.1, and -current to fix security issues that These could lead to a denial of service or the execution of arbitrary code as the user running mc. Sites that use mc should upgrade to the new mc package. %NASLMINLEVEL 70300 C Tenable Network Security,...

Slackware 8.1 / 9.0 / current : OpenSSH updated again (SSA:2003-260-01)

Upgraded OpenSSH 3.7.1p1 packages are available for Slackware 8.1, 9.0 and -current. These fix additional buffer management errors that were not corrected in the recent 3.7p1 release. The possibility exists that these errors could allow a remote exploit, so we recommend all sites running OpenSSH...

Slackware 10.0 / 9.1 / current : imagemagick (SSA:2004-223-02)

New imagemagick packages are available for Slackware 9.1, 10.0, and -current to fix security issues with PNG images. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2004-223-02. The text...

Slackware 8.1 / 9.0 / 9.1 / current : cvs security update (SSA:2003-345-01)

CVS is a client/server version control system. As a server, it is used to host source code repositories. As a client, it is used to access such repositories. This advisory deals with the use of CVS as a server. A security problem which could allow an attacker to create directories and possibly...

Slackware 8.1 / 9.0 : EPIC4 security fixes (SSA:2003-141-01)

New EPIC4 packages are available to fix security problems found by Timo Sirainen. EPIC4 is an IRC Internet Relay Chat client. Under certain circumstances, a malicious IRC server could cause EPIC4 to crash, or possibly to run arbitrary code as the user running EPIC4. All sites running EPIC4 are...

SSA-18708 New CVS packages available

New cvs packages are available to fix a security vulnerability. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated and is no longer used after a revamping of the Slackware generator. Disabled on 2011/05/27. This script was automatically generated from a Slackware Security Advisory ...

SSA-18706 Security updates for Slackware 8.1

Several security updates are now available for Slackware 8.1, including updated packages for Apache, glibc, modssl, openssh, openssl, and php. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated and is no longer used after a revamping of the Slackware generator. Disabled on...

Slackware 9.1 / current : utempter security update (SSA:2004-110-01)

New utempter packages are available for Slackware 9.1 and -current to fix a security issue. Slackware 9.1 was the first version of Slackware to use the libutempter library, and earlier versions of Slackware are not affected by this issue The utempter package provides a utility and shared library...

Slackware 8.1 / 9.0 / 9.1 / current : apache (SSA:2004-133-01)

New apache packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix security issues. These include a possible denial-of-service attack as well as the ability to possible pipe shell escapes through Apache's errorlog which could create an exploit if the error log is read in a termina...

Slackware 9.0 / 9.1 / current : Kernel security update (SSA:2004-006-01)

New kernels are available for Slackware 9.0, 9.1 and -current. The 9.1 and -current kernels have been upgraded to 2.4.24, and a fix has been backported to the 2.4.21 kernels in Slackware 9.0 to fix a bounds-checking problem in the kernel's mremap call which could be used by a local attacker to ga...

Slackware 10.0 / 10.1 / current : ncftp (SSA:2005-135-02)

New ncftp packages are available for Slackware 10.0, 10.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2005-135-02. The text itself is copyright C...

Slackware 8.1 / 9.0 / 9.1 / current : apache security update (SSA:2003-308-01)

Apache httpd is a hypertext transfer protocol server, and is used by over two thirds of the Internet's web sites. Upgraded Apache packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix local vulnerabilities that could allow users who can create or edit Apache config files to...

Slackware 8.1 / 9.0 / 9.1 / current : rsync security update (SSA:2003-337-01)

Rsync is a file transfer client and server. A security problem which may lead to unauthorized machine access or code execution has been fixed by upgrading to rsync-2.5.7. This problem only affects machines running rsync in daemon mode, and is easier to exploit if the non-default option 'use chroo...

Slackware 8.1 / 9.0 / current : nfs-utils packages replaced (SSA:2003-195-01b)

New nfs-utils packages are available for Slackware 8.1, 9.0, and -current to replace the ones that were issued yesterday. A bug in has been fixed in utils/mountd/auth.c that could cause mountd to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

Slackware 8.1 / 9.0 / 9.1 / current : fetchmail security update (SSA:2003-300-02)

Fetchmail is a mail-retrieval and forwarding utility. Upgraded fetchmail packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix a vulnerability where a specially crafted email could crash fetchmail, preventing the user from downloading or forwarding their email. %NASLMINLEVEL...

Slackware 10.0 / 10.1 / current : zlib DoS (SSA:2005-189-01)

New zlib packages are available for Slackware 10.0, 10.1, and -current to fix a denial of service security issue. zlib 1.1.x is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory...

Slackware 8.1 / 9.0 / current : nfs-utils off-by-one overflow fixed (SSA:2003-195-01)

New nfs-utils packages are available for Slackware 8.1, 9.0, and -current to fix an off-by-one buffer overflow in xlog.c. Thanks to Janusz Niewiadomski for discovering and reporting this problem. The CVE Common Vulnerabilities and Exposures Project has assigned the identification number...