[slackware-security] samba

New samba packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security a issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/samba-4.4.16-i586-3slack14.2.txz: Rebuilt. This is a security update in order to patch the following defect: On a Samba 4...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libxml2-2.9.4-i486-1slack14.1.txz: Upgraded. This release fixes bugs and security issues: Heap-based buffer underreads due to...

[slackware-security] gdk-pixbuf2

New gdk-pixbuf2 packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/gdk-pixbuf2-2.28.2-i486-2slack14.1.txz: Rebuilt. Gustavo Grieco discovered a heap overflow in the processing of BM...

[slackware-security] pidgin

New pidgin packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: pidgin-2.10.10-i486-1slack14.1.txz: Upgraded. This update fixes several security issues: Insufficient SSL certificate...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/xorg-server-1.12.4-i486-2slack14.0.txz: Rebuilt. Patched a use-after-free bug that can cause an ...

[slackware-security] bind

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues when DNSSEC is enabled which is not the default setting. Here are the details from the Slackware 13.1 ChangeLog:...

openssl

New openssl packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-0789 https://vulners.com/cve/CVE-2009-0591...

[slackware-security] ruby

New ruby packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2662 https://vulners.com/cve/CVE-2008-2663...

[slackware-security] poppler

A new poppler package is available for Slackware 12.0 to fix an integer overflow. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-3387 Here are the details from the Slackware 12.0 ChangeLog:...

[slackware-security] gzip

New gzip packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix possible security issues. More details about the issues fixed may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2005-0758...

cvs

New cvs packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a buffer overflow vulnerability which could allow an attacker to run arbitrary programs on the CVS server. Sites running a CVS server should upgrade to the new CVS package right away. More details about this issue may...

[slackware-security] Slackware 15.0 kernel

New kernel packages are available for Slackware 15.0 to fix bugs and security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/linux-5.15.145/: Upgraded. These updates fix various bugs and security issues. Thanks to jwoithe for the PCI fix! Be sure to upgrade your...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/curl-8.4.0-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Cookie injection with none file. SOCKS5...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-102.10.0-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mo...

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.15-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Bundled libexpat was upgraded from 2.4.7 to 2.4.9...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.56.1-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: IMAP FETCH response out of bounds read may...

[slackware-security] openexr

New openexr packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openexr-2.2.0-i586-2slack14.2.txz: Rebuilt. Patched bugs that may lead to program crashes or possibly execution of arbitrary code...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/xorg-server-1.18.3-i586-3slack14.2.txz: Rebuilt. This update fixes two security issues: A user...

[slackware-security] libtiff

New libtiff packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libtiff-4.0.7-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more information, see:...

[slackware-security] mcabber

New mcabber packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/loudmouth-1.5.3-i586-1slack14.2.txz: Upgraded. This update is needed for the mcabber security update...

[slackware-security] gnutls

New gnutls packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gnutls-3.4.15-i586-1slack14.2.txz: Upgraded. This update fixes some bugs and security issues. For more information, see:...

[slackware-security] curl

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/curl-7.45.0-i486-1slack14.1.txz: Upgraded. Fixes some security issues. For more information, see:...

[slackware-security] libtasn1

New libtasn1 packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libtasn1-3.6-i486-1slack14.1.txz: Upgraded. Multiple security issues have been corrected in the libtasn1 library. These error...

[slackware-security] gnutls

New gnutls packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/gnutls-3.1.25-i486-1slack14.1.txz: Upgraded. A security issue has been corrected in gnutls. This vulnerabili...

[slackware-security] samba

New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.1.1-i486-1slack14.1.txz: Upgraded. This update fixes two security issues: Samba versions 3.2.0 and above do not check th...

[slackware-security] hplip

New hplip packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/hplip-3.12.9-i486-3slack14.0.txz: Rebuilt. This fixes a polkit race condition that could allow local users to bypass...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/xorg-server-1.7.7-i486-2slack13.1.txz: Rebuilt. Patched to prevent overwriting stack memory and bypassi...

[slackware-security] gnupg2

New gnupg2 packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/gnupg2-2.0.14-i486-3slack13.1.txz: Rebuilt. Patched to fix "Realloc Bug with X.509 certificates in GnuPG". F...

gnutls

New gnutls packages are available for Slackware 12.1, 12.2, 13.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-2730 Here are the details from the Slackware 13.0 ChangeLog...

xpdf

New xpdf packages are available for Slackware 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-0146...

[slackware-security] httpd

New httpd packages are available for Slackware 12.0, 12.1, and -current to fix XSS security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-5000 https://vulners.com/cve/CVE-2007-6388 Here are the details...

[slackware-security] libpng for Slackware 10.1 and 10.2

New libpng packages are available for Slackware 10.1 and 10.2 that were left out of the last batch of updates. These fix the same security problems as the other 1.2.23 upgrades. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database:...

dnsmasq

New dnsmasq packages are available for Slackware 10.0, 10.1, and -current to fix security issues. An off-by-one overflow vulnerability may allow a DHCP client to create a denial of service condition. Additional code was also added to detect and defeat attempts to poison the DNS cache. More detail...

kernel security updates

New kernel packages are available for Slackware 9.1 and -current to fix security issues. Also available are new kernel modules packages including alsa-driver, and a new version of the hotplug package for Slackware 9.1 containing some fixes for using 2.4.26 and 2.6.x kernel modules. The most serio...

OpenSSL security update

Upgraded OpenSSL packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix two potential denial-of-service issues in earlier versions of OpenSSL. We recommend sites that use OpenSSL upgrade to the fixed packages right away. More details about this issue may be found in the Commo...

Slackware 8.1 kernel security update

New kernels are available for Slackware 8.1 containing a backported fix from a bounds-checking problem in the kernel's mremap call which could be used by a local attacker to gain root privileges. This fix was previously issued for Slackware 9.0, 9.1, and -current SSA:2004-006-01. Sites running...

[slackware-security] freetype

New freetype packages are available for Slackware 15.0 to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/freetype-2.13.3-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: An out of bounds write exists in FreeType versions...

[slackware-security] libuv

New libuv packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libuv-1.48.0-i586-1slack15.0.txz: Upgraded. This update fixes a server-side request forgery SSRF flaw. Thanks to alex2grad for the...

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.18-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: Fixed an issue where instances of ssl.SSLSocket we...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/curl-8.2.0-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: fopen race condition. For more...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-8slack15.0.txz: Rebuilt. PATCH composite: Fix use-after-free of the COW. Fix use-after-free that can le...

[slackware-security] rsync

New rsync packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/rsync-3.2.5-i586-1slack15.0.txz: Upgraded. Added some file-list safety checking that helps to ensure that a rogue...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-91.11.0-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mor...

[slackware-security] ruby

New ruby packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/ruby-3.0.4-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues: Double free in Regexp compilation. Buffer overrun ...

[slackware-security] mozilla-nss

New mozilla-nss packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-nss-3.40.1-i586-2slack14.2.txz: Rebuilt. This update fixes a critical security issue: NSS Network Security...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-68.11.0-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For mor...

[slackware-security] openssl

New openssl packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openssl-1.0.2t-i586-1slack14.2.txz: Upgraded. This update fixes low severity security issues: Fixed a padding oracle in PKCS7dataDeco...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.61.1-i586-1slack14.2.txz: Upgraded. This update fixes an NTLM password overflow via integer overflow. For more...

[slackware-security] php

New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/php-5.6.33-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues, including: Potential infinite loop in...

[slackware-security] gnutls

New gnutls packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gnutls-3.5.8-i586-1slack14.2.txz: Upgraded. This update fixes some bugs and security issues. For more information, see:...