[slackware-security] tigervnc

New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/tigervnc/tigervnc-1.12.0-i586-5slack15.0.txz: Rebuilt. Recompiled against xorg-server-1.20.14, including the latest patches for several securit...

[slackware-security] mariadb

New mariadb packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mariadb-10.5.23-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: Vulnerability allows high privileged...

[slackware-security] cups

New cups packages are available for Slackware 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/cups-2.4.7-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: Fixed Heap-based buffer overflow when...

[slackware-security] libssh

New libssh packages are available for Slackware 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libssh-0.10.5-i586-1slack15.0.txz: Upgraded. This update fixes security issues: A NULL dereference during rekeying with algorit...

[slackware-security] git

New git packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/git-2.35.7-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Using a specially-crafted repository, Git...

[slackware-security] apr-util

New apr-util packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/apr-util-1.6.3-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: Integer Overflow or Wraparound vulnerability in...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-102.6.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

[slackware-security] emacs

New emacs packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/emacs-27.2-i586-2slack15.0.txz: Rebuilt. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the...

[slackware-security] krb5

New krb5 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/krb5-1.19.2-i586-3slack15.0.txz: Rebuilt. Fixed integer overflows in PAC parsing. Fixed memory leak in OTP kdcpreauth module. Fixed...

[slackware-security] wget

New wget packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/wget-1.20.3-i586-1slack14.2.txz: Upgraded. Fixed a buffer overflow vulnerability: src/iri.cdoconversion: Reallocate the output buffer t...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-60.3.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] dhcp

New dhcp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/dhcp-4.4.1-i586-1slack14.2.txz: Upgraded. This update fixes two security issues: Corrected an issue wher...

[slackware-security] ruby

New ruby packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ruby-2.2.9-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: Net::FTPget, getbinaryfile, gettextfile, put,...

[slackware-security] ntp

New ntp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/ntp-4.2.8p8-i486-1slack14.1.txz: Upgraded. This release patches one high and four low severity security issues:...

[slackware-security] openssh

New openssh packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/openssh-7.2p2-i486-1slack14.1.txz: Upgraded. This release fixes a security bug: sshd8: sanitise X11...

[slackware-security] jasper

New jasper packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/jasper-1.900.1-i486-4slack14.1.txz: Rebuilt. Applied many security and bug fixes. Thanks to Heinz Wiesinger...

[slackware-security] mutt

New mutt packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mutt-1.5.23-i486-1slack14.1.txz: Upgraded. This update fixes a buffer overflow where malformed RFC2047 header lines could...

[slackware-security] subversion

New subversion packages are available for Slackware 14.0, 14.1, and -current to fix denial-of-service issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/subversion-1.7.16-i486-1slack14.1.txz: Upgraded. Fix denial of service bugs. For more information, see:...

mozilla-nss

New mozilla-nss packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-nss-3.15.4-i486-1slack14.1.txz: Upgraded. Upgraded to nss-3.15.4 and nspr-4.10.3. Fixes a possible...

[slackware-security] gnutls

New gnutls packages are available for Slackware 14.0 and -current to fix a security issue. Sorry about having to reissue this one -- I pulled it from ftp.gnu.org not realizing that the latest version there was actually months out of date. Here are the details from the Slackware 14.0 ChangeLog:...

curl

New curl packages are available for Slackware 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/curl-7.29.0-i486-1slack14.0.txz: Upgraded. When negotiating SASL DIGEST-MD5 authentication, the function Curlsaslcreatedigestmd5messag...

freetype

New freetype packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/freetype-2.4.11-i486-1slack14.0.txz: Upgraded. This release fixes several security bugs that could...

[slackware-security] dhcp

New dhcp packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/dhcp-4.2.4P2-i486-1slack13.37.txz: Upgraded. An issue with the use of lease times was found and fixed. Makin...

[slackware-security] t1lib

New t1lib packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/t1lib-5.1.2-i486-3slack13.37.txz: Rebuilt. Patched various overflows, crashes, and pointer bugs. For more...

[slackware-security] cups

New cups packages are available for Slackware 13.1 and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/cups-1.4.4-i486-1slack13.1.txz: Upgraded. Fixed a memory allocation error in texttops. Fixed a Cross-Site Request Forgery CSRF that coul...

[slackware-security] kdebase-workspace

New kdebase-workspace packages are available for Slackware 13.0 and -current to fix a security issue with KDM. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/kdebase-workspace-4.2.4-i486-2slack13.0.txz: Rebuilt. Patched a security issue with KDM. For more information, se...

libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue. Jeff Phillips discovered an uninitialized-memory-read bug affecting interlaced images that may have security implications. More details about this issue m...

bind

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found here: https://www.isc.org/node/373 http://www.ocert.org/advisories/ocert-2008-016.html...

[slackware-security] openssl

New openssl packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues. More details about this issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-0891 https://vulners.com/cve/CVE-2008-1672 Upgraded OpenSS...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 12.1 and -current to fix security issues in xorg-server 1.4 prior to version 1.4.2. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1377...

[slackware-security] gnutls

New gnutls packages are available for Slackware 12.0, 12.1, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1948 https://vulners.com/cve/CVE-2008-1949...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-0073 Here are the details from the Slackware...

[slackware-security] rsync

New rsync packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about the issues may be found here: https://vulners.com/cve/CVE-2007-4091 http://lists.samba.org/archive/rsync-announce/2007/000050.html Here are the detai...

[slackware-security] openssh

New openssh packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0 to fix a possible security issue. This version should also provide increased performance with certain ciphers. More details about this issue may be found in the Common Vulnerabilities and Exposures CV...

[slackware-security] ktorrent

New ktorrent packages are available for Slackware 11.0 and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-1384 https://vulners.com/cve/CVE-2007-1385 Here are the details from th...

[slackware-security] imagemagick

A new imagemagick package is available for Slackware 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-5456 Here are the details from the Slackware 11.0 ChangeLog:...

[slackware-security] openssl

New openssl packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2937 https://vulners.com/cve/CVE-2006-3738...

[slackware-security] imagemagick

New imagemagick packages are available for Slackware 10.2 and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2005-4601 https://vulners.com/cve/CVE-2006-0082 Here are the details from...

OpenSSL

New OpenSSL packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. Under certain conditions, an attacker acting as a "man in the middle" may force a client and server to fall back to the less-secure SSL 2.0 protocol. More details about this iss...

mod_ssl

New modssl packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a security issue. The packages were upgraded to modssl-2.8.18-1.3.31 fixing a buffer overflow that may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN, if modssl is...

rsync update fixes security problems

New rsync packages are available to fix security problems. Here's the information from the Slackware 8.0 ChangeLog: ---------------------------- Mon Mar 11 15:09:26 PST 2002 patches/packages/rsync.tgz: Upgraded to rsync-2.5.3. This fixes two security problems: Make sure that supplementary groups...

[slackware-security] glibc

New glibc packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/aaaglibc-solibs-2.33-i586-7slack15.0.txz: Rebuilt. patches/packages/glibc-2.33-i586-7slack15.0.txz: Rebuilt. This update fixes security...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-115.3.1-i686-1slack15.0.txz: Upgraded. This release contains a security fix for a critical heap buff...

[slackware-security] netatalk

New netatalk packages are available for Slackware 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/netatalk-3.1.16-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues. Shared library .so-version...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/curl-8.3.0-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: HTTP headers eat all memory...

[slackware-security] bind

New bind packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/bind-9.16.42-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: Exceeding the recursive-clients quota may cause named t...

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.17-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: urllib.parse.urlsplit now strips leading ...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-102.11.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

[slackware-security] apr

New apr packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/apr-1.7.2-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Integer Overflow or Wraparound vulnerability in aprencode...

[slackware-security] samba

New samba packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/samba-4.15.12-i586-1slack15.0.txz: Upgraded. Fixed a security issue where Samba's Kerberos libraries and AD DC failed to guard against...