[slackware-security] xorg-server

New xorg-server packages are available for Slackware 12.1 and -current to fix security issues in xorg-server 1.4 prior to version 1.4.2. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1377...

[slackware-security] samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix a security issue: "Specifically crafted SMB responses can result in a heap overflow in the Samba client code. Because the server process, smbd, can itself act as a client during operations such ...

kdebase kdm local file reading vulnerability

New kdebase packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security issue with KDM the KDE login manager which could be exploited by a local attacker to read any file on the system. The official KDE security advisory may be found here:...

libpng update

New libpng packages are available for Slackware 9.0, 9.1, and -current to fix an issue where libpng could be caused to crash, perhaps creating a denial of service issue if network services are linked with it. More details about this issue may be found in the Common Vulnerabilities and Exposures C...

[slackware-security] c-ares

New c-ares packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/c-ares-1.34.7-i586-1slack15.0.txz: Upgraded. This release fixes the following security issues: Use-after-free / double-free in c-ares'...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.13.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.11.7-i586-1slack15.0.txz: Upgraded. Fix the following security issue: xmlreader: Don't expand XIncludes when backtracking...

[slackware-security] vim

New vim packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-9.0.2127-i586-1slack15.0.txz: Upgraded. Fixed security issues. Thanks to marav for the heads-up. For more information, see:...

[slackware-security] libcue

New libcue packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libcue-2.2.1-i586-4slack15.0.txz: Rebuilt. Fixed a bug which could allow memory corruption resulting in arbitrary code execution. For...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.1.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.17-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: urllib.parse.urlsplit now strips leading ...

[slackware-security] ntfs-3g

New ntfs-3g packages are available for Slackware 14.2 and 15.0 to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/ntfs-3g-2022.10.3-i586-1slack15.0.txz: Upgraded. Fixed vulnerabilities that may allow an attacker using a maliciously crafted...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-102.11.0-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mo...

[slackware-security] gnutls

New gnutls packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/gnutls-3.7.9-i586-1slack15.0.txz: Upgraded. libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. Reported by Hubert...

[slackware-security] emacs

New emacs packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/emacs-27.2-i586-2slack15.0.txz: Rebuilt. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-4slack15.0.txz: Rebuilt. xkb: proof GetCountedString against request length attacks. xkb: fix some...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.9.14-i586-1slack15.0.txz: Upgraded. This update fixes bugs and the following security issues: Fix intege...

[slackware-security] pidgin

New pidgin packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/pidgin-2.14.9-i586-1slack15.0.txz: Upgraded. Mitigate the potential for a man in the middle attack via DNS spoofin...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-91.6.1-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mor...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.72.0-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: libcurl: wrong connect-only connection 98 F...

[slackware-security] wget

New wget packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/wget-1.20.3-i586-1slack14.2.txz: Upgraded. Fixed a buffer overflow vulnerability: src/iri.cdoconversion: Reallocate the output buffer t...

[slackware-security] ghostscript

New ghostscript packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ghostscript-9.26-i586-1slack14.2.txz: Upgraded. Fixes security issues: A specially crafted PostScript file could have access to t...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-60.3.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] gnupg2

New gnupg2 packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and - -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gnupg2-2.0.31-i586-1slack14.2.txz: Upgraded. Sanitize the diagnostic output of the original file name in verbos...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.58.0-i586-1slack14.2.txz: Upgraded. This update fixes security issues: HTTP authentication leak in redirects HTTP/2...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.57.0-i586-1slack14.2.txz: Upgraded. This update fixes security issues: SSL out of buffer access FTP wildcard out of...

[slackware-security] mercurial

New mercurial packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mercurial-4.3.1-i586-1slack14.2.txz: Upgraded. Fixes security issues: Mercurial's symlink auditing was incomplete prio...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.10.5P2-i586-1slack14.2.txz: Upgraded. This update fixes a high severity security issue: An error ...

[slackware-security] sudo

New sudo packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/sudo-1.8.20p1-i586-1slack14.2.txz: Upgraded. This update fixes a potential overwrite of arbitrary syste...

[slackware-security] mariadb

New mariadb packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mariadb-10.0.30-i586-1slack14.2.txz: Upgraded. This update fixes security issues: Crash in libmysqlclient.so. Difficult to exploit...

[slackware-security] mcabber

New mcabber packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mcabber-1.0.5-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: An incorrect implementation of XEP-028...

[slackware-security] openssl

New openssl packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openssl-1.0.2j-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: Missing CRL sanity check CVE-2016-7052 For more...

[slackware-security] ntp

New ntp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/ntp-4.2.8p8-i486-1slack14.1.txz: Upgraded. This release patches one high and four low severity security issues:...

[slackware-security] libxslt

New libxslt packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libxslt-1.1.29-i486-1slack14.1.txz: Upgraded. This release fixes bugs and a security issue: Fix for type confusion in...

[slackware-security] openssl

New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/openssl-1.0.1q-x8664-1slack14.1.txz: Upgraded. This update fixes the following security issues: BNmodexp ma...

[slackware-security] libpng

New libpng packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libpng-1.4.17-i486-1slack14.1.txz: Upgraded. Fixed buffer overflows in the pngsetPLTE, pnggetPLTE, pngsettIM...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/bind-9.9.7P3-i486-1slack14.1.txz: Upgraded. This update fixes two denial-of-service vulnerabilities: +...

[slackware-security] subversion

New subversion packages are available for Slackware 14.0, 14.1, and -current to fix denial-of-service issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/subversion-1.7.16-i486-1slack14.1.txz: Upgraded. Fix denial of service bugs. For more information, see:...

[slackware-security] php

New php packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/php-5.4.17-i486-1slack14.0.txz: Upgraded. This update fixes an issue where XML in PHP does not properly...

[slackware-security] curl

New curl packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/curl-7.29.0-i486-3slack14.0.txz: Rebuilt. This fixes a minor security issue where a decode buffer...

openssl

New openssl packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/openssl-1.0.1d-i486-1slack14.0.txz: Upgraded. Make the decoding of SSLv3, TLS and DTLS CBC records...

curl

New curl packages are available for Slackware 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/curl-7.29.0-i486-1slack14.0.txz: Upgraded. When negotiating SASL DIGEST-MD5 authentication, the function Curlsaslcreatedigestmd5messag...

[slackware-security] glibc

New glibc packages are available for Slackware 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/glibc-2.13-i486-6slack13.37.txz: Rebuilt. Patched multiple integer overflows in the strtod, strtof, strtold, and strtodl...

[slackware-security] php

New php packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/php-5.3.15-i486-1slack13.37.txz: Upgraded. Fixed potential overflow in phpstreamscandir CVE-2012-2688...

[slackware-security] bind

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues that could allow attackers to successfully query private DNS records, or cause a denial of service. Here are the details from the Slackware 13.1...

subversion

New subversion packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-2411 Here are the details from the Slackware 12.2...

ruby

New ruby packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-1904 Here are the details from the Slackware 12.2...

lcms

New lcms packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-0581...

xterm

New xterm packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2383 Here are the details from the Slackware 12.2 ChangeLog:...

[slackware-security] samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, and 12.0 to fix a security issue and various other bugs. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-4138 Here are the details from the...