[slackware-security] libssh

New libssh packages are available for Slackware 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/libssh-0.5.3-i486-1slack14.0.txz: Upgraded. This release fixes several security bugs. For more information, see:...

[slackware-security] openssl

New openssl packages are available for 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/openssl-0.9.8r-i486-1slack13.1.txz: Upgraded. This OpenSSL update fixes an "OCSP stapling vulnerability". For...

samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-2813...

fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to a fix security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-2666 Here are the...

samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-1888...

cyrus-sasl

New cyrus-sasl packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue. A buffer overflow in the saslencode64 function could lead to a denial of service or possible execution of arbitrary code. More details about this issue may be found in the Commo...

glib2

New glib2 packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix overflows that may be security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-4316 Here are the details from the...

[slackware-security] cups

New cups packages are available for Slackware 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-3639 https://vulners.com/cve/CVE-2008-3640...

[slackware-security] espgs/ghostscript

New espgs or ghostscript packages are available for 11.0, 12.0, and -current to fix a buffer overflow. Here are the details from the Slackware 12.0 ChangeLog: patches/packages/espgs-8.15.4-i486-3slack12.0.tgz: This patched version of ESP Ghostscript fixes a buffer overflow. For more information o...

[slackware-security] Samba DoS

New Samba packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security related but in my own and also the Samba's team member who made their WHATSNEW.txt entry, "minor" denial of service issue. More details about this issue may be found in the Common Vulnerabilities and...

SSA-2006-0628032502

New kdebase packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security issue with KDM the KDE login manager which could be exploited by a local attacker to read any file on the system. The official KDE security advisory may be found here:...

libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix security issues. These issues could cause program crashes, or possibly allow arbitrary code embedded in a malicious PNG image to execute. The PNG library is widely used within the system, so all sites should...

kdepim security update

New kdepim packages are available for Slackware 9.0 and 9.1 to fix a security issue with .VCF file handling. For Slackware -current, a complete upgrade to kde-3.1.5 is available. Here are the details from the Slackware 9.1 ChangeLog: Wed Jan 14 11:58:58 PST 2004...

Sendmail buffer overflow fixed (NEW)

The sendmail packages in Slackware 8.0, 8.1, and 9.0 have been patched to fix a security problem. Note that this vulnerablity is NOT the same one that was announced on March 3rd and requires a new fix. All sites running sendmail should upgrade. More information on the problem can be found here:...

SSA-2002-0626204548

The Slackware Linux Project: Slackware Security Advisories Slackware Security Advisories News Security Advisories /...

[slackware-security] hunspell

New hunspell packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/hunspell-1.7.3-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

[slackware-security] netatalk

New netatalk packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/netatalk-3.2.8-i586-1slack15.0.txz: Upgraded. Bump bundled WolfSSL library to stable version 5.7.2, GitHub 1433. For more informatio...

[slackware-security] cups

New cups packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/cups-2.4.9-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: When starting the cupsd server with a Listen...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-11slack15.0.txz: Rebuilt. This update fixes security issues: Heap buffer overflow in DeviceFocusEvent an...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-115.6.0-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mor...

[slackware-security] netatalk

New netatalk packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/netatalk-3.1.18-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: Harden createappledesktopfolder. For mo...

[slackware-security] c-ares

New c-ares packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/c-ares-1.19.1-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues: 0-byte UDP payload causes Denial of Service...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-102.9.1-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mo...

[slackware-security] libvorbis

New libvorbis packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libvorbis-1.3.7-i586-1slack14.2.txz: Upgraded. Fix out-of-bounds read encoding very low sample rates. For more...

[slackware-security] bind

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.11.20-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: It was possible to trigger an INSIST in...

[slackware-security] openvpn

New openvpn packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openvpn-2.4.9-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: Fix illegal client float. Thanks to Le...

[slackware-security] sudo

New sudo packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/sudo-1.8.28-i586-1slack14.2.txz: Upgraded. Fixed a bug where an sudo user may be able to run a command as root when the...

[slackware-security] irssi

New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/irssi-1.1.3-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: Use after free when sending SASL login to...

[slackware-security] mutt

New mutt packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mutt-1.10.1-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues. Upstream strongly recommends that al...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-52.7.3esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] irssi

New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/irssi-1.0.6-i586-1slack14.2.txz: Upgraded. This update fixes multiple security vulnerabilities. For more information, see:...

[slackware-security] irssi

New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/irssi-1.0.4-i586-1slack14.2.txz: Upgraded. This release fixes two remote crash issues as well as a few bugs. For more...

[slackware-security] freetype

New freetype packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/freetype-2.6.3-i586-2slack14.2.txz: Rebuilt. This update fixes an out-of-bounds write caused by a...

[slackware-security] libpng

New libpng packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libpng-1.6.27-i586-1slack14.2.txz: Upgraded. This release fixes an old NULL pointer dereference bug i...

[slackware-security] libpng

New libpng packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libpng-1.4.19-i486-1slack14.1.txz: Upgraded. Fixed an out-of-range read in pngcheckkeyword. Thanks to Qixue...

[slackware-security] grub

New grub packages are available for Slackware 14.1 and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/grub-2.00-i486-3slack14.1.txz: Rebuilt. Patched bug where password protection during system startup may be bypassed by hitting the...

[slackware-security] openssl

New openssl packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/openssl-1.0.1p-i486-1slack14.1.txz: Upgraded. This update fixes the following security issue: Alternative chains certificate...

[slackware-security] bind

New bind packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/bind-9.9.3P2-i486-1slack14.0.txz: Upgraded. This update fixes a security issue where a specially crafte...

[slackware-security] gnupg / libgcrypt

New gnupg and libgcrypt packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. New libgpg-error packages are also available for Slackware 13.1 and older as the supplied version wasn't new enough to compile the fixed version of libgcrypt. He...

[slackware-security] libexif

New libexif packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/libexif-0.6.21-i486-1slack13.37.txz: Upgraded. This update fixes a number of remotely...

[slackware-security] php

New php packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/php-5.3.10-i486-1slack13.37.txz: Upgraded. Fixed arbitrary remote code execution vulnerability reported ...

[slackware-security] samba

New samba packages are available for Slackware 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/samba-3.5.10-i486-1slack13.37.txz: Upgraded. Fixed cross-site request forgery and cross-site scripting vulnerability in SWAT t...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/pidgin-2.7.0-i486-1slack13.0.txz: Upgraded. Upgraded to pidgin-2.7.0 and pidgin-encryption-3.1. The msnemoticonmsg...

curl

New curl packages are available for Slackware 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue. For more information, see: http://curl.haxx.se/docs/security.html https://vulners.com/cve/CVE-2009-2417 Here are the details from the Slackware 12.2 ChangeLog:...

xdg-utils

New xdg-utils packages are available for Slackware 12.2 and -current to fix security issues. Applications that use /etc/mailcap could be tricked into running an arbitrary script through xdg-open, and a separate flaw in xdg-open could allow the execution of arbitrary commands embedded in untrusted...

ntp

New ntp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to a fix security issue. More details about this issue may be found here: https://lists.ntp.org/pipermail/announce/2009-January/000055.html...

[slackware-security] amarok

New Amarok packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues. In addition, new supporting libgpod packages are available for Slackware 11.0 and 12.0, since a newer version of libgpod than shipped with these releases is required to run Amarok version 1.4.10...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2711 Here are the detail...

[slackware-security] koffice

A new koffice package is available for Slackware 10.2 to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-6120 Here are the details from the Slackware 10.2 ChangeLog:...

[slackware-security] php

New php packages are available for Slackware 10.2 and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-5465 Here are the details from the Slackware 11.0 ChangeLog:...