[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-102.13.1-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-5slack15.0.txz: Rebuilt. This release fixes 6 recently reported security vulnerabilities in various...

[slackware-security] dhcp

New dhcp packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/dhcp-4.4.3P1-i586-1slack15.0.txz: Upgraded. This update fixes two security issues: Corrected a reference count leak...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.3.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/seamonkey-2.49.5-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more information, see:...

[slackware-security] Slackware 14.2 kernel

New kernel packages are available for Slackware 14.2 to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/linux-4.4.190/: Upgraded. These updates fix various bugs and a minor local denial-of-service security issue. They also change this option:...

[slackware-security] bind

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.11.6P1-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: The TCP client quota set using the...

[slackware-security] libXcursor

New libXcursor packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libXcursor-1.1.15-i586-1slack14.2.txz: Upgraded. Fix heap overflows when parsing malicious files...

[slackware-security] wget

New wget packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/wget-1.19.2-i586-1slack14.2.txz: Upgraded. This update fixes stack and heap overflows in in HTTP protoco...

[slackware-security] rxvt

New rxvt packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/rxvt-2.7.10-i586-5slack14.2.txz: Rebuilt. Patched an integer overflow that can crash rxvt with an escap...

[slackware-security] gtk+2

New gtk+2 packages are available for Slackware 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gtk+2-2.24.31-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: Integer overflow in the gdkcairosetsourcepixbu...

[slackware-security] gimp

New gimp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gimp-2.8.18-i586-1slack14.2.txz: Upgraded. This release fixes a security issue: Use-after-free vulnerability in the...

[slackware-security] libarchive

New libarchive packages are available for Slackware 14.1 and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libarchive-3.1.2-i486-2slack14.1.txz: Rebuilt. Patched an issue with Zip archive handling that could allow an attacker to overwri...

[slackware-security] subversion

New subversion packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/subversion-1.7.22-i486-2slack14.1.txz: Rebuilt. This update patches two security issues: CVE-2016-2167: svnserve/sasl may...

[slackware-security] git

New git packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/git-2.7.3-i486-1slack14.1.txz: Upgraded. Fixed buffer overflows allowing server and client side remote code...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-thunderbird-24.8.1-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] libyaml

New libyaml packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libyaml-0.1.6-i486-1slack14.1.txz: Upgraded. This update fixes a heap overflow in URI escape parsing of YAML in...

[slackware-security] slocate

New slocate packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: Patched to use lstat64 and -DLARGEFILE64SOURCE. Thanks to Mancha+. Patched to fix information leak of filenames in protect...

[slackware-security] libtiff

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/libtiff-3.9.6-i486-1slack13.37.txz: Upgraded. Patched overflows th...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.9-i486-1slack13.1.txz: Upgraded. This release fixes some more security vulnerabilities. For more...

[slackware-security] Samba DoS

New Samba packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security related but in my own and also the Samba's team member who made their WHATSNEW.txt entry, "minor" denial of service issue. More details about this issue may be found in the Common Vulnerabilities and...

libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix security issues. These issues could cause program crashes, or possibly allow arbitrary code embedded in a malicious PNG image to execute. The PNG library is widely used within the system, so all sites should...

kernel DoS

New kernel packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a denial of service security issue. Without a patch to asm-i386/i387.h, a local user can crash the machine. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.19-i586-1slack15.0.txz: Upgraded. This update fixes security issues: bundled libexpat was updated to 2.6.0. zipfile is no...

[slackware-security] expat

New expat packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/expat-2.6.2-i586-1slack15.0.txz: Upgraded. Prevent billion laughs attacks with isolated use of external parsers. For more information,...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.5.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. Thanks to...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.2.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-102.6.1-i686-1slack15.0.txz: Upgraded. This release contains a security fix and improvements. For mo...

[slackware-security] vim

New vim packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-9.0.0270-i586-1slack15.0.txz: Upgraded. We're just going to move to vim-9 instead of continuing to backport patches to the vim-8...

[slackware-security] libvorbis

New libvorbis packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libvorbis-1.3.7-i586-1slack14.2.txz: Upgraded. Fix out-of-bounds read encoding very low sample rates. For more...

[slackware-security] git

New git packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/git-2.17.4-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: With a crafted URL that contains a newline in...

[slackware-security] wavpack

New wavpack packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/wavpack-5.2.0-i586-1slack14.2.txz: Upgraded. Fixed denial-of-service and other potential security issues. For more...

[slackware-security] php

New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: Several security bugs have been fixed in this release: Segfault when using convert.quoted-printable-encode filter. Null pointer dereference i...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-60.2.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.10.4P6-i586-1slack14.2.txz: Upgraded. This update fixes a denial-of-service vulnerability. Under...

[slackware-security] irssi

New irssi packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/irssi-0.8.21-i586-1slack14.2.txz: Upgraded. Fixed security issues that may result in a denial of servic...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.10.4P4-i586-1slack14.2.txz: Upgraded. This update fixes a denial-of-service vulnerability. A...

[slackware-security] samba

New samba packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/samba-4.4.5-i586-1slack14.2.txz: Upgraded. This release fixes a security issue: Client side SMB2/3 required signing can be...

[slackware-security] curl

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/curl-7.47.1-i486-1slack14.1.txz: Upgraded. This update fixes a security issue where NTLM credentials are not...

[slackware-security] mutt

New mutt packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mutt-1.5.23-i486-2slack14.1.txz: Rebuilt. Patched a vulnerability where malformed headers can cause mutt to crash. For mo...

[slackware-security] samba

New samba packages are available for Slackware 14.1 and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.1.16-i486-1slack14.1.txz: Upgraded. This update is a security release in order to address CVE-2014-8143 Elevation of privilege...

[slackware-security] samba

New samba packages are available for Slackware 14.1 and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.1.11-i486-1slack14.1.txz: Upgraded. This update fixes a remote code execution attack on unauthenticated nmbd NetBIOS name...

[slackware-security] gnupg

New gnupg packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/gnupg-1.4.16-i486-1slack14.1.txz: Upgraded. Fixed the RSA Key Extraction via Low-Bandwidth Acoustic...

[slackware-security] xpdf

New xpdf packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/xpdf-3.03-i486-1slack14.0.txz: Upgraded. Sanitize error messages to remove escape sequences that could ...

[slackware-security] libexif

New libexif packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/libexif-0.6.21-i486-1slack13.37.txz: Upgraded. This update fixes a number of remotely...

[slackware-security] shadow

New shadow packages are available for Slackware 13.1 and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/shadow-4.1.4.3-i486-1slack13.1.txz: Rebuilt. This release fixes a security issue where local users may be able to add themselves to N...

[slackware-security] sudo

New sudo packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/sudo-1.7.4p6-i486-1slack13.1.txz: Upgraded. Fix Runas group password...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/pidgin-2.7.5-i486-1slack13.1.txz: Upgraded. This update addresses some denial of service bugs. For more...

[slackware-security] amarok

New Amarok packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues. In addition, new supporting libgpod packages are available for Slackware 11.0 and 12.0, since a newer version of libgpod than shipped with these releases is required to run Amarok version 1.4.10...

[slackware-security] koffice

A new koffice package is available for Slackware 10.2 to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-6120 Here are the details from the Slackware 10.2 ChangeLog:...