[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. Some of the...

[slackware-security] kernel

New kernel packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/linux-4.4.38/: Upgraded. This kernel fixes a security issue with a race condition in net/packet/afpacket.c that can be exploited to...

[slackware-security] php

New php packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/php-5.6.22-i486-1slack14.1.txz: Upgraded. This release fixes bugs and security issues. For more information, see:...

[slackware-security] httpd

New httpd packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/httpd-2.4.10-i486-1slack14.1.txz: Upgraded. This update fixes the following security issues: SECURITY:...

[slackware-security] php

New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/php-5.3.8-i486-1slack13.37.txz: Upgraded. Security fixes vs. 5.3.6 5.3.7 was not usable: Updated...

[slackware-security] glibc

New glibc packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/glibc-2.11.1-i486-4slack13.1.txz: Rebuilt. Patched "dynamic linker expands $ORIGIN in setuid library search...

[slackware-security] kdegraphics

New kdegraphics packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix security issues with kpdf. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2005-3191 https://vulners.com/cve/CVE-2005-3192...

[slackware-security] xz

New xz packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xz-5.2.5-i586-4slack15.0.txz: Rebuilt. This update fixes a security issue: xzgrep applied to a crafted file name with...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.74.0-i586-1slack14.2.txz: Upgraded. This release includes the following security related bugfixes: Inferior OCSP...

[slackware-security] bind

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.11.25-i586-1slack14.2.txz: Upgraded. This update fixes bugs, including a denial-of-service security issue: After a...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-60.6.1-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-60.2.2esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] wget

New wget packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/wget-1.19.5-i586-1slack14.2.txz: Upgraded. Fixed a security issue where a malicious web server could...

[slackware-security] ntp

New ntp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ntp-4.2.8p11-i586-1slack14.2.txz: Upgraded. This release addresses five security issues in ntpd: LOW/MEDIUM: Sec 3012 /...

[slackware-security] ntp

New ntp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/ntp-4.2.8p7-i486-1slack14.1.txz: Upgraded. This release patches several low and medium severity security issues...

[slackware-security] openssl

New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/openssl-1.0.1k-i486-1slack14.1.txz: Upgraded. This update fixes several security issues: DTLS segmentation...

[slackware-security] php

New php packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/php-5.4.29-i486-1slack14.1.txz: Upgraded. This update fixes bugs and security issues, including a possible deni...

kernel

New Linux kernel packages are available for Slackware 13.37 and 14.0 to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/linux-3.2.45/: Upgraded. Upgraded to new kernels that fix CVE-2013-2094, a bug that can allow local users to gain a root shell. Be...

[slackware-security] subversion

New subversion packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/subversion-1.6.16-i486-1slack13.1.txz: Upgraded. Fixed a remotely triggerable NULL-pointer dereference i...

[slackware-security] php

New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/php-5.2.16-i486-1slack13.1.txz: Upgraded. This fixes many bugs, including some security issues. For more...

[slackware-security] expat

New expat packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/expat-2.4.9-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: Heap use-after-free vulnerability in...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-91.6.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/seamonkey-2.53.5-i686-1slack14.2.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

[slackware-security] bind

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.11.19-i586-1slack14.2.txz: Upgraded. This update fixes security issues: A malicious actor who intentionally exploits...

[slackware-security] Slackware 14.2 kernel

New kernel packages are available for Slackware 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/linux-4.4.202/: Upgraded. CRYPTOCRC32CINTEL m - y +X86INTELTSXMODEAUTO n +X86INTELTSXMODEOFF y +X86INTELTSXMODEON n These updates fix various bugs...

[slackware-security] httpd

New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/httpd-2.4.39-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. In Apache HTTP Server...

[slackware-security] php

New php packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/php-5.4.43-i486-1slack14.1.txz: Upgraded. This update fixes some bugs and security issues. For more information, see:...

[slackware-security] httpd

New httpd packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/httpd-2.4.6-i486-1slack14.0.txz: Upgraded. This update addresses two security issues: SECURITY:...

[slackware-security] sudo

New sudo packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/sudo-1.9.15-i586-1slack15.0.txz: Upgraded. The sudoers plugin has been modified to make it more resilient to ROWHAMME...

[slackware-security] openssh

New openssh packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssh-9.3p2-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: ssh-agent1 in OpenSSH between and 5.5 and 9.3p1...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-7slack15.0.txz: Rebuilt. PATCH Xi: fix potential use-after-free in DeepCopyPointerClasses. Also merged...

[slackware-security] bind

New bind packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/bind-9.16.37-i586-1slack15.0.txz: Upgraded. This update fixes bugs and the following security issues: An UPDATE message flood could caus...

[slackware-security] Slackware 15.0 bind

New bind packages are available for Slackware 15.0, since the previous patch mistakenly moved to a newer BIND branch. These packages do not fix any security issues that weren't already fixed in the bind-9.18.1 packages, which have been moved into /testing, but the BIND 9.16 LTS version is the...

[slackware-security] freetype

New freetype packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/freetype-2.6.3-i586-3slack14.2.txz: Rebuilt. Fix heap buffer overflow in embedded PNG bitmap handling. For more...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.6.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-60.7.2-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For mor...

[slackware-security] gnutls

New gnutls packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gnutls-3.6.5-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: Bleichenbacher-like side channel leakage in PKCS1 1.5...

[slackware-security] blueman

New blueman packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/blueman-2.0.6-i586-1slack14.2.txz: Upgraded. This update fixes an issue where blueman-mechanism did not enforce the polkit action...

[slackware-security] openssh

New openssh packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and 14.2 to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openssh-7.4p1-i586-2slack14.2.txz: Rebuilt. sftp-server: in read-only mode, sftp-server was incorrectly...

[slackware-security] python

New python packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/python-2.7.14-i586-1slack14.2.txz: Upgraded. Updated to the latest 2.7.x release. This fixes some security issues relate...

[slackware-security] imagemagick

New imagemagick packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/imagemagick-6.8.610-i486-2slack14.1.txz: Rebuilt. This update addresses several security issues in ImageMagick, including:...

[slackware-security] proftpd

New proftpd packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/proftpd-1.3.4e-i486-1slack14.1.txz: Upgraded. Patched an issue where modcopy allowed unauthenticated copyi...

[slackware-security] curl

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/curl-7.36.0-i486-1slack14.1.txz: Upgraded. This update fixes four security issues. For more information, see:...

[slackware-security] libjpeg

New libjpeg packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libjpeg-v8a-i486-2slack14.1.txz: Rebuilt. Fix use of uninitialized memory when decoding images with missin...

[slackware-security] expat

New expat packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/expat-2.0.1-i486-2slack13.1.txz: Upgraded. Fixed various crash and hang bugs. For more information, see:...

[slackware-security] net-snmp

New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-0960 https://vulners.com/cve/CVE-2008-2292 Here are the details...

[slackware-security] libtiff

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues. These issues could be used to crash programs linked to libtiff or possibly to execute code as the program's user. Thanks to Tavis Ormandy and the Google Security Team. More details...

[slackware-security] proftpd

New proftpd packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/proftpd-1.3.8b-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: modsftp: implemented mitigation...

[slackware-security] samba

New samba packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/samba-4.18.8-i586-1slack15.0.txz: Upgraded. This is a security release in order to address the following defects: Unsanitized pipe name...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.3.1esr-i686-1slack15.0.txz: Upgraded. This update contains a security fix. For more information, see:...