[slackware-security] libtiff

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/libtiff-3.9.6-i486-1slack13.37.txz: Upgraded. Patched overflows th...

[slackware-security] vsftpd

New vsftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to work around a vulnerability in glibc. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/vsftpd-2.3.5-i486-1slack13.37.txz: Upgraded. Minor version bump, this also wor...

[slackware-security] proftpd

New proftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/proftpd-1.3.4a-i486-1slack13.37.txz: Upgraded. This update fixes a use-after-free memory...

[slackware-security] glibc

New glibc packages are available for Slackware 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/glibc-2.13-i486-5slack13.37.txz: Rebuilt. Patched an overflow in tzfile. This was evidently first reported in 2009, but is on...

[slackware-security] php

New php packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/php-5.3.10-i486-1slack13.37.txz: Upgraded. Fixed arbitrary remote code execution vulnerability reported ...

[slackware-security] httpd

New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. The apr-util package has also been updated to the latest version. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/apr-util-1.4.1-i486-1slack13.37.txz:...

[slackware-security] httpd

New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/httpd-2.2.21-i486-1slack13.37.txz: Upgraded. Respond with HTTPNOTIMPLEMENTED when the method is not...

[slackware-security] httpd

Not long ago, httpd package updates were issued to clamp down on a denial of service bug that's seen some action in the wild. New packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current. Here are the details from the Slackware 13.37 ChangeLog:...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 13.37 and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/seamonkey-2.3.3-i486-1slack13.37.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-thunderbird-3.1.13-i486-1slack13.37.txz: Upgraded. This release contains security fixes and...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-firefox-6.0.2-i486-1slack13.37.txz: Upgraded. This release contains security fixes and improvements. F...

[slackware-security] php

New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/php-5.3.8-i486-1slack13.37.txz: Upgraded. Security fixes vs. 5.3.6 5.3.7 was not usable: Updated...

[slackware-security] bind

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/bind-9.7.4-i486-1slack13.37.txz: Upgraded. This BIND update...

[slackware-security] samba

New samba packages are available for Slackware 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/samba-3.5.10-i486-1slack13.37.txz: Upgraded. Fixed cross-site request forgery and cross-site scripting vulnerability in SWAT t...

[slackware-security] dhcpcd

New dhcpcd packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/dhcpcd-5.2.12-i486-1slack13.37.txz: Upgraded. Sanitize the host name provided by the DHCP server to insure that it does...

[slackware-security] libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/libpng-1.4.8-i486-1slack13.37.txz: Upgraded. Fixed uninitializ...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0 and 13.1 to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.19-i686-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see:...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/seamonkey-2.2-i486-1slack13.37.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-thunderbird-3.1.11-i486-1slack13.37.txz: Upgraded. This release contains security fixes and...

[slackware-security] bind

New bind packages are available for Slackware 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/bind-9.7.3P3-i486-1slack13.37.txz: Upgraded. A specially constructed packet will cause BIND 9 "named" to exit, affecting DNS service...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/pidgin-2.9.0-i486-1slack13.37.txz: Upgraded. Fixed a remote denial of service. A remote attacker could set a...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-firefox-5.0-i486-1slack13.37.txz: Upgraded. This release contains security fixes and improvements. For...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/fetchmail-6.3.20-i486-1slack13.37.txz: Upgraded. This...

[slackware-security] bind

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/bind-9.7.3P1-i486-1slack13.37.txz: Upgraded. This release fixes...

[slackware-security] httpd

New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix accidental ABI breakage caused by httpd-2.2.18. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/httpd-2.2.19-i486-1slack13.37.txz: Upgraded. Revert ABI breakage in...

[slackware-security] apr/apr-util

New apr and apr-util packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue in apr and a crash bug in apr-util. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/apr-1.4.5-i486-1slack13.37.txz: Upgraded. This...

[slackware-security] httpd

New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current. These have been compiled against the new versions of apr and apr-util, which were upgraded to fix a security issue that affects Apache httpd. It is recommended that all three updates be applied. Here...

[slackware-security] apr/apr-util

New apr and apr-util packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/apr-1.4.4-i486-1slack13.37.txz: Upgraded. This fixes a possible denial of service du...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, and 13.1 to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.14-i486-1slack13.1.txz: Upgraded. This release contains security fixes and improvements. For more information, see...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-thunderbird-3.1.10-i486-1slack13.37.txz: Upgraded. This release contains security fixes and...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-firefox-4.0.1-i486-1slack13.37.txz: Upgraded. This release contains security fixes and improvements. F...

[slackware-security] rdesktop

New rdesktop packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/rdesktop-1.6.0-i486-2slack13.1.txz: Rebuilt. Patched a traversal vulnerability disallow /.. requests...

[slackware-security] polkit

New polkit packages are available for Slackware 13.1 and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/polkit-114bdfd8-i486-2slack13.1.txz: Rebuilt. Patched to fix a race condition that could allow a local user to execute arbitrary code...

[slackware-security] acl

New acl packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/acl-2.2.50-i486-1slack13.1.txz: Upgraded. Fix the --physical option in setfacl and getfacl to prevent...

[slackware-security] kdelibs

A new kdelibs package is available for Slackware 13.1 to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/kdelibs-4.4.3-i486-2slack13.1.txz: Rebuilt. Patched CVE-2011-1168. For more information, see:...

[slackware-security] libtiff

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/libtiff-3.9.4-i486-2slack13.1.txz: Rebuilt. Patched overflows that could...

[slackware-security] xrdb

New xrdb packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/xrdb-1.0.9-i486-1slack13.1.txz: Upgraded. This fixes a security issue where improperly sanitized input could...

[slackware-security] shadow

New shadow packages are available for Slackware 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/shadow-4.1.4.3-i486-2slack13.1.txz: Rebuilt. Corrected a packaging error where incorrect permissions on /usr/sbin/lastlog and...

[slackware-security] dhcp

New dhcp packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/dhcp-4.1ESVR2-i486-1slack13.1.txz: Upgraded. In dhclient, check the data for...

[slackware-security] proftpd

New proftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/proftpd-1.3.3e-i486-1slack13.1.txz: Upgraded. Fixes CVE-2011-1137 badly formed SSH messages cause DoS...

[slackware-security] shadow

New shadow packages are available for Slackware 13.1 and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/shadow-4.1.4.3-i486-1slack13.1.txz: Rebuilt. This release fixes a security issue where local users may be able to add themselves to N...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0 and 13.1 to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.16-i686-1.txz: Upgraded. This release fixes a security vulnerability by blacklisting several invalid HTTPS...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.13-i486-1slack13.1.txz: Upgraded. This release fixes a security vulnerability by blacklisting several...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/pidgin-2.7.11-i486-1slack13.1.txz: Upgraded. Fixed denials of service caused by NULL pointer dereferences due...

[slackware-security] subversion

New subversion packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/subversion-1.6.16-i486-1slack13.1.txz: Upgraded. Fixed a remotely triggerable NULL-pointer dereference i...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.15-i686-1.txz: Upgraded. Firefox 3.6.15 is a security and stability update to Firefox 3.6.x...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.12-i486-1slack13.1.txz: Upgraded. This release fixes some more security vulnerabilities. For more...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.14-i686-1.txz: Upgraded. Firefox 3.6.14 is a regular security and stability update to Firefox 3.6....

[slackware-security] samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a denial of service security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/samba-3.5.7-i486-1slack13.1.txz: Upgraded. Fix memory corruption...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/pidgin-2.7.10-i486-1slack13.1.txz: Upgraded. Fixed potential information disclosure issue in libpurple...