[slackware-security] sudo redo

New sudo packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a directory permissions issue. These replacement packages restore the correct permissions to /var. Here are the details from the Slackware 13.1 ChangeLog:...

[slackware-security] sudo

New sudo packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/sudo-1.7.4p4-i486-1slack13.1.txz: Upgraded. This fixes a flaw that coul...

[slackware-security] samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/samba-3.5.5-i486-1slack13.1.txz: Upgraded. This upgrade fixes a buffer overflow in th...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.7-i486-1slack13.1.txz: Upgraded. This release fixes some more security vulnerabilities. For more...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-thunderbird-3.0.7-i686-1.txz: Upgraded. This upgrade fixes some more security bugs. For more information, see:...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.9-i686-1.txz: Upgraded. This fixes some security issues. For more information, see:...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/xorg-server-1.7.7-i486-2slack13.1.txz: Rebuilt. Patched to prevent overwriting stack memory and bypassi...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/pidgin-2.7.3-i486-1slack13.1.txz: Upgraded. This fixes a crash due to malformed X-Status messages. For more...

[slackware-security] php

New php packages are available for Slackware 11.0 extra, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/php-5.2.14-i486-1slack13.1.txz: Upgraded. Fixed several security issues. For more information, see:...

[slackware-security] kdegraphics

New kdegraphics packages are available for Slackware 13.1 to fix a security issue in the okular document viewer. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/kdegraphics-4.4.3-i486-3slack13.1.txz: Rebuilt. Patched "Okular PDB Processing Memory Corruption Vulnerability"...

[slackware-security] httpd

New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/httpd-2.2.16-i486-1slack13.1.txz: Upgraded. Fix Handling of requests without a path segment. For more...

[slackware-security] gnupg2

New gnupg2 packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/gnupg2-2.0.14-i486-3slack13.1.txz: Rebuilt. Patched to fix "Realloc Bug with X.509 certificates in GnuPG". F...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, and -current to fix a regression. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.8-i686-1.txz: Upgraded. This fixes a regression in Firefox 3.6.7. For more information, see:...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.6-i486-1slack13.1.txz: Upgraded. This release fixes some more security vulnerabilities. For more...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.1 and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-thunderbird-3.0.6-i686-1.txz: Upgraded. This upgrade fixes some more security bugs. For more information, see:...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.7-i686-1.txz: Upgraded. This fixes some security issues. For more information, see:...

[slackware-security] libtiff

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/libtiff-3.9.4-i486-1slack13.1.txz: Upgraded. This fixes image structure...

[slackware-security] libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/libpng-1.4.3-x8664-1slack13.1.txz: Upgraded. Upgraded to libpng-1.2.44...

[slackware-security] cups

New cups packages are available for Slackware 13.1 and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/cups-1.4.4-i486-1slack13.1.txz: Upgraded. Fixed a memory allocation error in texttops. Fixed a Cross-Site Request Forgery CSRF that coul...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.1 and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-thunderbird-3.0.5-i686-1.txz: Upgraded. This upgrade fixes some more security bugs. For more information, see:...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.5-i486-1slack13.1.txz: Upgraded. This release fixes some more security vulnerabilities. For more...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.4-i686-1.txz: Upgraded. This fixes some security issues. For more information, see:...

[slackware-security] bind

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues when DNSSEC is enabled which is not the default setting. Here are the details from the Slackware 13.1 ChangeLog:...

[slackware-security] samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and 13.0 to fix a security issue. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/samba-3.2.15-i486-2slack13.0.txz: Rebuilt. Patched a buffer overflow in smbd that allows remote...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/pidgin-2.7.0-i486-1slack13.0.txz: Upgraded. Upgraded to pidgin-2.7.0 and pidgin-encryption-3.1. The msnemoticonmsg...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/fetchmail-6.3.17-i486-1slack13.0.txz: Upgraded. A crafted header or POP3...

[slackware-security] irssi

New irssi packages are available for Slackware 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/irssi-0.8.15-i486-1slack13.0.txz: Upgraded. From the NEWS file: - Check if an SSL certificate...

[slackware-security] kdebase-workspace

New kdebase-workspace packages are available for Slackware 13.0 and -current to fix a security issue with KDM. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/kdebase-workspace-4.2.4-i486-2slack13.0.txz: Rebuilt. Patched a security issue with KDM. For more information, se...

[slackware-security] sudo

New sudo packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/sudo-1.7.2p6-i486-1slack13.0.txz: Upgraded. This update fixes security issues...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, and -current to fix security issues. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/seamonkey-2.0.4-i486-1slack13.0.txz: Upgraded. This release fixes some more security vulnerabilities. For more information,...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 12.2, 13.0, and -current to fix security issues. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/mozilla-firefox-3.6.3-i686-1.txz: Upgraded. This fixes some security issues. For more information, see:...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/mozilla-thunderbird-2.0.0.24-i686-1.txz: Upgraded. This upgrade fixes some more security...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 11.0, 12.0, and 12.1 to fix security issues. For more information, see: http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html Here are the details from the Slackware 12.1 ChangeLog:...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0 and -current to fix security issues. More details about the issues may be found on the Mozilla website: http://www.mozilla.org/security/known-vulnerabilities/firefox36.html Here are the details from the Slackware 13.0 ChangeLog:...

[slackware-security] openssl

New openssl packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2010-0433 https://vulners.com/cve/CVE-2010-0740 A...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix denial of service issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2010-0277 https://vulners.com/cve/CVE-2010-0420...

[slackware-security] httpd

New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. modssl: A partial fix for the TLS renegotiation prefix injection attack by rejecting any client-initiated renegotiations. modproxyajp: Respond with HTTPBADREQUEST when the body is not sent...

SSA-2010-0306193619

A new mozilla-firefox package is available for Slackware 12.2 to fix security issues. The package may also be used with Slackware 11.0 or newer. More details about the issues may be found on the Mozilla website: http://www.mozilla.org/security/known-vulnerabilities/firefox30.html Here are the...

mozilla-firefox (Slackware 12.2)

A new mozilla-firefox package is available for Slackware 12.2 to fix security issues. The package may also be used with Slackware 11.0 or newer. More details about the issues may be found on the Mozilla website: http://www.mozilla.org/security/known-vulnerabilities/firefox30.html Here are the...

[slackware-security] gzip

New gzip packages are available for Slackware 13.0 64-bit and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2010-0001 Here are the details from the Slackware64 13.0 ChangeLog:...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2010-0013 Here are the details from the Slackware 13.0...

[slackware-security] php

New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-3557 https://vulners.com/cve/CVE-2009-3558...

[slackware-security] httpd

New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-3094 https://vulners.com/cve/CVE-2009-3095 Here are the...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 12.2, 13.0, and -current to fix security issues. The Firefox 3.0.16 package may also be used with Slackware 11.0 or newer. More details about the issues may be found on the Mozilla website:...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, and -current to fix security issues. More details about the issues may be found on the Mozilla web site: http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html Here are the details from the Slackware 13.0 ChangeLog:...

[slackware-security] gimp

New gimp packages are available for Slackware 12.1, 12.2, 13.0, and -current to fix security issues. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-1570 https://vulners.com/cve/CVE-2009-3909 Here are the...

[slackware-security] ntp

New ntp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. If a spoofed mode 7 packet is sent to a vulnerable NTP daemon it may cause CPU and/or disk space exhaustion, resulting in a denial of service. More...

kernel

New Linux kernel packages are available for Slackware 13.0 and -current to address a security issue. A kernel bug discovered by David Ford may allow remote attackers to crash the kernel by sending an oversized IP packet. While the impact on ordinary servers is still unclear the problem was notice...

bind

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. More details about this issue may be found here: https://vulners.com/cve/CVE-2009-4022 http://www.kb.cert.org/vuls/id/418861 Here are the details from...

openssl

New openssl packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-3555 Here are the details from the Slackware...