Slackware 1268 Published by Philipp Esselbach 0

Slackware 15.0 has released a critical security update for its Samba package to address multiple high severity vulnerabilities. This new version patches dangerous flaws that could allow unauthenticated attackers to execute arbitrary code or bypass authentication mechanisms. Administrators should prioritize installing the upgrade immediately to protect their file sharing and directory services from potential compromise. You can download the updated packages directly from the official Slackware FTP server and apply them using the standard package upgrade command.

samba (SSA:2026-158-01)

Slackware 1268 Published by Philipp Esselbach 0

Slackware Linux has released urgent security patches for libinput and dnsmasq to address critical vulnerabilities in versions 15.0 and the rolling current branch. The libinput update resolves an unescaped physical output flaw that could potentially allow arbitrary root code execution through malicious udev properties, though local access restrictions currently limit immediate exploitation risk. Meanwhile, the dnsmasq upgrade addresses a separate memory corruption flaw that triggers during unusually long domain lookups. Administrators should grab the new files from official FTP mirrors and run the standard root installation commands right away to keep their systems secure.

libinput (SSA:2026-155-02)
dnsmasq (SSA:2026-155-01)

Slackware 1268 Published by Philipp Esselbach 0

The Slackware Linux Security Team has released a comprehensive security advisory addressing multiple critical vulnerabilities across five core system packages. Administrators running Slackware 15.0 or the current development branch should immediately apply these patches to protect against resource exhaustion attacks, SQL injection flaws, and dangerous buffer overflow exploits in their web servers, FTP daemons, remote desktop clients, network utilities, and X window infrastructure.

httpd (SSA:2026-154-01)
proftpd (SSA:2026-154-03)
tigervnc (SSA:2026-154-05)
net-tools (SSA:2026-154-02)
xorg-server (SSA:2026-154-04)

Slackware 1268 Published by Philipp Esselbach 0

Slackware Linux administrators should apply the new SSA:2026-152-01 kernel update right away because it patches several dangerous flaws inside the rxrpc networking module. This release targets both the stable 15.0 branch and the rolling current version while fixing issues related to ticket validation and key handling that could compromise system integrity. Package downloads are available for various architecture combinations including generic SMP builds and standard x86_64 distributions. After installing the updated files you will need to regenerate your initrd image and double check bootloader configurations before rebooting your server or workstation.

kernel (SSA:2026-152-01)

Slackware 1268 Published by Philipp Esselbach 0

The Slackware Linux Security Team released updated Thunderbird packages to patch security vulnerabilities in both the stable 15.0 release and the current development branch. You can download the new files from official FTP mirrors or locate nearby servers through the main project website. Installing the update only requires running a single upgradepkg command while logged in as root.

mozilla-thunderbird (SSA:2026-146-01)

Slackware 1268 Published by Philipp Esselbach 0

Slackware just pushed out new kernel packages for version 15.0 and the current development branch to fix critical network security flaws. The patches target how shared fragment markers move through buffer transfer helpers and coalescing routines, which directly resolves CVE-2026-43503 alongside CVE-2026-46300.

kernel (SSA:2026-144-01)

Slackware 1268 Published by Philipp Esselbach 0

The Slackware Linux Security Team has rolled out urgent security patches for both the bind and rsync utilities to address several critical vulnerabilities. These updates tackle serious flaws ranging from local privilege escalation and memory disclosure to unbounded recursion loops and symlink race conditions. You can grab the new binary packages directly from official mirrors, with builds ready for i586 and x86_64 systems running either Slackware 15.0 or the rolling current branch.

bind (SSA:2026-141-01)
rsync (SSA:2026-141-02)

Slackware 1268 Published by Philipp Esselbach 0

The Slackware Linux Security Team has released urgent updates for Thunderbird, Firefox, and haveged to address multiple vulnerabilities in versions 15.0 and the current development branch. These patches resolve several critical flaws that could allow attackers to exploit browser weaknesses or gain unauthorized root access through a missing permission check in the entropy daemon.

mozilla-thunderbird (SSA:2026-139-03)
mozilla-firefox (SSA:2026-139-02)
haveged (SSA:2026-139-01)

Slackware 1268 Published by Philipp Esselbach 0

Slackware Linux has pushed out urgent security patches for the kernel alongside a separate update for dnsmasq, covering both the 15.0 stable release and the rolling current branch. That kernel fix tackles a specific ptrace vulnerability involving get_dumpable logic, while the dnsmasq refresh quietly resolves several distinct CVEs that could mess with DNS resolution services. Administrators need to run upgradepkg as root to install everything, though you must also regenerate initrd files on machines that actually use them. Just double check your bootloader settings before hitting restart so the system boots properly into the updated environment.

kernel (SSA:2026-135-02)
dnsmasq (SSA:2026-135-01)

Slackware 1268 Published by Philipp Esselbach 0

Slackware has released updated expat packages to address a critical security flaw in versions 15.0 and current development releases. The vulnerability stems from quadratic runtime complexity during attribute name collision checks, which attackers could exploit through moderately sized crafted XML files. Compressed XML payloads can make this denial of service threat even more efficient to execute. Administrators should download the patched binaries from official mirrors and apply them using standard upgrade procedures to secure their systems.

expat (SSA:2026-132-01)

Slackware 1268 Published by Philipp Esselbach 0

The Slackware Linux Security Team just released critical updates for Firefox, PHP, libgpg error, Thunderbird, and the main kernel across both stable and development branches. These patches address a wide array of serious flaws ranging from dangerous memory corruption bugs to browser based scripting vulnerabilities that could compromise system integrity. Administrators should apply these upgrades right away because several of the reported exploits enable unauthorized privilege escalation on affected machines. You can grab the corrected files from official FTP mirrors and install them using standard root commands before restarting any impacted services or rebooting your system.

mozilla-firefox (SSA:2026-127-02)
php (SSA:2026-127-03)
libgpg-error (SSA:2026-127-01)
kernel (SSA:2026-128-01)
mozilla-thunderbird (SSA:2026-128-02)

Slackware 1268 Published by Philipp Esselbach 0

Slackware users need to upgrade hunspell to version 1.7.3 across both the stable release and current development branches to patch critical security vulnerabilities. The updated binaries are available on official FTP servers hosted by the OSU Open Source Lab, so you can grab them directly from your preferred mirror. Make sure to download the correct build for your system architecture and verify the provided MD5 signatures before installing anything. A quick root command using upgradepkg will handle the rest and keep your spelling tools running securely.

hunspell (SSA:2026-125-01)

Slackware 1268 Published by Philipp Esselbach 0

The Slackware Linux Security Team has released updated httpd packages for both the stable 15.0 release and the current development branch to address multiple security flaws in Apache version 2.4.67. These patches fix critical vulnerabilities that could allow attackers to trigger memory disclosures, escalate privileges, or execute arbitrary code through various server modules. Administrators can download the corrected files from official mirrors, verify their integrity using the provided MD5 checksums, and install them with a simple upgradepkg command.

httpd (SSA:2026-124-01)

Slackware 1268 Published by Philipp Esselbach 0

Slackware has released urgent security patches for gnutls, the Linux kernel, and Mozilla Thunderbird across both version 15.0 and the current development branch. The gnutls update addresses a heap overflow vulnerability in DTLS fragment handling that could allow remote code execution. Kernel administrators will also want to patch a critical out-of-bounds write flaw in AEAD cipher algorithms since attackers might exploit it to gain root access through setuid programs. You can install these fixes right away with standard upgrade commands, though delaying the update temporarily requires blacklisting the vulnerable kernel module instead.

gnutls (SSA:2026-122-02)
kernel (SSA:2026-122-01)
mozilla-thunderbird (SSA:2026-122-03)

Slackware 1268 Published by Philipp Esselbach 0

The Slackware Linux Security Team just pushed out fresh Firefox builds for version 15.0 and the current branch because multiple security holes were discovered. These patches tackle four specific vulnerabilities while also smoothing out some general browser performance issues. You can grab the updated i386 or x86_64 files straight from the main FTP servers or any local mirror that carries Slackware distributions. After downloading, just switch to root and run upgradepkg on the package file to finish everything up without much hassle.

mozilla-firefox (SSA:2026-121-01)

Slackware 1268 Published by Philipp Esselbach 0

Slackware recently pushed out new proftpd packages for both the 15.0 release and the current development stream. The update targets a dangerous SQL injection flaw that could let malicious users bypass login checks, gain elevated access, or run arbitrary code on vulnerable servers

proftpd (SSA:2026-118-01)

Slackware 1268 Published by Philipp Esselbach 0

Slackware has released updated mpg123 packages to address a critical security flaw in versions 15.0 and current. The vulnerability stems from a regression introduced in release 1.32.0 that mishandles file offsets on 32-bit architectures, leading to memory corruption and unexpected crashes. This patch corrects the issue across the main player as well as companion utilities like out123 and mpg123-id3dump. Administrators can retrieve the fixed files from official FTP servers and apply them quickly using standard upgrade commands.

mpg123 (SSA:2026-117-01)

Slackware 1268 Published by Philipp Esselbach 0

The Slackware Linux Security Team recently pushed updated packages for libXpm, Mozilla Firefox, and Thunderbird to address several security vulnerabilities. These patches cover both the stable 15.0 release and the rolling development branch, fixing an out-of-bounds read in the graphics library while also resolving multiple browser flaws. System administrators can grab the corrected files from official mirrors or partner hosting sites before running standard upgrade commands on their machines. Every download comes with verified checksums and clear installation steps to keep deployments secure and straightforward.

libXpm (SSA:2026-111-01)
mozilla-thunderbird (SSA:2026-111-03)
mozilla-firefox (SSA:2026-111-02)

Slackware 1268 Published by Philipp Esselbach 0

Slackware recently pushed updated tigervnc packages for version 15.0 and the rolling release branch to patch serious security holes. Administrators will notice these builds link against a corrected xorg-server that neutralizes multiple dangerous flaws, including buffer overflows and use-after-free bugs in XKB and XSYNC modules. The official advisory references several CVE numbers so teams can verify exactly which vulnerabilities are being mitigated. You can grab the new files from any standard mirror and apply them instantly by running upgradepkg with root privileges.

tigervnc (SSA:2026-108-01)

Slackware 1268 Published by Philipp Esselbach 0

Slackware has released updated CUPS packages for versions 15.0 and current to patch several critical security flaws. The update addresses problems ranging from case sensitivity errors in user authentication to buffer overflows in the RSS notifier and weak certificate validation on local interfaces. Administrators can grab the new files directly from official FTP mirrors tailored for both i586 and x86_64 systems. Once you run the upgrade command, simply restart the printing service to ensure all protections take effect immediately.

cups (SSA:2026-107-01)