Linux Compatible - Slackware (Page 14)

Slackware 12.2

Slackware 1231 Published 2008-12-11 11:56 by Philipp Esselbach 0

Slackware 12.2 has been released. Here the release announcement:

php (SSA:2008-339-01)

Slackware 1231 Published 2008-12-05 10:59 by Philipp Esselbach 0

New php packages are available for Slackware 12.0, 12.1, and -current to fix security issues, as well as make improvements and fix bugs.

samba (SSA:2008-333-01)

Slackware 1231 Published 2008-11-29 16:51 by Philipp Esselbach 0

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix a possible security vulnerability involving the reading of uninitialized memory.

More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314

seamonkey (SSA:2008-320-04)

Slackware 1231 Published 2008-11-16 13:08 by Philipp Esselbach 0

New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues.

More details may be found on the Mozilla web site:

http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html

mozilla-firefox (SSA:2008-320-03)

Slackware 1231 Published 2008-11-16 13:07 by Philipp Esselbach 0

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, 12.1, and -current to fix security issues.

gnutls (SSA:2008-320-01)

Slackware 1231 Published 2008-11-16 13:07 by Philipp Esselbach 0

New gnutls packages are available for Slackware 12.0, 12.1, and -current to correctly fix the certificate chain verification issue that the upgrade to gnutls-2.6.1 attempted to fix. Without this upgrade, processing a certificate chain containing only one self-signed certificate may cause GnuTLS linked programs to crash.

net-snmp

Slackware 1231 Published 2008-11-16 13:05 by Philipp Esselbach 0

New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix a denial of service issue.

php (SSA:2008-247-01)

Slackware 1231 Published 2008-09-04 11:19 by Philipp Esselbach 0

New php packages are available for Slackware 10.2 and 11.0 to fix security issues. These releases are the last to contain PHP 4.4.x, which was upgraded to version 4.4.9 to fix PCRE issues and other bugs.

Please note that this is the FINAL release of PHP4, and it has already passed the announced end-of-life. Sites should seriously consider migrating to PHP5 rather than upgrading to php-4.4.9.

pan (SSA:2008-217-02)

Slackware 1231 Published 2008-08-05 10:07 by Philipp Esselbach 0

New pan packages are available for Slackware 12.0, 12.1, and -current to fix a security issue.

More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2363

python (SSA:2008-217-01)

Slackware 1231 Published 2008-08-05 10:06 by Philipp Esselbach 0

New python packages are available for Slackware 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues.

More details about the issues may be found in the Common Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1679
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1721
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2315
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2316
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3142
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3144

dnsmasq (SSA:2008-205-01)

Slackware 1231 Published 2008-07-24 10:03 by Philipp Esselbach 0

New dnsmasq packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to address possible DNS cache poisoning issues.

More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447

seamonkey (SSA:2008-191-03)

Slackware 1231 Published 2008-07-10 10:07 by Philipp Esselbach 0

New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues.

More details about the issues may be found here:

http://www.mozilla.org/projects/security/known-vulnerabilities.html#seamonkey

bind (SSA:2008-191-02)

Slackware 1231 Published 2008-07-10 10:06 by Philipp Esselbach 0

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to address a security problem.

More details may be found at the following links:

http://www.isc.org/sw/bind/bind-security.php
http://www.kb.cert.org/vuls/id/800113
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447

mozilla-firefox (SSA:2008-191-01)

Slackware 1231 Published 2008-07-10 10:06 by Philipp Esselbach 0

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, and 12.1 to fix security issues.

More details about the issues may be found on the Mozilla site:

http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox

gnutls (SSA:2008-180-01)

Slackware 1231 Published 2008-06-29 09:24 by Philipp Esselbach 0

New gnutls packages are available for Slackware 12.0, 12.1, and -current to fix security issues.

More details about the issues may be found in the Common Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1950

ruby (SSA:2008-179-01)

Slackware 1231 Published 2008-06-28 12:31 by Philipp Esselbach 0

New ruby packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues.

More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2662
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2663
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2664
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2725
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2726

samba (SSA:2008-149-01)

Slackware 1231 Published 2008-05-29 10:31 by Philipp Esselbach 0

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix a security issue:

"Specifically crafted SMB responses can result in a heap overflow in the Samba client code. Because the server process, smbd, can itself act as a client during operations such as printer notification and domain authentication, this issue affects both Samba client and server installations."

This flaw affects Samba versions from 3.0.0 through 3.0.29.

More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1105

libpng (SSA:2008-119-01)

Slackware 1231 Published 2008-04-29 11:58 by Philipp Esselbach 0

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix a security issue.

More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1382

Additional information can be found in the libpng source, or in this file on the libpng FTP site:

ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng-1.2.27-README.txt

xine-lib (SSA:2008-111-01)

Slackware 1231 Published 2008-04-22 11:25 by Philipp Esselbach 0

New xine-lib packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues.

An overflow was found in the Speex decoder that could lead to a crash or
possible execution of arbitrary code. Xine-lib <= 1.1.12 was also found to be vulnerable to a stack-based buffer overflow in the NES demuxer (thanks to milw0rm.com).

More details about the first issue may be found in the Common Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1686

mozilla-firefox (SSA:2008-108-01)

Slackware 1231 Published 2008-04-18 09:54 by Philipp Esselbach 0

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix a possible security bug.

More details about this issue may be found here:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1380
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox
https://bugzilla.mozilla.org/show_bug.cgi?id=425576