Hash: SHA1

[slackware-security] xorg-server (SSA:2010-240-06)

New xorg-server packages are available for Slackware 12.0, 12.1, 12.2, 13.0,

13.1, and -current to fix a security issue.

Here are the details from the Slackware 13.1 ChangeLog:

+--------------------------+

patches/packages/xorg-server-1.7.7-i486-2_slack13.1.txz: Rebuilt.

Patched to prevent overwriting stack memory and bypassing security mechanisms

on systems that use a 2.6 Linux kernel. Reported by Rafal Wojtczuk.

For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2240

(* Security fix *)

+--------------------------+

Where to find the new packages:

+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try. This is another primary FTP site

for Slackware that can be considerably faster than downloading

directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.

Updated packages for Slackware 12.0:

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/xorg-server-1.3.0.0-i486-3_slack12.0.tgz

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/xorg-server-xdmx-1.3.0.0-i486-3_slack12.0.tgz

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/xorg-server-xnest-1.3.0.0-i486-3_slack12.0.tgz

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/xorg-server-xvfb-1.3.0.0-i486-3_slack12.0.tgz

Updated packages for Slackware 12.1:

ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/xorg-server-1.4.2-i486-2_slack12.1.tgz

ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/xorg-server-xnest-1.4.2-i486-2_slack12.1.tgz

ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/xorg-server-xvfb-1.4.2-i486-2_slack12.1.tgz

Updated packages for Slackware 12.2:

ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/xorg-server-1.4.2-i486-2_slack12.2.tgz

ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/xorg-server-xnest-1.4.2-i486-2_slack12.2.tgz

ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/xorg-server-xvfb-1.4.2-i486-2_slack12.2.tgz

Updated packages for Slackware 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/xorg-server-1.6.3-i486-2_slack13.0.txz

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/xorg-server-xephyr-1.6.3-i486-2_slack13.0.txz

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/xorg-server-xnest-1.6.3-i486-2_slack13.0.txz

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/xorg-server-xvfb-1.6.3-i486-2_slack13.0.txz

Updated packages for Slackware x86_64 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/xorg-server-1.6.3-x86_64-2_slack13.0.txz

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/xorg-server-xephyr-1.6.3-x86_64-2_slack13.0.txz

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/xorg-server-xnest-1.6.3-x86_64-2_slack13.0.txz

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/xorg-server-xvfb-1.6.3-x86_64-2_slack13.0.txz

Updated packages for Slackware 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/xorg-server-1.7.7-i486-2_slack13.1.txz

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/xorg-server-xephyr-1.7.7-i486-2_slack13.1.txz

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/xorg-server-xnest-1.7.7-i486-2_slack13.1.txz

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/xorg-server-xvfb-1.7.7-i486-2_slack13.1.txz

Updated packages for Slackware x86_64 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/xorg-server-1.7.7-x86_64-2_slack13.1.txz

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/xorg-server-xephyr-1.7.7-x86_64-2_slack13.1.txz

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/xorg-server-xnest-1.7.7-x86_64-2_slack13.1.txz

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/xorg-server-xvfb-1.7.7-x86_64-2_slack13.1.txz

Updated packages for Slackware -current:

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-1.7.7-i486-2.txz

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xephyr-1.7.7-i486-2.txz

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xnest-1.7.7-i486-2.txz

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xvfb-1.7.7-i486-2.txz

Updated packages for Slackware x86_64 -current:

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-1.7.7-x86_64-2.txz

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xephyr-1.7.7-x86_64-2.txz

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xnest-1.7.7-x86_64-2.txz

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xvfb-1.7.7-x86_64-2.txz

MD5 signatures:

+-------------+

Slackware 12.0 packages:

948e4d6012f7c349be58318622941508 xorg-server-1.3.0.0-i486-3_slack12.0.tgz

c9d5f136423384d7a68f971992f6049f xorg-server-xdmx-1.3.0.0-i486-3_slack12.0.tgz

bb3da6748a08c142c47633e642c7137d xorg-server-xnest-1.3.0.0-i486-3_slack12.0.tgz

dfb6bdba04491ca4acb15fafd89638b2 xorg-server-xvfb-1.3.0.0-i486-3_slack12.0.tgz

Slackware 12.1 packages:

a8ab8b3976df8633257d65b3913b8883 xorg-server-1.4.2-i486-2_slack12.1.tgz

4fdf655f8fc4ffdd478a6c3981b0a6fd xorg-server-xnest-1.4.2-i486-2_slack12.1.tgz

93e4c5e23fa6efc9a5c222da5edac3ba xorg-server-xvfb-1.4.2-i486-2_slack12.1.tgz

Slackware 12.2 packages:

bcd28e761bb4adbf24dec715c49d297b xorg-server-1.4.2-i486-2_slack12.2.tgz

25723efc09e09d915ebb36e1205d70b1 xorg-server-xnest-1.4.2-i486-2_slack12.2.tgz

d1c5206344d115c19f4349faa92a02a1 xorg-server-xvfb-1.4.2-i486-2_slack12.2.tgz

Slackware 13.0 packages:

dc4780c806670dd2b1bbf849f1de135a xorg-server-1.6.3-i486-2_slack13.0.txz

3d7ecec9719e890d76f773f284dfe339 xorg-server-xephyr-1.6.3-i486-2_slack13.0.txz

67bd1e1772b5b56a3437b328a25b32d1 xorg-server-xnest-1.6.3-i486-2_slack13.0.txz

d6f8fd0392ded6db5d8a8a38a21aa0bd xorg-server-xvfb-1.6.3-i486-2_slack13.0.txz

Slackware x86_64 13.0 packages:

dcba378af605ce9215b59f1c9b695765 xorg-server-1.6.3-x86_64-2_slack13.0.txz

471d08f7e17f1b00a27801d53ca7ac0e xorg-server-xephyr-1.6.3-x86_64-2_slack13.0.txz

1ab068bc4ae868eb8474a37cae643c3f xorg-server-xnest-1.6.3-x86_64-2_slack13.0.txz

ce6fff885eaeb0bacffed8de5bff696f xorg-server-xvfb-1.6.3-x86_64-2_slack13.0.txz

Slackware 13.1 packages:

ea462ea066e90341443e135a34cc74e7 xorg-server-1.7.7-i486-2_slack13.1.txz

dd01a6d98fed4d0135aef3ba4434d713 xorg-server-xephyr-1.7.7-i486-2_slack13.1.txz

4650b8a0248c225172367c3a49c2b8ea xorg-server-xnest-1.7.7-i486-2_slack13.1.txz

b28c1a2118f9e68c44e794d85d214c4b xorg-server-xvfb-1.7.7-i486-2_slack13.1.txz

Slackware x86_64 13.1 packages:

5a94d24124740a99e4961c2511f40ae4 xorg-server-1.7.7-x86_64-2_slack13.1.txz

de80c9498875b726f46612f344223b98 xorg-server-xephyr-1.7.7-x86_64-2_slack13.1.txz

47c55a47f8c0d3fef964984cf35d7327 xorg-server-xnest-1.7.7-x86_64-2_slack13.1.txz

838b0c430f248e8f4db8ab7b2a310f90 xorg-server-xvfb-1.7.7-x86_64-2_slack13.1.txz

Slackware -current packages:

5d47df75439e8be839648d62dff8a067 x/xorg-server-1.7.7-i486-2.txz

5567692e94ab8d77e78a947aa6761dce x/xorg-server-xephyr-1.7.7-i486-2.txz

0c3112b8b3de5dfa5546c4808b0fd1ab x/xorg-server-xnest-1.7.7-i486-2.txz

c227768380dbfcf6e10e252b0ed63559 x/xorg-server-xvfb-1.7.7-i486-2.txz

Slackware x86_64 -current packages:

fd708c0e164edf215ed3c26f2ee37721 x/xorg-server-1.7.7-x86_64-2.txz

eab6cd91332a734466fd1b8f295d5842 x/xorg-server-xephyr-1.7.7-x86_64-2.txz

eac24a47e7906236c6cb4971a24f61d9 x/xorg-server-xnest-1.7.7-x86_64-2.txz

c9c3d50532fd43cabee7bfbea1cce0e1 x/xorg-server-xvfb-1.7.7-x86_64-2.txz

Installation instructions:

+------------------------+

Upgrade the packages as root:

# upgradepkg xorg-server-*z

+-----+

Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com

+------------------------------------------------------------------------+

| To leave the slackware-security mailing list: |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message: |

| |

| unsubscribe slackware-security |

| |

| You will get a confirmation message back containing instructions to |

| complete the process. Please do not reply to this email address. |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkx5PsAACgkQakRjwEAQIjNcgQCfWY8/gTTmSSqKn1zwRbe2Quy+

ND4AoI4OB9YlVbEnlHMUITn+sm3wY+44

=ldTg

-----END PGP SIGNATURE-----

Hash: SHA1

[slackware-security] pidgin (SSA:2010-240-05)

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1,

and -current to fix security issues.

Here are the details from the Slackware 13.1 ChangeLog:

+--------------------------+

patches/packages/pidgin-2.7.3-i486-1_slack13.1.txz: Upgraded.

This fixes a crash due to malformed X-Status messages.

For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2528

(* Security fix *)

+--------------------------+

Where to find the new packages:

+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try. This is another primary FTP site

for Slackware that can be considerably faster than downloading

directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.

Updated package for Slackware 12.0:

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/pidgin-2.7.3-i486-1_slack12.0.tgz

Updated package for Slackware 12.1:

ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/pidgin-2.7.3-i486-1_slack12.1.tgz

Updated package for Slackware 12.2:

ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/pidgin-2.7.3-i486-1_slack12.2.tgz

Updated package for Slackware 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/pidgin-2.7.3-i486-1_slack13.0.txz

Updated package for Slackware x86_64 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/pidgin-2.7.3-x86_64-1_slack13.0.txz

Updated package for Slackware 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/pidgin-2.7.3-i486-1_slack13.1.txz

Updated package for Slackware x86_64 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/pidgin-2.7.3-x86_64-1_slack13.1.txz

Updated package for Slackware -current:

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/pidgin-2.7.3-i486-1.txz

Updated package for Slackware x86_64 -current:

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/pidgin-2.7.3-x86_64-1.txz

MD5 signatures:

+-------------+

Slackware 12.0 package:

fb7245579aa4015f005d0044aeb7fd52 pidgin-2.7.3-i486-1_slack12.0.tgz

Slackware 12.1 package:

ba4084ade603a89b4e90e46bcd0c2b23 pidgin-2.7.3-i486-1_slack12.1.tgz

Slackware 12.2 package:

5f8e30a3bb04c445040b2b089fc6c04c pidgin-2.7.3-i486-1_slack12.2.tgz

Slackware 13.0 package:

10bf842cd6588250ee109c336ab89990 pidgin-2.7.3-i486-1_slack13.0.txz

Slackware x86_64 13.0 package:

b395ee451748d348a0eec5b92d939581 pidgin-2.7.3-x86_64-1_slack13.0.txz

Slackware 13.1 package:

16b7bdbe33fa6939b550913c1014680c pidgin-2.7.3-i486-1_slack13.1.txz

Slackware x86_64 13.1 package:

e84ee7496de30290c1c379b17ce25e32 pidgin-2.7.3-x86_64-1_slack13.1.txz

Slackware -current package:

e55e0f4e6a656e50dfa01da2da847cd7 xap/pidgin-2.7.3-i486-1.txz

Slackware x86_64 -current package:

e33c22e97f622500be3b84cde060b503 xap/pidgin-2.7.3-x86_64-1.txz

Installation instructions:

+------------------------+

Upgrade the package as root:

# upgradepkg pidgin-2.7.3-i486-1_slack13.1.txz

+-----+

Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com

+------------------------------------------------------------------------+

| To leave the slackware-security mailing list: |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message: |

| |

| unsubscribe slackware-security |

| |

| You will get a confirmation message back containing instructions to |

| complete the process. Please do not reply to this email address. |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkx5PsAACgkQakRjwEAQIjMkJwCdGXvRG78rtmiv70rOnNignVOR

blgAnjjrZ3q2/nqGWn5XkQIwwbxHqABJ

=NXfU

-----END PGP SIGNATURE-----

Hash: SHA1

[slackware-security] php (SSA:2010-240-04)

New php packages are available for Slackware 11.0 (extra), 12.0, 12.1, 12.2,

13.0, 13.1, and -current to fix security issues.

Here are the details from the Slackware 13.1 ChangeLog:

+--------------------------+

patches/packages/php-5.2.14-i486-1_slack13.1.txz: Upgraded.

Fixed several security issues.

For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1917

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2225

http://www.php-security.org/2010/05/31/mops-2010-060-php-session-serializer-session-data-injection-vulnerability/index.html

http://www.php-security.org/2010/06/25/mops-2010-061-php-splobjectstorage-deserialization-use-after-free-vulnerability/index.html

(* Security fix *)

+--------------------------+

Where to find the new packages:

+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try. This is another primary FTP site

for Slackware that can be considerably faster than downloading

directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.

Updated package for Slackware 11.0 (extra package):

ftp://ftp.slackware.com/pub/slackware/slackware-11.0/extra/php5/php-5.2.14-i486-1_slack11.0.tgz

Updated package for Slackware 12.0:

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/php-5.2.14-i486-1_slack12.0.tgz

Updated package for Slackware 12.1:

ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/php-5.2.14-i486-1_slack12.1.tgz

Updated package for Slackware 12.2:

ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/php-5.2.14-i486-1_slack12.2.tgz

Updated package for Slackware 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/php-5.2.14-i486-1_slack13.0.txz

Updated package for Slackware x86_64 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/php-5.2.14-x86_64-1_slack13.0.txz

Updated package for Slackware 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/php-5.2.14-i486-1_slack13.1.txz

Updated package for Slackware x86_64 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/php-5.2.14-x86_64-1_slack13.1.txz

Updated package for Slackware -current:

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/php-5.2.14-i486-1.txz

Updated package for Slackware x86_64 -current:

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/php-5.2.14-x86_64-1.txz

MD5 signatures:

+-------------+

Slackware 11.0 package:

2486886930228a69dcf24855fa191a33 php-5.2.14-i486-1_slack11.0.tgz

Slackware 12.0 package:

39939678a81c6540346084d5636dbeb5 php-5.2.14-i486-1_slack12.0.tgz

Slackware 12.1 package:

dcba3ce28a66dd850d1505e64b93892e php-5.2.14-i486-1_slack12.1.tgz

Slackware 12.2 package:

47c960d87d203f36821b93a315dcfc11 php-5.2.14-i486-1_slack12.2.tgz

Slackware 13.0 package:

f77e140103994b23a674145e3165dba3 php-5.2.14-i486-1_slack13.0.txz

Slackware x86_64 13.0 package:

180ce96682a29c7886e879f4f44039f5 php-5.2.14-x86_64-1_slack13.0.txz

Slackware 13.1 package:

45db44e597510b60a9317a5b42dfe858 php-5.2.14-i486-1_slack13.1.txz

Slackware x86_64 13.1 package:

a0518cf82dda7aaa683f175803039d40 php-5.2.14-x86_64-1_slack13.1.txz

Slackware -current package:

71f3b18bc9def838ac70923e9802c5cd n/php-5.2.14-i486-1.txz

Slackware x86_64 -current package:

ed7e1aae19b996734865738857a1d24a n/php-5.2.14-x86_64-1.txz

Installation instructions:

+------------------------+

Upgrade the package as root:

# upgradepkg php-5.2.14-i486-1_slack13.1.txz

Then, restart Apache httpd:

# /etc/rc.d/rc.httpd stop

# /etc/rc.d/rc.httpd start

+-----+

Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com

+------------------------------------------------------------------------+

| To leave the slackware-security mailing list: |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message: |

| |

| unsubscribe slackware-security |

| |

| You will get a confirmation message back containing instructions to |

| complete the process. Please do not reply to this email address. |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkx5PsAACgkQakRjwEAQIjOrFwCdHxzS7BRCuyZnq6wNripcTwvZ

C9UAn0xLlqrLRXFVkyocSDHSJZOXkbku

=iSJV

-----END PGP SIGNATURE-----

Hash: SHA1

[slackware-security] kdegraphics (SSA:2010-240-03)

New kdegraphics packages are available for Slackware 13.1 to

fix a security issue in the okular document viewer.

Here are the details from the Slackware 13.1 ChangeLog:

+--------------------------+

patches/packages/kdegraphics-4.4.3-i486-3_slack13.1.txz: Rebuilt.

Patched "Okular PDB Processing Memory Corruption Vulnerability"

For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2575

http://www.kde.org/info/security/advisory-20100825-1.txt

(* Security fix *)

+--------------------------+

Where to find the new packages:

+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try. This is another primary FTP site

for Slackware that can be considerably faster than downloading

directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.

Updated package for Slackware 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/kdegraphics-4.4.3-i486-3_slack13.1.txz

Updated package for Slackware x86_64 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/kdegraphics-4.4.3-x86_64-3_slack13.1.txz

MD5 signatures:

+-------------+

Slackware 13.1 package:

21c7fd40063530df60cb99445086feea kdegraphics-4.4.3-i486-3_slack13.1.txz

Slackware x86_64 13.1 package:

d340d60ece11e615dbadac8834a0935a kdegraphics-4.4.3-x86_64-3_slack13.1.txz

Installation instructions:

+------------------------+

Upgrade the package as root:

# upgradepkg kdegraphics-4.4.3-i486-3_slack13.1.txz

+-----+

Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com

+------------------------------------------------------------------------+

| To leave the slackware-security mailing list: |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message: |

| |

| unsubscribe slackware-security |

| |

| You will get a confirmation message back containing instructions to |

| complete the process. Please do not reply to this email address. |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkx5PsAACgkQakRjwEAQIjP2ugCbBhu/MHIuV9H+qWikX//R1kuI

XIAAnRldrYM90yxyplhyyRwFOmC6r/bO

=L8aJ

-----END PGP SIGNATURE-----

Hash: SHA1

[slackware-security] httpd (SSA:2010-240-02)

New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1,

and -current to fix a security issue.

Here are the details from the Slackware 13.1 ChangeLog:

+--------------------------+

patches/packages/httpd-2.2.16-i486-1_slack13.1.txz: Upgraded.

Fix Handling of requests without a path segment.

For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452

(* Security fix *)

+--------------------------+

Where to find the new packages:

+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try. This is another primary FTP site

for Slackware that can be considerably faster than downloading

directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.

Updated package for Slackware 12.0:

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/httpd-2.2.16-i486-1_slack12.0.tgz

Updated package for Slackware 12.1:

ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/httpd-2.2.16-i486-1_slack12.1.tgz

Updated package for Slackware 12.2:

ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/httpd-2.2.16-i486-1_slack12.2.tgz

Updated package for Slackware 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/httpd-2.2.16-i486-1_slack13.0.txz

Updated package for Slackware x86_64 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/httpd-2.2.16-x86_64-1_slack13.0.txz

Updated package for Slackware 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/httpd-2.2.16-i486-1_slack13.1.txz

Updated package for Slackware x86_64 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/httpd-2.2.16-x86_64-1_slack13.1.txz

Updated package for Slackware -current:

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/httpd-2.2.16-i486-1.txz

Updated package for Slackware x86_64 -current:

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/httpd-2.2.16-x86_64-1.txz

MD5 signatures:

+-------------+

Slackware 12.0 package:

dced048e8d6016fe7c1c906198e49756 httpd-2.2.16-i486-1_slack12.0.tgz

Slackware 12.1 package:

0d27c0980ffed539bffe7255c8f20994 httpd-2.2.16-i486-1_slack12.1.tgz

Slackware 12.2 package:

e5eb1a2520c1e4e55f27429fa7f09c27 httpd-2.2.16-i486-1_slack12.2.tgz

Slackware 13.0 package:

c1e292a28e7bccf6db12b7215b7c73da httpd-2.2.16-i486-1_slack13.0.txz

Slackware x86_64 13.0 package:

a6639d43ff7143c55be2dcca66487afe httpd-2.2.16-x86_64-1_slack13.0.txz

Slackware 13.1 package:

9794f02c68318c1be429d533267854fd httpd-2.2.16-i486-1_slack13.1.txz

Slackware x86_64 13.1 package:

1ee92abd81274dec6f39b12d29531b62 httpd-2.2.16-x86_64-1_slack13.1.txz

Slackware -current package:

531139abd2c4f00243474a6b269c4d39 n/httpd-2.2.16-i486-1.txz

Slackware x86_64 -current package:

0b9dec426e71b8f64c32acf7317dfd0d n/httpd-2.2.16-x86_64-1.txz

Installation instructions:

+------------------------+

Upgrade the package as root:

# upgradepkg httpd-2.2.16-i486-1_slack13.1.txz

Then, restart Apache httpd:

# /etc/rc.d/rc.httpd stop

# /etc/rc.d/rc.httpd start

+-----+

Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com

+------------------------------------------------------------------------+

| To leave the slackware-security mailing list: |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message: |

| |

| unsubscribe slackware-security |

| |

| You will get a confirmation message back containing instructions to |

| complete the process. Please do not reply to this email address. |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkx5PsAACgkQakRjwEAQIjORJgCgk9Jh11t7rrKdORb5O4L22Zqt

rqwAnAqIqtvhqcSG5g9/Z6c0nM7258a4

=oL6v

-----END PGP SIGNATURE-----

Hash: SHA1

[slackware-security] gnupg2 (SSA:2010-240-01)

New gnupg2 packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1,

and -current to fix a security issue.

Here are the details from the Slackware 13.1 ChangeLog:

+--------------------------+

patches/packages/gnupg2-2.0.14-i486-3_slack13.1.txz: Rebuilt.

Patched to fix "Realloc Bug with X.509 certificates in GnuPG".

For more information, see:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2547

(* Security fix *)

+--------------------------+

Where to find the new packages:

+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try. This is another primary FTP site

for Slackware that can be considerably faster than downloading

directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.

Updated package for Slackware 12.0:

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/gnupg2-2.0.4-i486-2_slack12.0.tgz

Updated package for Slackware 12.1:

ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/gnupg2-2.0.9-i486-2_slack12.1.tgz

Updated package for Slackware 12.2:

ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/gnupg2-2.0.9-i486-2_slack12.2.tgz

Updated package for Slackware 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/gnupg2-2.0.12-i486-2_slack13.0.txz

Updated package for Slackware x86_64 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/gnupg2-2.0.12-x86_64-2_slack13.0.txz

Updated package for Slackware 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/gnupg2-2.0.14-i486-3_slack13.1.txz

Updated package for Slackware x86_64 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/gnupg2-2.0.14-x86_64-3_slack13.1.txz

Updated package for Slackware -current:

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/gnupg2-2.0.16-i486-1.txz

Updated package for Slackware x86_64 -current:

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/gnupg2-2.0.16-x86_64-1.txz

MD5 signatures:

+-------------+

Slackware 12.0 package:

d4fd5033a8d84ca1b24f5ec8d2b5dcec gnupg2-2.0.4-i486-2_slack12.0.tgz

Slackware 12.1 package:

f06f083946e1567a558d339982e9982e gnupg2-2.0.9-i486-2_slack12.1.tgz

Slackware 12.2 package:

b1cdbd61297affafe01ea4740e900ef9 gnupg2-2.0.9-i486-2_slack12.2.tgz

Slackware 13.0 package:

513900baef7865900d0bb026d252e112 gnupg2-2.0.12-i486-2_slack13.0.txz

Slackware x86_64 13.0 package:

8f1a8ff8e567940794060f9d5e34ed9b gnupg2-2.0.12-x86_64-2_slack13.0.txz

Slackware 13.1 package:

4b1241472b91e1d2b9704852ba3a1d5f gnupg2-2.0.14-i486-3_slack13.1.txz

Slackware x86_64 13.1 package:

7a7d35d3aec7d5ba0169c92f7f47c9f6 gnupg2-2.0.14-x86_64-3_slack13.1.txz

Slackware -current package:

eb31dd8fea4da735f188990e67231839 n/gnupg2-2.0.16-i486-1.txz

Slackware x86_64 -current package:

764c74e54177d6f6bd39bd5b5ecf6a98 n/gnupg2-2.0.16-x86_64-1.txz

Installation instructions:

+------------------------+

Upgrade the package as root:

# upgradepkg gnupg2-2.0.14-i486-3_slack13.1.txz

+-----+

Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com

+------------------------------------------------------------------------+

| To leave the slackware-security mailing list: |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message: |

| |

| unsubscribe slackware-security |

| |

| You will get a confirmation message back containing instructions to |

| complete the process. Please do not reply to this email address. |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkx5PsAACgkQakRjwEAQIjMexQCggohBy0GjjlptLOkf09NzMO/F

6IQAmwZc/FHbS+4/7eWaUytIoWZQ4wm2

=DduU

-----END PGP SIGNATURE-----

Hash: SHA1

[slackware-security] mozilla-firefox (SSA:2010-204-01)

New mozilla-firefox packages are available for Slackware 13.0, 13.1,

and -current to fix a regression.

Here are the details from the Slackware 13.1 ChangeLog:

+--------------------------+

patches/packages/mozilla-firefox-3.6.8-i686-1.txz: Upgraded.

This fixes a regression in Firefox 3.6.7.

For more information, see:

http://www.mozilla.org/security/known-vulnerabilities/firefox36.html

(* Security fix *)

+--------------------------+

Where to find the new packages:

+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try. This is another primary FTP site

for Slackware that can be considerably faster than downloading

directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.

Updated package for Slackware 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/mozilla-firefox-3.6.8-i686-1.txz

Updated package for Slackware x86_64 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/mozilla-firefox-3.6.8-x86_64-1_slack13.0.txz

Updated package for Slackware 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/mozilla-firefox-3.6.8-i686-1.txz

Updated package for Slackware x86_64 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/mozilla-firefox-3.6.8-x86_64-1_slack13.1.txz

Updated package for Slackware -current:

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-firefox-3.6.8-i686-1.txz

Updated package for Slackware x86_64 -current:

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-firefox-3.6.8-x86_64-1.txz

MD5 signatures:

+-------------+

Slackware 12.2 package:

44a3d85cb39de9b698fc266ea54ce1fa mozilla-firefox-3.0.19-i686-1.tgz

Slackware 13.0 package:

4a00d33baba7adb6a8f0ad4d12d02c86 mozilla-firefox-3.6.8-i686-1.txz

Slackware x86_64 13.0 package:

6352a44f086d17b296bda093df7fcb6a mozilla-firefox-3.6.8-x86_64-1_slack13.0.txz

Slackware 13.1 package:

4a00d33baba7adb6a8f0ad4d12d02c86 mozilla-firefox-3.6.8-i686-1.txz

Slackware x86_64 13.1 package:

b7ca8139147a6b88ea1b6978dc36221d mozilla-firefox-3.6.8-x86_64-1_slack13.1.txz

Slackware -current package:

4a00d33baba7adb6a8f0ad4d12d02c86 xap/mozilla-firefox-3.6.8-i686-1.txz

Slackware x86_64 -current package:

a564c8307d2e4f276839beadd0a6d730 xap/mozilla-firefox-3.6.8-x86_64-1.txz

Installation instructions:

+------------------------+

Upgrade the package as root:

# upgradepkg mozilla-firefox-3.6.8-i686-1.txz

+-----+

Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com

+------------------------------------------------------------------------+

| To leave the slackware-security mailing list: |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message: |

| |

| unsubscribe slackware-security |

| |

| You will get a confirmation message back containing instructions to |

| complete the process. Please do not reply to this email address. |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkxKX9EACgkQakRjwEAQIjM/VwCeOLqb5jcNi5SvYzE188OXnDQq

qHcAnj1FxHrsrDEGMAjkFJmtBJt81289

=K1Uc

-----END PGP SIGNATURE-----

Hash: SHA1

[slackware-security] seamonkey (SSA:2010-202-03)

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1,

and -current to fix security issues.

Here are the details from the Slackware 13.1 ChangeLog:

+--------------------------+

patches/packages/seamonkey-2.0.6-i486-1_slack13.1.txz: Upgraded.

This release fixes some more security vulnerabilities.

For more information, see:

http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html

(* Security fix *)

+--------------------------+

Where to find the new packages:

+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try. This is another primary FTP site

for Slackware that can be considerably faster than downloading

directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.

Updated package for Slackware 12.2:

ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/seamonkey-solibs-2.0.6-i486-1_slack12.2.tgz

ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/seamonkey-2.0.6-i486-1_slack12.2.tgz

Updated package for Slackware 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/seamonkey-2.0.6-i486-1_slack13.0.txz seamonkey-solibs-2.0.6-i486-1_slack13.0.txz

Updated package for Slackware x86_64 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/seamonkey-2.0.6-x86_64-1_slack13.0.txz seamonkey-solibs-2.0.6-x86_64-1_slack13.0.txz

Updated package for Slackware 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/seamonkey-2.0.6-i486-1_slack13.1.txz seamonkey-solibs-2.0.6-i486-1_slack13.1.txz

Updated package for Slackware x86_64 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/seamonkey-2.0.6-x86_64-1_slack13.1.txz seamonkey-solibs-2.0.6-x86_64-1_slack13.1.txz

Updated package for Slackware -current:

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/seamonkey-solibs-2.0.6-i486-1.txz

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/seamonkey-2.0.6-i486-1.txz

Updated package for Slackware x86_64 -current:

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/seamonkey-solibs-2.0.6-x86_64-1.txz

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/seamonkey-2.0.6-x86_64-1.txz

MD5 signatures:

+-------------+

Slackware 12.2 package:

4c55bb853a8686ccb10b4039bbe7ad63 seamonkey-2.0.6-i486-1_slack12.2.tgz

efea54f758932f3decdefdda2b1daa23 seamonkey-solibs-2.0.6-i486-1_slack12.2.tgz

Slackware 13.0 package:

2e8e454452d94020ba56bce95335e809 seamonkey-2.0.6-i486-1_slack13.0.txz

fbab2e8d8b454f8b7ea2afb6e99706c3 seamonkey-solibs-2.0.6-i486-1_slack13.0.txz

Slackware x86_64 13.0 package:

acc1ab6da9b63a473f18f1161d83f76f seamonkey-2.0.6-x86_64-1_slack13.0.txz

312de679b48bfec84635b5bab7fa57ab seamonkey-solibs-2.0.6-x86_64-1_slack13.0.txz

Slackware 13.1 package:

a3a18ccdfaff4cc1d89c2ddf83d66078 seamonkey-2.0.6-i486-1_slack13.1.txz

6383393026c73fbfcb4b25fabd40b200 seamonkey-solibs-2.0.6-i486-1_slack13.1.txz

Slackware x86_64 13.1 package:

861ad1b4317aedbdcab2969a3a290a8b seamonkey-2.0.6-x86_64-1_slack13.1.txz

1de96a60146252ef53118f6178ebd995 seamonkey-solibs-2.0.6-x86_64-1_slack13.1.txz

Slackware -current package:

5be899b1f8aa124ccf31b8e0eb7b07a8 l/seamonkey-solibs-2.0.6-i486-1.txz

ea9f96856e357a690729d9e9d1f657e8 xap/seamonkey-2.0.6-i486-1.txz

Slackware x86_64 -current package:

1b4fb337150387124e350c8d4f0cabd7 l/seamonkey-solibs-2.0.6-x86_64-1.txz

04f921b7c18893de63bd59b16f98c001 xap/seamonkey-2.0.6-x86_64-1.txz

Installation instructions:

+------------------------+

Upgrade the packages as root:

# upgradepkg seamonkey-2.0.6-i486-1_slack13.1.txz seamonkey-solibs-2.0.6-i486-1_slack13.1.txz

+-----+

Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com

+------------------------------------------------------------------------+

| To leave the slackware-security mailing list: |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message: |

| |

| unsubscribe slackware-security |

| |

| You will get a confirmation message back containing instructions to |

| complete the process. Please do not reply to this email address. |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkxHf7wACgkQakRjwEAQIjOvNACfdsBq7iN2t5Or3+kMBsHymJij

umIAnA9LqxIV+mEmcpxwnx5gOb6yxzti

=2AlV

-----END PGP SIGNATURE-----

Hash: SHA1

[slackware-security] mozilla-thunderbird (SSA:2010-202-02)

New mozilla-thunderbird packages are available for Slackware 13.1

and -current to fix security issues.

Here are the details from the Slackware 13.1 ChangeLog:

+--------------------------+

patches/packages/mozilla-thunderbird-3.0.6-i686-1.txz: Upgraded.

This upgrade fixes some more security bugs.

For more information, see:

http://www.mozilla.org/security/known-vulnerabilities/thunderbird30.html

(* Security fix *)

+--------------------------+

Where to find the new packages:

+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try. This is another primary FTP site

for Slackware that can be considerably faster than downloading

directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.

Updated package for Slackware 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/mozilla-thunderbird-3.0.6-i686-1.txz

Updated package for Slackware x86_64 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/mozilla-thunderbird-3.0.6-x86_64-1.txz

Updated package for Slackware -current:

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-thunderbird-3.1.1-i686-1.txz

Updated package for Slackware x86_64 -current:

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-thunderbird-3.1.1-x86_64-1.txz

MD5 signatures:

+-------------+

Slackware 13.1 package:

e589b7c96b219b47ec014083ae434299 mozilla-thunderbird-3.0.6-i686-1.txz

Slackware x86_64 13.1 package:

ca6ce46af239cd95a066298f03138a75 mozilla-thunderbird-3.0.6-x86_64-1.txz

Slackware -current package:

a3a835332a544f626c998c9bbfac0b65 xap/mozilla-thunderbird-3.1.1-i686-1.txz

Slackware x86_64 -current package:

6c7c9e216d8e2d89a6e51999ef308ecf xap/mozilla-thunderbird-3.1.1-x86_64-1.txz

Installation instructions:

+------------------------+

Upgrade the package as root:

# upgradepkg mozilla-thunderbird-3.0.6-i686-1.txz

+-----+

Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com

+------------------------------------------------------------------------+

| To leave the slackware-security mailing list: |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message: |

| |

| unsubscribe slackware-security |

| |

| You will get a confirmation message back containing instructions to |

| complete the process. Please do not reply to this email address. |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkxHf7kACgkQakRjwEAQIjPCHACfQ1u2/L14HXGhmUhHkVTIOcAs

Xa0AoIFHMvY6FtqDEnAhkXZmtvNvyZ3H

=yg3A

-----END PGP SIGNATURE-----

Hash: SHA1

[slackware-security] mozilla-firefox (SSA:2010-202-01)

New mozilla-firefox packages are available for Slackware 12.2,

13.0, 13.1, and -current to fix security issues.

Here are the details from the Slackware 13.1 ChangeLog:

+--------------------------+

patches/packages/mozilla-firefox-3.6.7-i686-1.txz: Upgraded.

This fixes some security issues.

For more information, see:

http://www.mozilla.org/security/known-vulnerabilities/firefox36.html

(* Security fix *)

+--------------------------+

Where to find the new packages:

+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?

Give slackware.osuosl.org a try. This is another primary FTP site

for Slackware that can be considerably faster than downloading

directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab

(http://osuosl.org) for donating additional FTP and rsync hosting

to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for

additional mirror sites near you.

Updated package for Slackware 12.2:

ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/mozilla-firefox-3.0.19-i686-1.tgz

Updated package for Slackware 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/mozilla-firefox-3.6.7-i686-1.txz

Updated package for Slackware x86_64 13.0:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/mozilla-firefox-3.6.7-x86_64-1_slack13.0.txz

Updated package for Slackware 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/mozilla-firefox-3.6.7-i686-1.txz

Updated package for Slackware x86_64 13.1:

ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/mozilla-firefox-3.6.7-x86_64-1_slack13.1.txz

Updated package for Slackware -current:

ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-firefox-3.6.7-i686-1.txz

Updated package for Slackware x86_64 -current:

ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-firefox-3.6.7-x86_64-1.txz

MD5 signatures:

+-------------+

Slackware 12.2 package:

44a3d85cb39de9b698fc266ea54ce1fa mozilla-firefox-3.0.19-i686-1.tgz

Slackware 13.0 package:

27251b1c809031585d3619af9206d109 mozilla-firefox-3.6.7-i686-1.txz

Slackware x86_64 13.0 package:

bf7ea6920981a4f378f750db463ad4b6 mozilla-firefox-3.6.7-x86_64-1_slack13.0.txz

Slackware 13.1 package:

27251b1c809031585d3619af9206d109 mozilla-firefox-3.6.7-i686-1.txz

Slackware x86_64 13.1 package:

eab7c07941ee876df8aca72d1254c10d mozilla-firefox-3.6.7-x86_64-1_slack13.1.txz

Slackware -current package:

27251b1c809031585d3619af9206d109 xap/mozilla-firefox-3.6.7-i686-1.txz

Slackware x86_64 -current package:

eef82fb1cd79faeeb209b1f1cc3fe04a xap/mozilla-firefox-3.6.7-x86_64-1.txz

Installation instructions:

+------------------------+

Upgrade the package as root:

# upgradepkg mozilla-firefox-3.6.7-i686-1.txz

+-----+

Slackware Linux Security Team

http://slackware.com/gpg-key

security@slackware.com

+------------------------------------------------------------------------+

| To leave the slackware-security mailing list: |

+------------------------------------------------------------------------+

| Send an email to majordomo@slackware.com with this text in the body of |

| the email message: |

| |

| unsubscribe slackware-security |

| |

| You will get a confirmation message back containing instructions to |

| complete the process. Please do not reply to this email address. |

+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkxHf7YACgkQakRjwEAQIjNrTQCfbFWBjMXdmZOVhenRBNY1fprf

T5EAoI02tc2YGYW6EbPyU/Umh8AONCW9

=z2FA

-----END PGP SIGNATURE-----