The following updates has been released for Slackware Linux:
irssi (SSA:2016-265-03)
mozilla-firefox (SSA:2016-265-02)
pidgin (SSA:2016-265-01)
irssi (SSA:2016-265-03)
mozilla-firefox (SSA:2016-265-02)
pidgin (SSA:2016-265-01)
irssi (SSA:2016-265-03)
New irssi packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1,
14.2, and -current to fix security issues.
Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/irssi-0.8.20-i586-1_slack14.2.txz: Upgraded.
This update fixes two remote crash and heap corruption vulnerabilites
in Irssi's format parsing code. Impact: Remote crash and heap
corruption. Remote code execution seems difficult since only Nuls are
written. Bugs discovered by, and patches provided by Gabriel Campana
and Adrien Guinet from Quarkslab.
For more information, see:
https://irssi.org/security/irssi_sa_2016.txt
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7044
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7045
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/irssi-0.8.20-i486-1_slack13.0.txz
Updated package for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/irssi-0.8.20-x86_64-1_slack13.0.txz
Updated package for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/irssi-0.8.20-i486-1_slack13.1.txz
Updated package for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/irssi-0.8.20-x86_64-1_slack13.1.txz
Updated package for Slackware 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/irssi-0.8.20-i486-1_slack13.37.txz
Updated package for Slackware x86_64 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/irssi-0.8.20-x86_64-1_slack13.37.txz
Updated package for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/irssi-0.8.20-i486-1_slack14.0.txz
Updated package for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/irssi-0.8.20-x86_64-1_slack14.0.txz
Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/irssi-0.8.20-i486-1_slack14.1.txz
Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/irssi-0.8.20-x86_64-1_slack14.1.txz
Updated package for Slackware 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/irssi-0.8.20-i586-1_slack14.2.txz
Updated package for Slackware x86_64 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/irssi-0.8.20-x86_64-1_slack14.2.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/irssi-0.8.20-i586-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/irssi-0.8.20-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 13.0 package:
665e81f7d91b161e64b2be17cb2325fb irssi-0.8.20-i486-1_slack13.0.txz
Slackware x86_64 13.0 package:
6376a86235a12cb99b6aa57e5d409832 irssi-0.8.20-x86_64-1_slack13.0.txz
Slackware 13.1 package:
c54dda80b48406f0bc861040ae869005 irssi-0.8.20-i486-1_slack13.1.txz
Slackware x86_64 13.1 package:
339a30b7ebb113bb9612e16d0a7c4f00 irssi-0.8.20-x86_64-1_slack13.1.txz
Slackware 13.37 package:
76f6674200c97e1a215dbd9420aad625 irssi-0.8.20-i486-1_slack13.37.txz
Slackware x86_64 13.37 package:
d95b1f8fa4a4ce91e8ddf61fbc2830fe irssi-0.8.20-x86_64-1_slack13.37.txz
Slackware 14.0 package:
58679a36ec89a171cebfb59d1523df85 irssi-0.8.20-i486-1_slack14.0.txz
Slackware x86_64 14.0 package:
6dc5929f6b40b368e6942b17367ebb1c irssi-0.8.20-x86_64-1_slack14.0.txz
Slackware 14.1 package:
58437a25c7acbe8164e330d3f2e829c0 irssi-0.8.20-i486-1_slack14.1.txz
Slackware x86_64 14.1 package:
7d4a59490d2c433602ab883f24ccc992 irssi-0.8.20-x86_64-1_slack14.1.txz
Slackware 14.2 package:
a6d28d443fcda0863f992c14e743fed0 irssi-0.8.20-i586-1_slack14.2.txz
Slackware x86_64 14.2 package:
ea9103ef46bf76bff69f4c73d6ede0e4 irssi-0.8.20-x86_64-1_slack14.2.txz
Slackware -current package:
5405a3503966826751e3467f5e13f80d n/irssi-0.8.20-i586-1.txz
Slackware x86_64 -current package:
8b2cefb065193793356a74e6ae74d849 n/irssi-0.8.20-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg irssi-0.8.20-i586-1_slack14.2.txz
mozilla-firefox (SSA:2016-265-02)
New mozilla-firefox packages are available for Slackware 14.1, 14.2,
and -current to fix security issues.
Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/mozilla-firefox-45.4.0esr-i586-1_slack14.2.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/mozilla-firefox-45.4.0esr-i486-1_slack14.1.txz
Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/mozilla-firefox-45.4.0esr-x86_64-1_slack14.1.txz
Updated package for Slackware 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/mozilla-firefox-45.4.0esr-i586-1_slack14.2.txz
Updated package for Slackware x86_64 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/mozilla-firefox-45.4.0esr-x86_64-1_slack14.2.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-firefox-49.0-i586-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-firefox-49.0-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 14.1 package:
99c78c5e8462590e3836f75fdb65c860 mozilla-firefox-45.4.0esr-i486-1_slack14.1.txz
Slackware x86_64 14.1 package:
d8fdcc39816736b8b026eb19cc3e3a07 mozilla-firefox-45.4.0esr-x86_64-1_slack14.1.txz
Slackware 14.2 package:
6b3f607642f9926d00e986e9f48b3d15 mozilla-firefox-45.4.0esr-i586-1_slack14.2.txz
Slackware x86_64 14.2 package:
9b4195693857185333bb4197760ed21d mozilla-firefox-45.4.0esr-x86_64-1_slack14.2.txz
Slackware -current package:
5c65c8ccae30eabf05f6bc9c31969f3f xap/mozilla-firefox-49.0-i586-1.txz
Slackware x86_64 -current package:
881ecf6ea2def0ef5801f76179baa68c xap/mozilla-firefox-49.0-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg mozilla-firefox-45.4.0esr-i586-1_slack14.2.txz
pidgin (SSA:2016-265-01)
New pidgin packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1,
14.2, and -current to fix security issues.
Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/pidgin-2.11.0-i586-1_slack14.2.txz: Upgraded.
This release fixes bugs and security issues.
For more information, see:
https://www.pidgin.im/news/security/
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/pidgin-2.10.11-i486-1_slack13.0.txz
Updated package for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/pidgin-2.10.11-x86_64-1_slack13.0.txz
Updated package for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/pidgin-2.10.11-i486-1_slack13.1.txz
Updated package for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/pidgin-2.10.11-x86_64-1_slack13.1.txz
Updated package for Slackware 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/pidgin-2.10.11-i486-1_slack13.37.txz
Updated package for Slackware x86_64 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/pidgin-2.10.11-x86_64-1_slack13.37.txz
Updated package for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/pidgin-2.10.11-i486-1_slack14.0.txz
Updated package for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/pidgin-2.10.11-x86_64-1_slack14.0.txz
Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/pidgin-2.10.12-i486-1_slack14.1.txz
Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/pidgin-2.10.12-x86_64-1_slack14.1.txz
Updated package for Slackware 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/pidgin-2.11.0-i586-1_slack14.2.txz
Updated package for Slackware x86_64 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/pidgin-2.11.0-x86_64-1_slack14.2.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/pidgin-2.11.0-i586-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/pidgin-2.11.0-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 13.0 package:
99cb5e3128d1fb5cf60b187ec92ff9b5 pidgin-2.10.11-i486-1_slack13.0.txz
Slackware x86_64 13.0 package:
0d319a10d164d03d8955eba1e857b44b pidgin-2.10.11-x86_64-1_slack13.0.txz
Slackware 13.1 package:
bc9f93c7d59eb27f5f9306c6ed46396e pidgin-2.10.11-i486-1_slack13.1.txz
Slackware x86_64 13.1 package:
cb3f1410fe428eb350b4dc78161fc56b pidgin-2.10.11-x86_64-1_slack13.1.txz
Slackware 13.37 package:
07ebc0d39bd2985b315460e3e1d4487a pidgin-2.10.11-i486-1_slack13.37.txz
Slackware x86_64 13.37 package:
14ce27cc75ea57075892babaa84781e3 pidgin-2.10.11-x86_64-1_slack13.37.txz
Slackware 14.0 package:
12edc9aff5ff7a4aba64c3c93c65e491 pidgin-2.10.11-i486-1_slack14.0.txz
Slackware x86_64 14.0 package:
ab14c4e819ef3fad8420fe01abcb8004 pidgin-2.10.11-x86_64-1_slack14.0.txz
Slackware 14.1 package:
cc40de08da4fa0d08bef29c8458d182e pidgin-2.10.12-i486-1_slack14.1.txz
Slackware x86_64 14.1 package:
ff639a5909360099ace362f864b3095b pidgin-2.10.12-x86_64-1_slack14.1.txz
Slackware 14.2 package:
3731c32a163e320e65ffccb926fed2b7 pidgin-2.11.0-i586-1_slack14.2.txz
Slackware x86_64 14.2 package:
e17d8b9a9234dd6523ef2e7886dd4dc5 pidgin-2.11.0-x86_64-1_slack14.2.txz
Slackware -current package:
dc665fbf19486fb29f73b20e8e984efb xap/pidgin-2.11.0-i586-1.txz
Slackware x86_64 -current package:
7e09d739b0518e6439f1433389b679a2 xap/pidgin-2.11.0-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg pidgin-2.11.0-i586-1_slack14.2.txz
