LinuxSecurity.com

02.06.2026 12:15 New kernel packages are available for Slackware 15.0 and -current to fix security issues.

02.06.2026 12:15 An update that solves three vulnerabilities can now be installed.

02.06.2026 12:15 An update that solves 206 vulnerabilities, contains five features and has 42 fixes can now be installed.

02.06.2026 12:15 CVE-2026-27851: lib-var-expand: Safe filter marks all following pipelines safe. CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could be faked. MITM attacker with a certificate trusted by the client could have bypassed the requirement for channel binding. CVE-2026-40020: IMAP folders can be shared-spammed to everyone.

02.06.2026 12:15 Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks since these versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password. Version 0.10026 of the module fixes this issue.

02.06.2026 12:15 This is an update fixing CVE-2026-43964.

02.06.2026 12:15 Update to 3.26.4, fixes CVE-2026-8631, CVE-2026-8632

02.06.2026 12:15 Update to Samba 4.24.3 - Security fix for CVE-2026-4480, CVE-2026-2340, CVE-2026-3012, CVE-2026-1933, CVE-2026-4408, and CVE-2026-3238

02.06.2026 12:15 Update to Samba 4.24.3 - Security fix for CVE-2026-4480, CVE-2026-2340, CVE-2026-3012, CVE-2026-1933, CVE-2026-4408, and CVE-2026-3238

02.06.2026 12:15 CVE-2026-27851: lib-var-expand: Safe filter marks all following pipelines safe. CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could be faked. MITM attacker with a certificate trusted by the client could have bypassed the requirement for channel binding. CVE-2026-40020: IMAP folders can be shared-spammed to everyone.

02.06.2026 12:15 Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks since these versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password. Version 0.10026 of the module fixes this issue.

02.06.2026 12:15 Update to 1.25.1 Fix CVE-2026-33278, Possible remote code execution during DNSSEC validation. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix CVE-2026-42944, Heap overflow and crash with multiple nsid, cookie, padding EDNS options. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

02.06.2026 12:15 keep GTK4 in rawhide for now switch to GTK4 for GVim Fix CVE-2026-46483

02.06.2026 12:15 This is an update fixing CVE-2026-43964.

02.06.2026 12:15 updated to 1.6.58 1.6.58 is released with a fix for a simple correctness bug this time: png_get_PLTE returns stale palette data when either gamma correction or alpha-compositing is the only transform applied. Like the issues addressed in the previous release, this bug was a regression introduced in the