PatchTheCVEslackware vulnerabilities
Recent CVEs affecting slackware products. 4 tracked.
slackware has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-11-21. Highest priority: CVE-2013-7171 (score 68/100).
- CVE-2019-11135 MEDIUM 6.5 MITIGATE MITIGATE TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user
- CVE-2018-9336 HIGH 7.8 UPGRADE MITIGATE openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to
- CVE-2013-7172 HIGH 7.8 MITIGATE Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw progra
- CVE-2013-7171 CRITICAL 9.8 MITIGATE Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on t
FAQ
How do I fix slackware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is slackware being exploited right now?
None of the tracked slackware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which slackware CVE should I patch first?
CVE-2013-7171 currently ranks highest (68/100): Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on t.