Debian 10.5: 2020-156-03 High: Apache Session Hijacking Vulnerability

Here are the details from the Slackware 9.0 ChangeLog: Fri Aug 1 15:15:51 PDT 2003 patches/packages/kde/*: Upgraded to KDE 3.1.3. Note that this update addresses a security problem in Konqueror which may cause authentication credentials to be leaked to an unintended website through the HTTP-referer header when they have been entered into Konqueror as a URL of the form: password@host/'> :password@host/ For more information about this issue, please see the KDE advisory: https://kde.org/info/security/advisory-20030729-1.txt We recommend that sites running KDE install this update. (* Security fix *) patches/packages/kdei/*: New internationalization packages for KDE 3.1.3. WHERE TO FIND THE NEW PACKAGES: Updated packages for Slackware 9.0: These packages are signed with our GPG key: slackware INSTALLATION INSTRUCTIONS: Upgrade using upgradepkg (as root): upgradepkg *.tgz Slackware Linux Security Team slackware security@slackware.com