blender-3.0.1-x86_64-1_ap.txz: Upgraded.
l/gtk4-4.20.3-x86_64-1.txz: Upgraded.
l/pycairo-1.29.0-x86_64-1.txz: Upgraded.
l/python-lxml-6.0.2-x86_64-1.txz: Upgraded.
l/python-setuptools-gettext-0.1.16-x86_64-1.txz: Upgraded.
l/qt6-6.10.1_20251116_56657e03-x86_64-1.txz: Upgraded.
n/gnutls-3.8.11-x86_64-1.txz: Upgraded.
This update fixes a security issue:
libgnutls: Fix stack overwrite in gnutls_pkcs11_token_init.
Reported by Luigino Camastra from Aisle Research.
Upstream says this is low severity because the PKCS#11 standard defines a
size limit of 32 characters, and therefore it's the application's fault if
it doesn't check that and reject a longer label. I'm not buying that.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2025-9820
(* Security fix *)
l/mozilla-nss-3.118.1-x86_64-1.txz: Upgraded.
l/pygobject3-3.55.0-x86_64-1.txz: Upgraded.
n/bind-9.20.16-x86_64-1.txz: Upgraded.
n/php-8.4.15-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.4.15
x/xf86-input-wacom-1.2.4-x86_64-1.txz: Upgraded.
a/elogind-255.22-x86_64-1.txz: Upgraded.
d/cmake-4.1.3-x86_64-1.txz: Upgraded.
d/llvm-21.1.6-x86_64-1.txz: Upgraded.
l/glib2-2.86.2-x86_64-1.txz: Upgraded.
l/libarchive-3.8.3-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements:
lib: Create temporary files in the target directory (#2753)
lha: Fix for an out-of-bounds buffer overrun when using p[H_LEVEL_OFFSET] (#2768)
7-zip: Fix a buffer overrun when reading truncated 7zip headers (#2769)
(* Security fix *)
n/openvpn-2.6.16-x86_64-1.txz: Upgraded.
This update fixes a security issue:
Fix memcmp check for the hmac verification in the 3way handshake.
This bug renders the HMAC based protection against state exhaustion on
receiving spoofed TLS handshake packets in the OpenVPN server inefficient.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13086
(* Security fix *)
l/gtk4-4.20.3-aarch64-1.txz: Upgraded.
l/mozilla-nss-3.118.1-aarch64-1.txz: Upgraded.
l/pycairo-1.29.0-aarch64-1.txz: Upgraded.
l/pygobject3-3.55.0-aarch64-1.txz: Upgraded.
l/python-lxml-6.0.2-aarch64-1.txz: Upgraded.
l/python-setuptools-gettext-0.1.16-aarch64-1.txz: Upgraded.
l/qt6-6.10.1_20251116_56657e03-aarch64-1.txz: Upgraded.
n/bind-9.20.16-aarch64-1.txz: Upgraded.
n/gnutls-3.8.11-aarch64-1.txz: Upgraded.
This update fixes a security issue:
libgnutls: Fix stack overwrite in gnutls_pkcs11_token_init.
Reported by Luigino Camastra from Aisle Research.
Upstream says this is low severity because the PKCS#11 standard defines a
size limit of 32 characters, and therefore it's the application's fault if
it doesn't check that and reject a longer label. I'm not buying that.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2025-9820
(* Security fix *)
n/php-8.4.15-aarch64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.4.15
x/xf86-input-wacom-1.2.4-aarch64-1.txz: Upgraded.
a/elogind-255.22-aarch64-1.txz: Upgraded.
d/cmake-4.1.3-aarch64-1.txz: Upgraded.
d/llvm-21.1.6-aarch64-1.txz: Upgraded.
l/glib2-2.86.2-aarch64-1.txz: Upgraded.
l/libarchive-3.8.3-aarch64-1.txz: Upgraded.
This update contains security fixes and improvements:
lib: Create temporary files in the target directory (#2753)
lha: Fix for an out-of-bounds buffer overrun when using p[H_LEVEL_OFFSET] (#2768)
7-zip: Fix a buffer overrun when reading truncated 7zip headers (#2769)
(* Security fix *)
n/openvpn-2.6.16-aarch64-1.txz: Upgraded.
This update fixes a security issue:
Fix memcmp check for the hmac verification in the 3way handshake.
This bug renders the HMAC based protection against state exhaustion on
receiving spoofed TLS handshake packets in the OpenVPN server inefficient.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13086
(* Security fix *)
ap/hplip-3.25.8-aarch64-1.txz: Upgraded.
d/distcc-3.4-aarch64-9.txz: Rebuilt.
Remove the gcc-$VERSION symlink. Nothing uses it and it ties the package
to a specific version of gcc. Thanks to Brent Earl.
d/git-2.52.0-aarch64-1.txz: Upgraded.
d/scons-4.10.1-aarch64-1.txz: Upgraded.
l/libqalculate-5.8.2-aarch64-1.txz: Upgraded.
n/NetworkManager-1.54.2-aarch64-1.txz: Upgraded.
x/freeglut-3.8.0-aarch64-1.txz: Upgraded.
x/libdrm-2.4.129-aarch64-1.txz: Upgraded.
xap/qalculate-gtk-5.8.2-aarch64-1.txz: Upgraded.
xap/qalculate-qt-5.8.2-aarch64-1.txz: Upgraded.
patches/packages/openvpn-2.5.5-x86_64-2_slack15.0.txz: Rebuilt.
Revert openvpn to the previous version.
It turns out that the first version vulnerable to CVE-2025-13086 was
openvpn-2.6.0, and there is a report that openvpn-2.6.16 breaks using OVPN
with NetworkManager. Let's go back to the openvpn-2.5.5 that we were using
before, but rebuild it and bump the build number in /patches so that it's
automatically picked up by slackpkg.
Thanks to yawfle.
patches/packages/gnutls-3.8.11-x86_64-1_slack15.0.txz: Upgraded.
This update fixes a security issue:
libgnutls: Fix stack overwrite in gnutls_pkcs11_token_init.
Reported by Luigino Camastra from Aisle Research.
Upstream says this is low severity because the PKCS#11 standard defines a
size limit of 32 characters, and therefore it's the application's fault if
it doesn't check that and reject a longer label. I'm not buying that.
NOTE: Be sure to also install the nettle upgrade.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2025-9820
(* Security fix *)
patches/packages/nettle-3.10.2-x86_64-1_slack15.0.txz: Upgraded.
This update is required by gnutls-3.8.11.
extra/llvm-21.1.6-x86_64-1_slack15.0.txz: Upgraded.
patches/packages/openvpn-2.6.16-x86_64-1_slack15.0.txz: Upgraded.
This update fixes a security issue:
Fix memcmp check for the hmac verification in the 3way handshake.
This bug renders the HMAC based protection against state exhaustion on
receiving spoofed TLS handshake packets in the OpenVPN server inefficient.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13086
(* Security fix *)
patches/packages/gnutls-3.8.11-arm-1_slack15.0.txz: Upgraded.
This update fixes a security issue:
libgnutls: Fix stack overwrite in gnutls_pkcs11_token_init.
Reported by Luigino Camastra from Aisle Research.
Upstream says this is low severity because the PKCS#11 standard defines a
size limit of 32 characters, and therefore it's the application's fault if
it doesn't check that and reject a longer label. I'm not buying that.
NOTE: Be sure to also install the nettle upgrade.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2025-9820
(* Security fix *)
patches/packages/nettle-3.10.2-arm-1_slack15.0.txz: Upgraded.
This update is required by gnutls-3.8.11.
patches/packages/libarchive-3.8.3-arm-1_slack15.0.txz: Upgraded.
This update contains security fixes and improvements:
lib: Create temporary files in the target directory (#2753)
lha: Fix for an out-of-bounds buffer overrun when using p[H_LEVEL_OFFSET] (#2768)
7-zip: Fix a buffer overrun when reading truncated 7zip headers (#2769)
(* Security fix *)
patches/packages/xpdf-4.06-arm-1_slack15.0.txz: Upgraded.
This update fixes bugs and security issues.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-2971
https://www.cve.org/CVERecord?id=CVE-2024-3247
https://www.cve.org/CVERecord?id=CVE-2024-3248
https://www.cve.org/CVERecord?id=CVE-2024-3900
https://www.cve.org/CVERecord?id=CVE-2024-4141
https://www.cve.org/CVERecord?id=CVE-2024-4568
https://www.cve.org/CVERecord?id=CVE-2024-4976
https://www.cve.org/CVERecord?id=CVE-2024-7866
https://www.cve.org/CVERecord?id=CVE-2024-7867
https://www.cve.org/CVERecord?id=CVE-2024-7868
https://www.cve.org/CVERecord?id=CVE-2025-2574
https://www.cve.org/CVERecord?id=CVE-2025-3154
https://www.cve.org/CVERecord?id=CVE-2025-11896
(* Security fix *)
24/02/2022: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware
15/12/2015: Aggiornato HowTo automatizzare la compilazione del kernel
15/12/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
24/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
22/11/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
07/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
05/11/2015: Nuovo HowTo Automatizzare l'aggiornamento di Slackware current
30/10/2015: Aggiornato HowTo Automatizzare la prima configurazione di Slackware
26/05/2015: Aggiornato HowTo mini Slackware su pendrive
07/05/2015: Aggiornato HowTo automatizzare la compilazione del kernel
13/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel
02/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel
Vi presento uno script bash che crea una mini Slackware su pendrive in automatico.
Questo esempio fa riferimento a Slackware 14.0 a 32bit ma può essere facilmente adattato a qualsiasi altra versione.
Cerca i pacchetti elencati nell'array se sono già presenti nella directory impostata, se non li trova e se c'è il dvd di Slackware montato li copia da esso, altrimenti li scarica da internet.
⇦ Ho aggiunto una nuova pagina a questo sito che raccoglie le mie app.
Possono essere tutte scaricate dal Play Store di Google.
Un piccolo script in bash che sfrutta kdialog come semplice interfaccia.
Nella sezione download è possibile scaricare anche il pacchetto di installazione per slackware.
Ho 100MiB in più e aggiungo qualcosa al repository ;-)
Ho trovato questo pensiero di Dusty Wilson in inglese su Google+ e lo riporto in parte qui tradotto perché secondo me il motivo di fondo che lo ha spinto a scrivere ciò, è quello che si vede nell'immagine ed è la stessa cosa che ho pensato io quando è morto Dennis Ritchie:
Dennis Ritchie ha co-inventato C che è la base di praticamente tutto ciò che riguarda i computer. Ha co-inventato UNIX che è alla base di tutto nei computer tranne che di Windows (anche se Windows è stato molto, molto molto influenzato da esso). Apple OS X è una piattaforma basata su UNIX. Ma molta gente pensa che Steve Jobs ha fatto tutto da solo e che dovrebbe essere lodato come un salvatore. Non solo ha preso "in prestito" idee, progetti e funzionalità da tutti gli altri, ha piagnucolato se qualcuno abbia mai fatto lo stesso. Nel 1996 ha detto: "Noi siamo sempre stati senza vergogna di rubare grandi idee." Nel 2005 ha detto: "Sono senza vergogna quelli che ci copiano". Quest'anno ha detto "Vado a distruggere Android, perché è un prodotto rubato. Sono disposto ad andare in questa guerra termonucleare" e poi, quasi subito dopo ha rilasciato iOS 5 con una tonnellata di caratteristiche già introdotte in Android. Il ragazzo è/era uno stronzo. Non ho pazienza per un ipocrita come lui.
Condividi sui tuoi social preferiti!
Telegram Facebook Linkedin Twitter Pinterest