☑ Aggancia questa barra allo schermo | ☐ Disattiva gli effetti grafici
✖

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.

Slackware Linux e risoluzione di problemi, di Andrea Peluso


ChangeLog repository

Repository Rss

blender-3.0.1-x86_64-1_ap.txz:  Upgraded.

ChangeLog Slackware current

ChangeLog x86 Rss - ChangeLog x86_64 Rss

a/kernel-firmware-20261021_59f9fc2-noarch-1.txz:  Upgraded.
a/kernel-generic-7.2.12-x86_64-1.txz:  Upgraded.
ap/kexec-tools-2.0.32-x86_64-3.txz:  Rebuilt.
  load-latest-kernel-initrd-with-kexec.sh: add reset_devices to the kernel
  command line. Some drivers need this to initialize properly from a dirty
  state with a kexec boot.
  Thanks to teoberi.
ap/nano-9.3-x86_64-1.txz:  Upgraded.
d/kernel-headers-7.2.12-x86-1.txz:  Upgraded.
k/kernel-source-7.2.12-noarch-1.txz:  Upgraded.
l/brotli-1.2.1-x86_64-1.txz:  Upgraded.
l/nodejs-24.22.1-x86_64-1.txz:  Upgraded.
n/bind-9.20.30-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  Crafted DNS messages could exhaust CPU while being parsed.
  Fix remote termination of named under concurrent GSS-TSIG traffic.
  Possible crash with redirect and qname-minimization strict.
  Fix a bug when resuming from a query initiated by RPZ.
  For more information, see:
    https://kb.isc.org/docs/CVE-2026-19630
    https://kb.isc.org/docs/CVE-2026-94300
    https://kb.isc.org/docs/CVE-2026-96888
    https://kb.isc.org/docs/CVE-2026-97313
    https://www.cve.org/CVERecord?id=CVE-2026-19630
    https://www.cve.org/CVERecord?id=CVE-2026-94300
    https://www.cve.org/CVERecord?id=CVE-2026-96888
    https://www.cve.org/CVERecord?id=CVE-2026-97313
  (* Security fix *)
n/php-8.5.12-x86_64-1.txz:  Upgraded.
  This update fixes bugs and security issues, including the following
  critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://www.php.net/ChangeLog-8.php#8.5.12
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.

d/google-go-lang-1.27.3-x86_64-1.txz:  Upgraded.
d/llvm-23.1.4-x86_64-1.txz:  Upgraded.
d/python-pip-26.2.2-x86_64-1.txz:  Upgraded.
d/python-setuptools-84.2.0-x86_64-1.txz:  Upgraded.
l/elfutils-0.197-x86_64-1.txz:  Upgraded.
l/libclc-23.1.4-x86_64-1.txz:  Upgraded.
l/mozilla-nss-3.131.1-x86_64-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
l/mujs-1.3.11-x86_64-1.txz:  Upgraded.
l/nodejs-24.22.0-x86_64-2.txz:  Rebuilt.
  Remove untrusted emSign certificates.
  (* Security fix *)
l/python-certifi-2026.10.19-x86_64-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
l/python-markdown-3.11.2-x86_64-1.txz:  Upgraded.
l/python-sphinx-9.1.1-x86_64-1.txz:  Upgraded.
n/c-ares-1.34.9-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  Memory corruption when an application cancels its lookups after a connection
  failure.
  A DNS reply that arrived from a different server than the one queried could
  be accepted.
  Use-after-free of a lookup after shutting down a failed connection.
  Use-after-free when an application cancels lookups from a callback, or shuts
  a channel down.
  Use-after-free of a connection after the socket-state callback returns.
  Use-after-free when an application cancels lookups from a server-state
  callback.
  Use-after-free of a server record when an application changes its DNS
  servers from a callback.
  Use-after-free of a cached DNS answer while the application is still reading
  it.
  Buffer overflow when `ares_dup()` or `ares_save_options()` runs while
  another thread changes the servers.
  Uninitialized memory returned for a numeric IPv6 name with a prefix length.
  The query cache could return an answer obtained using different EDNS
  options.
  For more information, see:
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wpr3-8q3r-4q8c
    https://github.com/c-ares/c-ares/security/advisories/GHSA-fqh5-3x7m-wp44
    https://github.com/c-ares/c-ares/security/advisories/GHSA-97vq-4mxv-7vhm
    https://github.com/c-ares/c-ares/security/advisories/GHSA-rf6g-ww74-97qh
    https://github.com/c-ares/c-ares/security/advisories/GHSA-mw23-pfg6-2x9r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-v33j-65h4-4ch8
    https://github.com/c-ares/c-ares/security/advisories/GHSA-pj7p-v3cw-hq66
    https://github.com/c-ares/c-ares/security/advisories/GHSA-grv7-fq5q-9vfc
    https://github.com/c-ares/c-ares/security/advisories/GHSA-ph6c-3cvx-mq6v
    https://github.com/c-ares/c-ares/security/advisories/GHSA-cfcv-8v2j-qj6r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wrgc-prmw-27xh
  (* Security fix *)
n/ca-certificates-20261020-noarch-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
xap/audacious-4.6.2-x86_64-1.txz:  Upgraded.
xap/audacious-plugins-4.6.2-x86_64-1.txz:  Upgraded.
xap/mozilla-firefox-153.5.1esr-x86_64-1.txz:  Upgraded.
  This update fixes a security issue.
  For more information, see:
    https://www.mozilla.org/en-US/firefox/153.5.1/releasenotes/
    https://www.mozilla.org/security/advisories/mfsa2026-112
    https://www.cve.org/CVERecord?id=CVE-2026-113470
  (* Security fix *)
xap/mozilla-thunderbird-153.5.1esr-x86_64-1.txz:  Upgraded.
  This update contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/153.5.0esr/releasenotes/
    https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/
    https://www.cve.org/CVERecord?id=CVE-2026-113866
    https://www.cve.org/CVERecord?id=CVE-2026-113867
    https://www.cve.org/CVERecord?id=CVE-2026-113868
    https://www.cve.org/CVERecord?id=CVE-2026-113470
  (* Security fix *)

a/haveged-1.9.27-x86_64-1.txz:  Upgraded.
ap/cpufetch-1.07-x86_64-1.txz:  Added.
  This seems to not know about many recent microarchitectures, but whatever,
  we'll add it anyway. Thanks to SCerovec for the suggestion.
ap/ghostscript-10.08.0-x86_64-3.txz:  Rebuilt.
  Dump the internal openjpeg library so that we compile against the
  system version to prevent symbol clashes when something links to both
  libgs and libopenjp2. Thanks to marrowsuck.
d/pkgconf-3.0.10-x86_64-1.txz:  Upgraded.
n/NetworkManager-1.58.1-x86_64-5.txz:  Rebuilt.
  In /etc/default/networkmanager, comment out WAIT_UNTIL_ONLINE=true.
  Most users will not need this delay by default, but if you do then go ahead
  and uncomment it.
n/ethtool-7.2-x86_64-1.txz:  Upgraded.
n/network-scripts-16.0-noarch-7.txz:  Rebuilt.
  rc.inet2: for network mounts, mention that WAIT_UNTIL_ONLINE=true in
  /etc/default/networkmanager can also be used if a delay is required.
x/ibus-1.5.35_rc1-x86_64-1.txz:  Upgraded.
testing/packages/linux-7.3.x/kernel-generic-7.3.0-x86_64-1.txz:  Added.
testing/packages/linux-7.3.x/kernel-headers-7.3.0-x86-1.txz:  Added.
testing/packages/linux-7.3.x/kernel-source-7.3.0-noarch-1.txz:  Added.

ChangeLog Slackware arm 64 current

ChangeLog arm 64 Rss

a/kernel-firmware-20261021_59f9fc2-noarch-1.txz:  Upgraded.
ap/kexec-tools-2.0.32-aarch64-2.txz:  Rebuilt.
  load-latest-kernel-initrd-with-kexec.sh: add reset_devices to the kernel
  command line. Some drivers need this to initialize properly from a dirty
  state with a kexec boot.
  Thanks to teoberi.
ap/nano-9.3-aarch64-1.txz:  Upgraded.
l/brotli-1.2.1-aarch64-1.txz:  Upgraded.
l/nodejs-24.22.1-aarch64-1.txz:  Upgraded.
n/bind-9.20.30-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  Crafted DNS messages could exhaust CPU while being parsed.
  Fix remote termination of named under concurrent GSS-TSIG traffic.
  Possible crash with redirect and qname-minimization strict.
  Fix a bug when resuming from a query initiated by RPZ.
  For more information, see:
    https://kb.isc.org/docs/CVE-2026-19630
    https://kb.isc.org/docs/CVE-2026-94300
    https://kb.isc.org/docs/CVE-2026-96888
    https://kb.isc.org/docs/CVE-2026-97313
    https://www.cve.org/CVERecord?id=CVE-2026-19630
    https://www.cve.org/CVERecord?id=CVE-2026-94300
    https://www.cve.org/CVERecord?id=CVE-2026-96888
    https://www.cve.org/CVERecord?id=CVE-2026-97313
  (* Security fix *)
n/php-8.5.12-aarch64-1.txz:  Upgraded.
  This update fixes bugs and security issues, including the following
  critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://www.php.net/ChangeLog-8.php#8.5.12
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)

a/kernel_armv8-7.2.12-aarch64-1.txz:  Upgraded.
  /boot/initrd-armv8/[load_kernel_modules]: Added modules xts & aes_ce_blk to the
  base set.  Thanks to Brent Earl.
d/google-go-lang-1.27.3-aarch64-1.txz:  Upgraded.
d/kernel-headers-7.2.12-aarch64-1.txz:  Upgraded.
d/llvm-23.1.4-aarch64-1.txz:  Upgraded.
d/python-pip-26.2.2-aarch64-1.txz:  Upgraded.
d/python-setuptools-84.2.0-aarch64-1.txz:  Upgraded.
d/rkdeveloptool-1.32-aarch64-1.txz:  Added.
  Thanks to Michales Michaloudes for the original build script, and thanks to
  SCerovec for the suggestion.
k/kernel-source-7.2.12-aarch64-1.txz:  Upgraded.
l/elfutils-0.197-aarch64-1.txz:  Upgraded.
l/libclc-23.1.4-aarch64-1.txz:  Upgraded.
l/mozilla-nss-3.131.1-aarch64-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
l/mujs-1.3.11-aarch64-1.txz:  Upgraded.
l/nodejs-24.22.0-aarch64-2.txz:  Rebuilt.
  Remove untrusted emSign certificates.
  (* Security fix *)
l/python-certifi-2026.10.19-aarch64-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
l/python-markdown-3.11.2-aarch64-1.txz:  Upgraded.
l/python-sphinx-9.1.1-aarch64-1.txz:  Upgraded.
n/c-ares-1.34.9-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  Memory corruption when an application cancels its lookups after a connection
  failure.
  A DNS reply that arrived from a different server than the one queried could
  be accepted.
  Use-after-free of a lookup after shutting down a failed connection.
  Use-after-free when an application cancels lookups from a callback, or shuts
  a channel down.
  Use-after-free of a connection after the socket-state callback returns.
  Use-after-free when an application cancels lookups from a server-state
  callback.
  Use-after-free of a server record when an application changes its DNS
  servers from a callback.
  Use-after-free of a cached DNS answer while the application is still reading
  it.
  Buffer overflow when `ares_dup()` or `ares_save_options()` runs while
  another thread changes the servers.
  Uninitialized memory returned for a numeric IPv6 name with a prefix length.
  The query cache could return an answer obtained using different EDNS
  options.
  For more information, see:
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wpr3-8q3r-4q8c
    https://github.com/c-ares/c-ares/security/advisories/GHSA-fqh5-3x7m-wp44
    https://github.com/c-ares/c-ares/security/advisories/GHSA-97vq-4mxv-7vhm
    https://github.com/c-ares/c-ares/security/advisories/GHSA-rf6g-ww74-97qh
    https://github.com/c-ares/c-ares/security/advisories/GHSA-mw23-pfg6-2x9r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-v33j-65h4-4ch8
    https://github.com/c-ares/c-ares/security/advisories/GHSA-pj7p-v3cw-hq66
    https://github.com/c-ares/c-ares/security/advisories/GHSA-grv7-fq5q-9vfc
    https://github.com/c-ares/c-ares/security/advisories/GHSA-ph6c-3cvx-mq6v
    https://github.com/c-ares/c-ares/security/advisories/GHSA-cfcv-8v2j-qj6r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wrgc-prmw-27xh
  (* Security fix *)
n/ca-certificates-20261020-noarch-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
xap/audacious-4.6.2-aarch64-1.txz:  Upgraded.
xap/audacious-plugins-4.6.2-aarch64-1.txz:  Upgraded.
xap/mozilla-firefox-153.5.1esr-aarch64-1.txz:  Upgraded.
  This update fixes a security issue.
  For more information, see:
    https://www.mozilla.org/en-US/firefox/153.5.1/releasenotes/
    https://www.mozilla.org/security/advisories/mfsa2026-112
    https://www.cve.org/CVERecord?id=CVE-2026-113470
  (* Security fix *)
xap/mozilla-thunderbird-153.5.1esr-aarch64-1.txz:  Upgraded.
  This update contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/153.5.0esr/releasenotes/
    https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/
    https://www.cve.org/CVERecord?id=CVE-2026-113866
    https://www.cve.org/CVERecord?id=CVE-2026-113867
    https://www.cve.org/CVERecord?id=CVE-2026-113868
    https://www.cve.org/CVERecord?id=CVE-2026-113470
  (* Security fix *)
installer/*:  Rebuilt.
kernels/*:  Upgraded.


Slackware Linux on ARM is kept running by a small farm of build machines
humming away in the background - and by the people who help keep them
running. If the project is useful to you, please consider chipping in.
Donations pay for build hardware, electricity, and the time it takes
to keep the port current and moving forward.

Details on how to contribute are here:
   https://arm.slackware.com/sponsor/

A big thank you to everyone who has already supported the project - it
makes a real difference, and it is very much appreciated.


  Stuart Winter <mozes@slackware>
  Brent Earl <el0226@slackware>

a/bcachefs-tools-1.39.7-aarch64-1.txz:  Upgraded.
a/grub-2.16-aarch64-2.txz:  Rebuilt.
a/haveged-1.9.27-aarch64-1.txz:  Upgraded.
a/kernel-firmware-20261014_d545571-noarch-1.txz:  Upgraded.
a/kernel_armv8-7.2.11-aarch64-1.txz:  Upgraded.
a/pkgtools-16.0-noarch-3.txz:  Rebuilt.
  makepkg: add loongarch64 to the list of $ARCH for which xz will decide how
  many threads to use.
  Thanks to shipujin.
a/sysklogd-2.8.0-aarch64-1.txz:  Upgraded.
a/sysvinit-scripts-16.0-noarch-6.txz:  Rebuilt.
  rc.6: if a new kernel/initrd was loaded with kexec, do a kexec reboot.
  Thanks to Mr.Gadgets.
  Move the call to rc.font from rc.M to rc.S, immediately after udev runs to
  initialize the KMS console. While I sort of liked it in rc.M because then
  you could see which font was selected in auto mode, placing it here minimizes
  the obvious font size changes during boot.
ap/btop-1.4.7-aarch64-1.txz:  Added.
  Thanks to Matteo Bernardini.
ap/cpufetch-1.07-aarch64-1.txz:  Added.
  This seems to not know about many recent microarchitectures, but whatever,
  we'll add it anyway. Thanks to SCerovec for the suggestion.
ap/ghostscript-10.08.0-aarch64-3.txz:  Rebuilt.
  Dump the internal openjpeg library so that we compile against the
  system version to prevent symbol clashes when something links to both
  libgs and libopenjp2. Thanks to marrowsuck.
ap/kexec-tools-2.0.32-aarch64-1.txz:  Added.
ap/sqlite-3.54.1-aarch64-1.txz:  Upgraded.
d/ccache-4.14.2-aarch64-1.txz:  Upgraded.
d/google-go-lang-1.27.2-aarch64-1.txz:  Upgraded.
d/kernel-headers-7.2.11-aarch64-1.txz:  Upgraded.
d/pkgconf-3.0.10-aarch64-1.txz:  Upgraded.
d/rust-1.99.1-aarch64-1.txz:  Upgraded.
k/kernel-source-7.2.11-aarch64-1.txz:  Upgraded.
kde/kio-snapshot-1.1.0-aarch64-1.txz:  Upgraded.
l/PyQt-builder-1.20.1-aarch64-1.txz:  Upgraded.
l/appstream-1.2.1-aarch64-1.txz:  Upgraded.
l/blake3-1.8.7-aarch64-1.txz:  Added.
l/cryptopp-8.9.0-aarch64-4.txz:  Rebuilt.
  Fix libdir in libcryptopp.pc.
  Thanks to frslk7.
l/freetype-2.15.0-aarch64-1.txz:  Upgraded.
l/gjs-1.90.1-aarch64-1.txz:  Upgraded.
l/imagemagick-7.1.2_34-aarch64-1.txz:  Upgraded.
l/libarchive-3.8.10-aarch64-1.txz:  Upgraded.
  Libarchive 3.8.10 is a security, bugfix and minor feature release.
  For more information, see:
    https://github.com/libarchive/libarchive/compare/v3.8.9...v3.8.10
  (* Security fix *)
l/libgit2-1.9.7-aarch64-1.txz:  Added.
  Thanks to gmgf.
l/libnotify-0.8.9-aarch64-1.txz:  Upgraded.
l/librsvg-2.63.3-aarch64-1.txz:  Upgraded.
l/libunistring-1.5-aarch64-1.txz:  Upgraded.
l/libvips-8.18.7-aarch64-1.txz:  Added.
l/libwmf-0.2.17-aarch64-1.txz:  Upgraded.
l/libzip-1.12.1-aarch64-1.txz:  Upgraded.
l/nodejs-24.22.0-aarch64-1.txz:  Upgraded.
l/orc-0.4.44-aarch64-1.txz:  Upgraded.
l/pcsc-lite-2.5.3-aarch64-1.txz:  Upgraded.
l/pipewire-1.6.9-aarch64-4.txz:  Rebuilt.
  Rather than using pgrep and trying to match the namespace, just check if the
  pipewire socket already exists and exit early.
  Thanks to 0xBF.
l/polkit-128-aarch64-1.txz:  Upgraded.
l/python-certifi-2026.10.18-aarch64-1.txz:  Upgraded.
l/python-doxyqml-0.6.0-aarch64-1.txz:  Upgraded.
l/python-installer-1.1.0-aarch64-1.txz:  Upgraded.
l/python-markdown-3.11.1-aarch64-1.txz:  Upgraded.
l/python-pillow-13.0.0-aarch64-1.txz:  Upgraded.
l/python-pluggy-1.7.0-aarch64-1.txz:  Upgraded.
l/python-tomlkit-0.15.2-aarch64-1.txz:  Upgraded.
l/simdutf-9.3.2-aarch64-1.txz:  Upgraded.
  Shared library .so-version bump.
l/sip-6.17.1-aarch64-1.txz:  Upgraded.
l/vte-0.84.1-aarch64-5.txz:  Rebuilt.
  Recompiled against simdutf-9.3.0.
n/NetworkManager-1.58.1-aarch64-5.txz:  Rebuilt.
  In /etc/default/networkmanager, comment out WAIT_UNTIL_ONLINE=true.
  Most users will not need this delay by default, but if you do then go ahead
  and uncomment it.
n/cifs-utils-7.9-aarch64-1.txz:  Upgraded.
n/curl-8.23.0-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  local interface connection reuse mixup.
  info leak uploading over WebSockets with GnuTLS.
  password leak in CURLINFO_EFFECTIVE_URL.
  authorization: Negotiate sent to foreign origin.
  server-set cookie aborts cookie jar load.
  never-ending loop via server response omission.
  FTP wildcard write callback mixup.
  TFTP direction confusion.
  -J no-clobber guarantee bypassed with 103 early hints.
  curl_mime_free stack overflow by recursion.
  HTTP/2 upload Use-After-Free.
  redirect to SFTP or SCP bypasses host verification.
  server-set cookie erases cookie jar.
  Negotiate credentials sent to redirected origin.
  leaking host credentials to HTTP proxy.
  auto client cert connection reuse mixup.
  cross-origin reuse of a Negotiate connection.
  HSTS cache import drops longer-lived child.
  HSTS response erases persisted entries.
  knownhost callback mismatches key as missing.
  wolfSSL public-key pinning bypass.
  For more information, see:
    https://curl.se/docs/CVE-2026-107929.html
    https://curl.se/docs/CVE-2026-107928.html
    https://curl.se/docs/CVE-2026-94266.html
    https://curl.se/docs/CVE-2026-94265.html
    https://curl.se/docs/CVE-2026-92386.html
    https://curl.se/docs/CVE-2026-92387.html
    https://curl.se/docs/CVE-2026-92388.html
    https://curl.se/docs/CVE-2026-92389.html
    https://curl.se/docs/CVE-2026-92390.html
    https://curl.se/docs/CVE-2026-92391.html
    https://curl.se/docs/CVE-2026-92392.html
    https://curl.se/docs/CVE-2026-86410.html
    https://curl.se/docs/CVE-2026-86412.html
    https://curl.se/docs/CVE-2026-86413.html
    https://curl.se/docs/CVE-2026-86414.html
    https://curl.se/docs/CVE-2026-86415.html
    https://curl.se/docs/CVE-2026-87861.html
    https://curl.se/docs/CVE-2026-87862.html
    https://curl.se/docs/CVE-2026-87863.html
    https://curl.se/docs/CVE-2026-87865.html
    https://curl.se/docs/CVE-2026-87866.html
    https://www.cve.org/CVERecord?id=CVE-2026-107929
    https://www.cve.org/CVERecord?id=CVE-2026-107928
    https://www.cve.org/CVERecord?id=CVE-2026-94266
    https://www.cve.org/CVERecord?id=CVE-2026-94265
    https://www.cve.org/CVERecord?id=CVE-2026-92386
    https://www.cve.org/CVERecord?id=CVE-2026-92387
    https://www.cve.org/CVERecord?id=CVE-2026-92388
    https://www.cve.org/CVERecord?id=CVE-2026-92389
    https://www.cve.org/CVERecord?id=CVE-2026-92390
    https://www.cve.org/CVERecord?id=CVE-2026-92391
    https://www.cve.org/CVERecord?id=CVE-2026-92392
    https://www.cve.org/CVERecord?id=CVE-2026-86410
    https://www.cve.org/CVERecord?id=CVE-2026-86412
    https://www.cve.org/CVERecord?id=CVE-2026-86413
    https://www.cve.org/CVERecord?id=CVE-2026-86414
    https://www.cve.org/CVERecord?id=CVE-2026-86415
    https://www.cve.org/CVERecord?id=CVE-2026-87861
    https://www.cve.org/CVERecord?id=CVE-2026-87862
    https://www.cve.org/CVERecord?id=CVE-2026-87863
    https://www.cve.org/CVERecord?id=CVE-2026-87865
    https://www.cve.org/CVERecord?id=CVE-2026-87866
  (* Security fix *)
n/ethtool-7.2-aarch64-1.txz:  Upgraded.
n/network-scripts-16.0-noarch-7.txz:  Rebuilt.
  rc.inet2: for network mounts, mention that WAIT_UNTIL_ONLINE=true in
  /etc/default/networkmanager can also be used if a delay is required.
n/ngtcp2-1.25.0-aarch64-3.txz:  Rebuilt.
  Also build libngtcp2_crypto_gnutls.
n/nmap-7.992-aarch64-1.txz:  Upgraded.
n/spice-0.16.0-aarch64-3.txz:  Rebuilt.
  [PATCH] inputs: Fix keyboard and mouse state leaks on interface removal.
  This prevents a big core dump out of QEMU.
  Thanks to Daedra.
x/ibus-1.5.35_rc1-aarch64-1.txz:  Upgraded.
x/libX11-1.8.14-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  ximcp: bound XIM_OPEN_REPLY attribute lengths.
  ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths.
  lcGenConv: bound byteM_parse_codeset() reads.
  xkb: Check the keysym range in _XkbReadKeyActions.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003753.html
    https://www.cve.org/CVERecord?id=CVE-2026-94283
    https://www.cve.org/CVERecord?id=CVE-2026-94284
    https://www.cve.org/CVERecord?id=CVE-2026-94285
    https://www.cve.org/CVERecord?id=CVE-2026-88806
  (* Security fix *)
x/libXi-1.8.4-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  Out-of-bounds read in libXi's XQueryDeviceState().
  Out-of-bounds read in libXi's XI2 class parsing via size_classes()
  and copy_classes().
  Out-of-bounds read in libXi's XI2 class parser.
  Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing.
  Out-of-bounds read in libXi's XListInputDevices().
  Out-of-bounds read in libXi's XListInputDevices() class parsing.
  Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion.
  libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow.
  libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-93541
    https://www.cve.org/CVERecord?id=CVE-2026-93542
    https://www.cve.org/CVERecord?id=CVE-2026-93543
    https://www.cve.org/CVERecord?id=CVE-2026-93544
    https://www.cve.org/CVERecord?id=CVE-2026-93545
    https://www.cve.org/CVERecord?id=CVE-2026-94282
    https://www.cve.org/CVERecord?id=CVE-2026-109089
    https://www.cve.org/CVERecord?id=CVE-2026-109090
  (* Security fix *)
x/libXpm-3.5.20-aarch64-1.txz:  Upgraded.
  This update fixes a security issue:
  Denial of service via unsigned underflow in libXpm's write path.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-94287
  (* Security fix *)
x/libXrender-0.9.13-aarch64-1.txz:  Upgraded.
  This update fixes a security issue:
  Out-of-bounds read in libXrender's XRenderQueryFormat reply parser.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-88807
  (* Security fix *)
x/libXtst-1.2.6-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  parse_reply_call_callback: check element size against remaining reply buffer.
  parse_reply_call_callback: reject zero-progress RECORD reply elements.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003757.html
    https://www.cve.org/CVERecord?id=CVE-2026-94286
    https://www.cve.org/CVERecord?id=CVE-2026-109088
  (* Security fix *)
x/m17n-lib-1.8.7-aarch64-1.txz:  Upgraded.
x/mesa-26.2.5-aarch64-1.txz:  Upgraded.
x/sddm-0.21.0-aarch64-11.txz:  Rebuilt.
  Drop QT_USE_PHYSICAL_DPI=1 from the GreeterEnvironment= line in sddm.conf
  (for now anyway).
x/xterm-412-aarch64-1.txz:  Upgraded.
xap/freerdp-3.32.2-aarch64-1.txz:  Upgraded.
xap/mozilla-firefox-153.5.0esr-aarch64-1.txz:  Upgraded.
  This update contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/firefox/153.5.0/releasenotes/
    https://www.mozilla.org/security/advisories/mfsa2026-108
    https://www.cve.org/CVERecord?id=CVE-2026-109704
    https://www.cve.org/CVERecord?id=CVE-2026-109705
    https://www.cve.org/CVERecord?id=CVE-2026-109706
    https://www.cve.org/CVERecord?id=CVE-2026-109707
    https://www.cve.org/CVERecord?id=CVE-2026-109708
    https://www.cve.org/CVERecord?id=CVE-2026-109709
    https://www.cve.org/CVERecord?id=CVE-2026-109710
    https://www.cve.org/CVERecord?id=CVE-2026-109711
    https://www.cve.org/CVERecord?id=CVE-2026-109712
    https://www.cve.org/CVERecord?id=CVE-2026-109713
    https://www.cve.org/CVERecord?id=CVE-2026-109715
    https://www.cve.org/CVERecord?id=CVE-2026-109716
    https://www.cve.org/CVERecord?id=CVE-2026-109717
    https://www.cve.org/CVERecord?id=CVE-2026-109718
    https://www.cve.org/CVERecord?id=CVE-2026-109719
    https://www.cve.org/CVERecord?id=CVE-2026-109720
    https://www.cve.org/CVERecord?id=CVE-2026-109721
    https://www.cve.org/CVERecord?id=CVE-2026-109722
    https://www.cve.org/CVERecord?id=CVE-2026-109723
    https://www.cve.org/CVERecord?id=CVE-2026-109724
    https://www.cve.org/CVERecord?id=CVE-2026-109725
    https://www.cve.org/CVERecord?id=CVE-2026-109726
    https://www.cve.org/CVERecord?id=CVE-2026-109727
    https://www.cve.org/CVERecord?id=CVE-2026-109728
    https://www.cve.org/CVERecord?id=CVE-2026-109729
    https://www.cve.org/CVERecord?id=CVE-2026-109730
    https://www.cve.org/CVERecord?id=CVE-2026-109731
    https://www.cve.org/CVERecord?id=CVE-2026-109732
    https://www.cve.org/CVERecord?id=CVE-2026-109733
    https://www.cve.org/CVERecord?id=CVE-2026-109734
    https://www.cve.org/CVERecord?id=CVE-2026-109736
    https://www.cve.org/CVERecord?id=CVE-2026-109737
    https://www.cve.org/CVERecord?id=CVE-2026-109738
    https://www.cve.org/CVERecord?id=CVE-2026-109740
    https://www.cve.org/CVERecord?id=CVE-2026-109741
    https://www.cve.org/CVERecord?id=CVE-2026-109742
    https://www.cve.org/CVERecord?id=CVE-2026-109743
    https://www.cve.org/CVERecord?id=CVE-2026-109744
    https://www.cve.org/CVERecord?id=CVE-2026-109745
    https://www.cve.org/CVERecord?id=CVE-2026-109782
    https://www.cve.org/CVERecord?id=CVE-2026-109751
    https://www.cve.org/CVERecord?id=CVE-2026-109752
    https://www.cve.org/CVERecord?id=CVE-2026-109753
    https://www.cve.org/CVERecord?id=CVE-2026-109754
    https://www.cve.org/CVERecord?id=CVE-2026-109756
    https://www.cve.org/CVERecord?id=CVE-2026-109757
    https://www.cve.org/CVERecord?id=CVE-2026-109759
    https://www.cve.org/CVERecord?id=CVE-2026-109760
    https://www.cve.org/CVERecord?id=CVE-2026-109762
    https://www.cve.org/CVERecord?id=CVE-2026-109763
    https://www.cve.org/CVERecord?id=CVE-2026-109764
    https://www.cve.org/CVERecord?id=CVE-2026-109765
    https://www.cve.org/CVERecord?id=CVE-2026-109766
    https://www.cve.org/CVERecord?id=CVE-2026-109767
    https://www.cve.org/CVERecord?id=CVE-2026-109783
    https://www.cve.org/CVERecord?id=CVE-2026-109770
    https://www.cve.org/CVERecord?id=CVE-2026-109775
    https://www.cve.org/CVERecord?id=CVE-2026-109776
    https://www.cve.org/CVERecord?id=CVE-2026-109777
    https://www.cve.org/CVERecord?id=CVE-2026-109778
    https://www.cve.org/CVERecord?id=CVE-2026-109781
  (* Security fix *)
xap/mozilla-thunderbird-153.5.0esr-aarch64-1.txz:  Upgraded.
  This release contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/153.5.0esr/releasenotes/
    https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/
    https://www.cve.org/CVERecord?id=CVE-2026-110249
    https://www.cve.org/CVERecord?id=CVE-2026-109704
    https://www.cve.org/CVERecord?id=CVE-2026-109705
    https://www.cve.org/CVERecord?id=CVE-2026-109706
    https://www.cve.org/CVERecord?id=CVE-2026-109707
    https://www.cve.org/CVERecord?id=CVE-2026-109708
    https://www.cve.org/CVERecord?id=CVE-2026-109709
    https://www.cve.org/CVERecord?id=CVE-2026-109710
    https://www.cve.org/CVERecord?id=CVE-2026-109711
    https://www.cve.org/CVERecord?id=CVE-2026-109712
    https://www.cve.org/CVERecord?id=CVE-2026-109713
    https://www.cve.org/CVERecord?id=CVE-2026-109715
    https://www.cve.org/CVERecord?id=CVE-2026-109716
    https://www.cve.org/CVERecord?id=CVE-2026-109717
    https://www.cve.org/CVERecord?id=CVE-2026-109718
    https://www.cve.org/CVERecord?id=CVE-2026-109719
    https://www.cve.org/CVERecord?id=CVE-2026-109720
    https://www.cve.org/CVERecord?id=CVE-2026-109721
    https://www.cve.org/CVERecord?id=CVE-2026-109722
    https://www.cve.org/CVERecord?id=CVE-2026-109723
    https://www.cve.org/CVERecord?id=CVE-2026-109724
    https://www.cve.org/CVERecord?id=CVE-2026-109725
    https://www.cve.org/CVERecord?id=CVE-2026-109726
    https://www.cve.org/CVERecord?id=CVE-2026-109727
    https://www.cve.org/CVERecord?id=CVE-2026-109728
    https://www.cve.org/CVERecord?id=CVE-2026-109729
    https://www.cve.org/CVERecord?id=CVE-2026-109730
    https://www.cve.org/CVERecord?id=CVE-2026-109731
    https://www.cve.org/CVERecord?id=CVE-2026-109732
    https://www.cve.org/CVERecord?id=CVE-2026-109733
    https://www.cve.org/CVERecord?id=CVE-2026-109734
    https://www.cve.org/CVERecord?id=CVE-2026-109736
    https://www.cve.org/CVERecord?id=CVE-2026-109737
    https://www.cve.org/CVERecord?id=CVE-2026-109738
    https://www.cve.org/CVERecord?id=CVE-2026-109740
    https://www.cve.org/CVERecord?id=CVE-2026-109741
    https://www.cve.org/CVERecord?id=CVE-2026-109742
    https://www.cve.org/CVERecord?id=CVE-2026-109743
    https://www.cve.org/CVERecord?id=CVE-2026-109744
    https://www.cve.org/CVERecord?id=CVE-2026-109745
    https://www.cve.org/CVERecord?id=CVE-2026-109782
    https://www.cve.org/CVERecord?id=CVE-2026-109751
    https://www.cve.org/CVERecord?id=CVE-2026-109752
    https://www.cve.org/CVERecord?id=CVE-2026-109753
    https://www.cve.org/CVERecord?id=CVE-2026-109754
    https://www.cve.org/CVERecord?id=CVE-2026-109756
    https://www.cve.org/CVERecord?id=CVE-2026-109757
    https://www.cve.org/CVERecord?id=CVE-2026-109759
    https://www.cve.org/CVERecord?id=CVE-2026-109760
    https://www.cve.org/CVERecord?id=CVE-2026-109762
    https://www.cve.org/CVERecord?id=CVE-2026-109763
    https://www.cve.org/CVERecord?id=CVE-2026-109764
    https://www.cve.org/CVERecord?id=CVE-2026-109765
    https://www.cve.org/CVERecord?id=CVE-2026-109766
    https://www.cve.org/CVERecord?id=CVE-2026-109767
    https://www.cve.org/CVERecord?id=CVE-2026-109783
    https://www.cve.org/CVERecord?id=CVE-2026-109770
    https://www.cve.org/CVERecord?id=CVE-2026-109775
    https://www.cve.org/CVERecord?id=CVE-2026-109776
    https://www.cve.org/CVERecord?id=CVE-2026-109777
    https://www.cve.org/CVERecord?id=CVE-2026-109778
    https://www.cve.org/CVERecord?id=CVE-2026-109781
  (* Security fix *)
installer/*:  Rebuilt.
kernels/*:  Upgraded.

ChangeLog Slackware stable

ChangeLog x86 Rss - ChangeLog x86_64 Rss

extra/php80/php80-8.0.30-x86_64-2_slack15.0.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
extra/php81/php81-8.1.34-x86_64-2_slack15.0.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
extra/php82/php82-8.2.35-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes bugs and security issues, including the following
  critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://www.php.net/ChangeLog-8.php#8.2.35
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
patches/packages/php-7.4.33-x86_64-4_slack15.0.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)

patches/packages/c-ares-1.34.9-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Memory corruption when an application cancels its lookups after a connection
  failure.
  A DNS reply that arrived from a different server than the one queried could
  be accepted.
  Use-after-free of a lookup after shutting down a failed connection.
  Use-after-free when an application cancels lookups from a callback, or shuts
  a channel down.
  Use-after-free of a connection after the socket-state callback returns.
  Use-after-free when an application cancels lookups from a server-state
  callback.
  Use-after-free of a server record when an application changes its DNS
  servers from a callback.
  Use-after-free of a cached DNS answer while the application is still reading
  it.
  Buffer overflow when `ares_dup()` or `ares_save_options()` runs while
  another thread changes the servers.
  Uninitialized memory returned for a numeric IPv6 name with a prefix length.
  The query cache could return an answer obtained using different EDNS
  options.
  For more information, see:
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wpr3-8q3r-4q8c
    https://github.com/c-ares/c-ares/security/advisories/GHSA-fqh5-3x7m-wp44
    https://github.com/c-ares/c-ares/security/advisories/GHSA-97vq-4mxv-7vhm
    https://github.com/c-ares/c-ares/security/advisories/GHSA-rf6g-ww74-97qh
    https://github.com/c-ares/c-ares/security/advisories/GHSA-mw23-pfg6-2x9r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-v33j-65h4-4ch8
    https://github.com/c-ares/c-ares/security/advisories/GHSA-pj7p-v3cw-hq66
    https://github.com/c-ares/c-ares/security/advisories/GHSA-grv7-fq5q-9vfc
    https://github.com/c-ares/c-ares/security/advisories/GHSA-ph6c-3cvx-mq6v
    https://github.com/c-ares/c-ares/security/advisories/GHSA-cfcv-8v2j-qj6r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wrgc-prmw-27xh
  (* Security fix *)
patches/packages/ca-certificates-20261020-noarch-1_slack15.0.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
patches/packages/mozilla-firefox-140.17.0esr-x86_64-2_slack15.0.txz:  Rebuilt.
  This update fixes a security issue:
  Build --with-system-zlib and --with-system-nss to pick up the latest
  CA certificates.
  (* Security fix *)
patches/packages/mozilla-nss-3.131.1-x86_64-1_slack15.0.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
patches/packages/mozilla-thunderbird-140.17.0esr-x86_64-2_slack15.0.txz:  Rebuilt.
  This update fixes a security issue:
  Build --with-system-zlib and --with-system-nss to pick up the latest
  CA certificates.
  (* Security fix *)
patches/packages/python-certifi-2026.10.19-x86_64-1_slack15.0.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)

patches/packages/libXtst-1.2.6-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  parse_reply_call_callback: check element size against remaining reply buffer.
  parse_reply_call_callback: reject zero-progress RECORD reply elements.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003757.html
    https://www.cve.org/CVERecord?id=CVE-2026-94286
    https://www.cve.org/CVERecord?id=CVE-2026-109088
  (* Security fix *)

ChangeLog Slackware arm stable

ChangeLog arm Rss

extra/php80/php80-8.0.30-arm-2.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
extra/php81/php81-8.1.34-arm-2.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
extra/php82/php82-8.2.35-arm-1.txz:  Upgraded.
  This update fixes bugs and security issues, including the following
  critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://www.php.net/ChangeLog-8.php#8.2.35
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
patches/packages/linux-5.15.223/*:  Upgraded.
patches/packages/nano-9.3-arm-1_slack15.0.txz:  Upgraded.
patches/packages/php-7.4.33-arm-3_slack15.0.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)

patches/packages/c-ares-1.34.9-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Memory corruption when an application cancels its lookups after a connection
  failure.
  A DNS reply that arrived from a different server than the one queried could
  be accepted.
  Use-after-free of a lookup after shutting down a failed connection.
  Use-after-free when an application cancels lookups from a callback, or shuts
  a channel down.
  Use-after-free of a connection after the socket-state callback returns.
  Use-after-free when an application cancels lookups from a server-state
  callback.
  Use-after-free of a server record when an application changes its DNS
  servers from a callback.
  Use-after-free of a cached DNS answer while the application is still reading
  it.
  Buffer overflow when `ares_dup()` or `ares_save_options()` runs while
  another thread changes the servers.
  Uninitialized memory returned for a numeric IPv6 name with a prefix length.
  The query cache could return an answer obtained using different EDNS
  options.
  For more information, see:
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wpr3-8q3r-4q8c
    https://github.com/c-ares/c-ares/security/advisories/GHSA-fqh5-3x7m-wp44
    https://github.com/c-ares/c-ares/security/advisories/GHSA-97vq-4mxv-7vhm
    https://github.com/c-ares/c-ares/security/advisories/GHSA-rf6g-ww74-97qh
    https://github.com/c-ares/c-ares/security/advisories/GHSA-mw23-pfg6-2x9r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-v33j-65h4-4ch8
    https://github.com/c-ares/c-ares/security/advisories/GHSA-pj7p-v3cw-hq66
    https://github.com/c-ares/c-ares/security/advisories/GHSA-grv7-fq5q-9vfc
    https://github.com/c-ares/c-ares/security/advisories/GHSA-ph6c-3cvx-mq6v
    https://github.com/c-ares/c-ares/security/advisories/GHSA-cfcv-8v2j-qj6r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wrgc-prmw-27xh
  (* Security fix *)
patches/packages/ca-certificates-20261020-noarch-1_slack15.0.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
patches/packages/mozilla-nss-3.131.1-arm-1_slack15.0.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
patches/packages/python-certifi-2026.10.19-arm-1_slack15.0.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)


Slackware Linux on ARM is kept running by a small farm of build machines
humming away in the background - and by the people who help keep them
running. If the project is useful to you, please consider chipping in.
Donations pay for build hardware, electricity, and the time it takes
to keep the port current and moving forward.

Details on how to contribute are here:
   https://arm.slackware.com/sponsor/

A big thank you to everyone who has already supported the project - it
makes a real difference, and it is very much appreciated.


  Stuart Winter <mozes@slackware>

patches/packages/libX11-1.8.14-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  ximcp: bound XIM_OPEN_REPLY attribute lengths.
  ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths.
  lcGenConv: bound byteM_parse_codeset() reads.
  xkb: Check the keysym range in _XkbReadKeyActions.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003753.html
    https://www.cve.org/CVERecord?id=CVE-2026-94283
    https://www.cve.org/CVERecord?id=CVE-2026-94284
    https://www.cve.org/CVERecord?id=CVE-2026-94285
    https://www.cve.org/CVERecord?id=CVE-2026-88806
  (* Security fix *)
patches/packages/libXi-1.8.4-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Out-of-bounds read in libXi's XQueryDeviceState().
  Out-of-bounds read in libXi's XI2 class parsing via size_classes()
  and copy_classes().
  Out-of-bounds read in libXi's XI2 class parser.
  Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing.
  Out-of-bounds read in libXi's XListInputDevices().
  Out-of-bounds read in libXi's XListInputDevices() class parsing.
  Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion.
  libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow.
  libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-93541
    https://www.cve.org/CVERecord?id=CVE-2026-93542
    https://www.cve.org/CVERecord?id=CVE-2026-93543
    https://www.cve.org/CVERecord?id=CVE-2026-93544
    https://www.cve.org/CVERecord?id=CVE-2026-93545
    https://www.cve.org/CVERecord?id=CVE-2026-94282
    https://www.cve.org/CVERecord?id=CVE-2026-109089
    https://www.cve.org/CVERecord?id=CVE-2026-109090
  (* Security fix *)
patches/packages/libXpm-3.5.20-arm-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  Denial of service via unsigned underflow in libXpm's write path.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-94287
  (* Security fix *)
patches/packages/libXrender-0.9.13-arm-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  Out-of-bounds read in libXrender's XRenderQueryFormat reply parser.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-88807
  (* Security fix *)
patches/packages/libXtst-1.2.6-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  parse_reply_call_callback: check element size against remaining reply buffer.
  parse_reply_call_callback: reject zero-progress RECORD reply elements.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003757.html
    https://www.cve.org/CVERecord?id=CVE-2026-94286
    https://www.cve.org/CVERecord?id=CVE-2026-109088
  (* Security fix *)

Aggiornamenti

Rss

Aggiornamenti di script e guide

24/02/2022: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware
15/12/2015: Aggiornato HowTo automatizzare la compilazione del kernel
15/12/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
24/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
22/11/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
07/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
05/11/2015: Nuovo HowTo Automatizzare l'aggiornamento di Slackware current
30/10/2015: Aggiornato HowTo Automatizzare la prima configurazione di Slackware
26/05/2015: Aggiornato HowTo mini Slackware su pendrive
07/05/2015: Aggiornato HowTo automatizzare la compilazione del kernel
13/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel
02/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel



Script mini Slackware su pendrive

Vi presento uno script bash che crea una mini Slackware su pendrive in automatico. script

Questo esempio fa riferimento a Slackware 14.0 a 32bit ma può essere facilmente adattato a qualsiasi altra versione.
Cerca i pacchetti elencati nell'array se sono già presenti nella directory impostata, se non li trova e se c'è il dvd di Slackware montato li copia da esso, altrimenti li scarica da internet.

Leggi tutto...

Nuova sezione "App Android"

⇦ Ho aggiunto una nuova pagina a questo sito che raccoglie le mie app. info

Possono essere tutte scaricate dal Play Store di Google.

Script web radio italiane in bash

Un piccolo script in bash che sfrutta kdialog come semplice interfaccia. script

Nella sezione download è possibile scaricare anche il pacchetto di installazione per slackware.

Leggi tutto...

Viva lo spazio

info

Ho 100MiB in più e aggiungo qualcosa al repository ;-)


Traduzione di un pensiero di Dusty Wilson

Ho trovato questo pensiero di Dusty Wilson in inglese su Google+ e lo riporto in parte qui tradotto perché secondo me il motivo di fondo che lo ha spinto a scrivere ciò, è quello che si vede nell'immagine ed è la stessa cosa che ho pensato io quando è morto Dennis Ritchie: Dennis Ritchie vs Steve Jobs

Dennis Ritchie ha co-inventato C che è la base di praticamente tutto ciò che riguarda i computer. Ha co-inventato UNIX che è alla base di tutto nei computer tranne che di Windows (anche se Windows è stato molto, molto molto influenzato da esso). Apple OS X è una piattaforma basata su UNIX. Ma molta gente pensa che Steve Jobs ha fatto tutto da solo e che dovrebbe essere lodato come un salvatore. Non solo ha preso "in prestito" idee, progetti e funzionalità da tutti gli altri, ha piagnucolato se qualcuno abbia mai fatto lo stesso. Nel 1996 ha detto: "Noi siamo sempre stati senza vergogna di rubare grandi idee." Nel 2005 ha detto: "Sono senza vergogna quelli che ci copiano". Quest'anno ha detto "Vado a distruggere Android, perché è un prodotto rubato. Sono disposto ad andare in questa guerra termonucleare" e poi, quasi subito dopo ha rilasciato iOS 5 con una tonnellata di caratteristiche già introdotte in Android. Il ragazzo è/era uno stronzo. Non ho pazienza per un ipocrita come lui.



   

Condividi sui tuoi social preferiti!

Telegram Facebook Linkedin Twitter Pinterest
.
↑