Slackware Linux e risoluzione di problemi, di Andrea Peluso

ChangeLog repository

Sat Sep 3 13:07:00 CEST 2022

blender-3.0.1-x86_64-1_ap.txz: Upgraded.

ChangeLog Slackware current

ChangeLog x86 Rss - ChangeLog x86_64 Rss

Sat Jul 11 00:25:39 CEST 2026

Fri Jul 10 01:55:49 CEST 2026

a/eudev-3.2.14-x86_64-4.txz:  Rebuilt.
  Add a symlink: /bin/udevadm -> ../sbin/udevadm
  Thanks to drumz.
a/gawk-5.4.1-x86_64-1.txz:  Upgraded.
a/glibc-zoneinfo-2026c-noarch-1.txz:  Upgraded.
  This package provides the latest timezone updates.
d/cmake-4.4.0-x86_64-1.txz:  Upgraded.
d/rust-1.97.0-x86_64-1.txz:  Upgraded.
l/gst-plugins-bad-free-1.28.5-x86_64-1.txz:  Upgraded.
l/gst-plugins-base-1.28.5-x86_64-1.txz:  Upgraded.
l/gst-plugins-good-1.28.5-x86_64-1.txz:  Upgraded.
l/gst-plugins-libav-1.28.5-x86_64-1.txz:  Upgraded.
l/gstreamer-1.28.5-x86_64-1.txz:  Upgraded.
l/pipewire-1.6.8-x86_64-1.txz:  Upgraded.
  pipewire.sh: don't use inotifywait as there's a race condition.
  Exit automatically if pulseaudio is in use.
  Thanks to Petri Kaukasoina.
  pipewire-{en,dis}able.sh: don't bother enabling/disabling the profile.d
  scripts as they behave properly now whether pipewire or pulseaudio is
  currently in use.
l/python-build-1.5.1-x86_64-1.txz:  Upgraded.
l/python-scikit-build-core-1.0.2-x86_64-1.txz:  Upgraded.
x/fontconfig-2.18.2-x86_64-1.txz:  Upgraded.
x/libva-utils-2.24.0-x86_64-1.txz:  Upgraded.
extra/tigervnc/tigervnc-1.16.2-x86_64-5.txz:  Rebuilt.
  Recompiled against xorg-server-21.1.24 to fix these security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)

Wed Jul 8 23:48:24 CEST 2026

l/libdiscid-0.7.0-x86_64-1.txz:  Upgraded.
l/libffi-3.7.0-x86_64-1.txz:  Upgraded.
l/netpbm-11.15.02-x86_64-1.txz:  Upgraded.
l/pipewire-1.6.7-x86_64-7.txz:  Rebuilt.
  pipewire.sh: make the script a lot more robust, starting only if needed,
  and waiting for the pipewire socket to be available before starting the
  other daemons.
  pipewire.csh: start pipewire.sh through bash, which seems like cheating
  but hey, it works.
  Thanks to Petri Kaukasoina.
  pipewire-disable.sh: disable the pipewire profile.d scripts.
  pipewire-enable.sh: enable the pipewire profile.d scripts.
l/python-hatchling-1.31.0-x86_64-1.txz:  Upgraded.
n/c-ares-1.34.8-x86_64-1.txz:  Upgraded.
n/ethtool-7.1-x86_64-1.txz:  Upgraded.
n/proftpd-1.3.9c-x86_64-1.txz:  Upgraded.
  This update fixes bugs and security issues:
  ExecEnviron values not passed due to regression since 1.3.8.d.
  Stack buffer overflow in MLSD/MLST handling for long path names.
  MaxTransfersPerUser no longer enforces configured limits.
  AdminControlsACLs for config, get actions not honored as they should be.
  Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
  buffers without bounds checking.
  RewriteMap unescape builtin use causes one-byte out-of-bounds write,
  fails to reject illegal characters.
  SQL group name lookup concatenates client-provided group names without
  escaping.
  Authenticated SFTP sessions can overflow the SFTP packet buffer.
  Default Controls socket ACLs unintentionally allow all users access for
  sending Controls requests.
  (* Security fix *)
x/libXfont2-2.0.8-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow.
  PCF Font Parsing Heap Buffer Overflow.
  computeProps Property Buffer Heap Buffer Overflow.
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062253.html
    https://www.cve.org/CVERecord?id=CVE-2026-56001
    https://www.cve.org/CVERecord?id=CVE-2026-56002
    https://www.cve.org/CVERecord?id=CVE-2026-56003
  (* Security fix *)
x/libva-2.24.1-x86_64-1.txz:  Upgraded.
x/wlroots-0.20.2-x86_64-1.txz:  Upgraded.
x/xkbutils-1.0.7-x86_64-1.txz:  Upgraded.
x/xlsatoms-1.1.5-x86_64-1.txz:  Upgraded.
x/xlsfonts-1.0.9-x86_64-1.txz:  Upgraded.
x/xorg-server-21.1.24-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)
x/xorg-server-xephyr-21.1.24-x86_64-1.txz:  Upgraded.
x/xorg-server-xnest-21.1.24-x86_64-1.txz:  Upgraded.
x/xorg-server-xvfb-21.1.24-x86_64-1.txz:  Upgraded.
x/xorg-server-xwayland-24.1.13-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)

ChangeLog Slackware arm 64 current

ChangeLog arm 64 Rss

Sun Jul 12 10:08:08 CEST 2026

Sat Jul 11 10:08:08 CEST 2026

a/eudev-3.2.14-aarch64-4.txz:  Rebuilt.
  Add a symlink: /bin/udevadm -> ../sbin/udevadm
  Thanks to drumz.
a/gawk-5.4.1-aarch64-1.txz:  Upgraded.
a/glibc-zoneinfo-2026c-noarch-1.txz:  Upgraded.
  This package provides the latest timezone updates.
a/kernel_armv8-6.18.38-aarch64-2.txz:  Rebuilt.
  /boot/initrd-armv8/[usr/sbin/]: Added thin-provisioning-tools.
a/lvm2-2.03.41-aarch64-2.txz:  Rebuilt.
  Rebuilt to detect the thin-provisioning-tools.
d/cmake-4.4.0-aarch64-1.txz:  Upgraded.
d/kernel-headers-6.18.38-aarch64-2.txz:  Rebuilt.
d/rust-1.97.0-aarch64-1.txz:  Upgraded.
k/kernel-source-6.18.38-aarch64-2.txz:  Rebuilt.
l/gst-plugins-bad-free-1.28.5-aarch64-1.txz:  Upgraded.
l/gst-plugins-base-1.28.5-aarch64-1.txz:  Upgraded.
l/gst-plugins-good-1.28.5-aarch64-1.txz:  Upgraded.
l/gst-plugins-libav-1.28.5-aarch64-1.txz:  Upgraded.
l/gstreamer-1.28.5-aarch64-1.txz:  Upgraded.
l/pipewire-1.6.8-aarch64-1.txz:  Upgraded.
  pipewire.sh: don't use inotifywait as there's a race condition.
  Exit automatically if pulseaudio is in use.
  Thanks to Petri Kaukasoina.
  pipewire-{en,dis}able.sh: don't bother enabling/disabling the profile.d
  scripts as they behave properly now whether pipewire or pulseaudio is
  currently in use.
l/python-build-1.5.1-aarch64-1.txz:  Upgraded.
l/python-scikit-build-core-1.0.2-aarch64-1.txz:  Upgraded.
x/fontconfig-2.18.2-aarch64-1.txz:  Upgraded.
x/libva-utils-2.24.0-aarch64-1.txz:  Upgraded.
extra/tigervnc/tigervnc-1.16.2-aarch64-5.txz:  Rebuilt.
  Recompiled against xorg-server-21.1.24 to fix these security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)
installer/*:  Rebuilt.
kernels/*:  Rebuilt.

Fri Jul 10 10:08:08 CEST 2026

ap/scdoc-1.11.5-aarch64-1.txz:  Upgraded.
ap/vim-9.2.0782-aarch64-1.txz:  Upgraded.
d/patchelf-0.19.1-aarch64-1.txz:  Upgraded.
l/enchant-2.8.19-aarch64-1.txz:  Upgraded.
l/libdiscid-0.7.0-aarch64-1.txz:  Upgraded.
l/libffi-3.7.0-aarch64-1.txz:  Upgraded.
l/mlt-7.40.0-aarch64-1.txz:  Upgraded.
l/netpbm-11.15.02-aarch64-1.txz:  Upgraded.
l/pipewire-1.6.7-aarch64-3.txz:  Rebuilt.
  pipewire.sh: make the script a lot more robust, starting only if needed,
  and waiting for the pipewire socket to be available before starting the
  other daemons.
  pipewire.csh: start pipewire.sh through bash, which seems like cheating
  but hey, it works.
  Thanks to Petri Kaukasoina.
  pipewire-disable.sh: disable the pipewire profile.d scripts.
  pipewire-enable.sh: enable the pipewire profile.d scripts.
l/python-cffi-2.1.0-aarch64-1.txz:  Upgraded.
l/python-hatchling-1.31.0-aarch64-1.txz:  Upgraded.
l/python-scikit-build-core-1.0.1-aarch64-1.txz:  Upgraded.
l/rnnoise-0.2-aarch64-1.txz:  Added.
  Needed by mlt-7.40.0.
l/zxing-cpp-3.1.0-aarch64-1.txz:  Upgraded.
n/c-ares-1.34.8-aarch64-1.txz:  Upgraded.
n/ethtool-7.1-aarch64-1.txz:  Upgraded.
n/postfix-3.11.5-aarch64-1.txz:  Upgraded.
n/proftpd-1.3.9c-aarch64-1.txz:  Upgraded.
  This update fixes bugs and security issues:
  ExecEnviron values not passed due to regression since 1.3.8.d.
  Stack buffer overflow in MLSD/MLST handling for long path names.
  MaxTransfersPerUser no longer enforces configured limits.
  AdminControlsACLs for config, get actions not honored as they should be.
  Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
  buffers without bounds checking.
  RewriteMap unescape builtin use causes one-byte out-of-bounds write,
  fails to reject illegal characters.
  SQL group name lookup concatenates client-provided group names without
  escaping.
  Authenticated SFTP sessions can overflow the SFTP packet buffer.
  Default Controls socket ACLs unintentionally allow all users access for
  sending Controls requests.
  (* Security fix *)
x/libXfont2-2.0.8-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow.
  PCF Font Parsing Heap Buffer Overflow.
  computeProps Property Buffer Heap Buffer Overflow.
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062253.html
    https://www.cve.org/CVERecord?id=CVE-2026-56001
    https://www.cve.org/CVERecord?id=CVE-2026-56002
    https://www.cve.org/CVERecord?id=CVE-2026-56003
  (* Security fix *)
x/libva-2.24.1-aarch64-1.txz:  Upgraded.
x/wlroots-0.20.2-aarch64-1.txz:  Upgraded.
x/xkbutils-1.0.7-aarch64-1.txz:  Upgraded.
x/xlsatoms-1.1.5-aarch64-1.txz:  Upgraded.
x/xlsfonts-1.0.9-aarch64-1.txz:  Upgraded.
x/xorg-server-21.1.24-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)
x/xorg-server-xephyr-21.1.24-aarch64-1.txz:  Upgraded.
x/xorg-server-xnest-21.1.24-aarch64-1.txz:  Upgraded.
x/xorg-server-xvfb-21.1.24-aarch64-1.txz:  Upgraded.
x/xorg-server-xwayland-24.1.13-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)
xap/vim-gvim-9.2.0782-aarch64-1.txz:  Upgraded.

ChangeLog Slackware stable

ChangeLog x86 Rss - ChangeLog x86_64 Rss

Sat Jul 11 00:25:39 CEST 2026

patches/packages/p11-kit-0.26.4-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  server: fixed stack exhaustion via unbounded recursion in RPC attribute
  parsing by enforcing a recursion depth limit.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-13757
  (* Security fix *)

Fri Jul 10 01:55:49 CEST 2026

patches/packages/glibc-zoneinfo-2026c-noarch-1_slack15.0.txz:  Upgraded.
  This package provides the latest timezone updates.
extra/tigervnc/tigervnc-1.16.2-x86_64-4_slack15.0.txz:  Rebuilt.
  Recompiled against xorg-server-1.20.14, including patches for
  security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)

Wed Jul 8 23:48:24 CEST 2026

patches/packages/c-ares-1.34.8-x86_64-1_slack15.0.txz:  Upgraded.
  This is a bugfix release.
patches/packages/libXfont2-2.0.8-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow.
  PCF Font Parsing Heap Buffer Overflow.
  computeProps Property Buffer Heap Buffer Overflow.
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062253.html
    https://www.cve.org/CVERecord?id=CVE-2026-56001
    https://www.cve.org/CVERecord?id=CVE-2026-56002
    https://www.cve.org/CVERecord?id=CVE-2026-56003
  (* Security fix *)
patches/packages/proftpd-1.3.9c-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes bugs and security issues:
  ExecEnviron values not passed due to regression since 1.3.8.d.
  Stack buffer overflow in MLSD/MLST handling for long path names.
  MaxTransfersPerUser no longer enforces configured limits.
  AdminControlsACLs for config, get actions not honored as they should be.
  Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
  buffers without bounds checking.
  RewriteMap unescape builtin use causes one-byte out-of-bounds write,
  fails to reject illegal characters.
  SQL group name lookup concatenates client-provided group names without
  escaping.
  Authenticated SFTP sessions can overflow the SFTP packet buffer.
  Default Controls socket ACLs unintentionally allow all users access for
  sending Controls requests.
  (* Security fix *)
patches/packages/xorg-server-1.20.14-x86_64-21_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)
patches/packages/xorg-server-xephyr-1.20.14-x86_64-21_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xnest-1.20.14-x86_64-21_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xvfb-1.20.14-x86_64-21_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xwayland-21.1.4-x86_64-19_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)

ChangeLog Slackware arm stable

ChangeLog arm Rss

Sat Jul 11 10:08:08 CEST 2026

extra/tigervnc/tigervnc-1.16.2-arm-4_slack15.0.txz:  Rebuilt.
  Recompiled against xorg-server-1.20.14, including patches for
  security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)
patches/packages/glibc-zoneinfo-2026c-noarch-1_slack15.0.txz:  Upgraded.
  This package provides the latest timezone updates.
patches/packages/p11-kit-0.26.4-arm-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  server: fixed stack exhaustion via unbounded recursion in RPC attribute
  parsing by enforcing a recursion depth limit.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-13757
  (* Security fix *)

Thu Jul 9 10:08:08 CEST 2026

testing/packages/autoconf-2.73-noarch-1_slack15.0.txz:  Added.
patches/packages/c-ares-1.34.8-arm-1_slack15.0.txz:  Upgraded.
  This is a bugfix release.
patches/packages/libXfont2-2.0.8-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow.
  PCF Font Parsing Heap Buffer Overflow.
  computeProps Property Buffer Heap Buffer Overflow.
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062253.html
    https://www.cve.org/CVERecord?id=CVE-2026-56001
    https://www.cve.org/CVERecord?id=CVE-2026-56002
    https://www.cve.org/CVERecord?id=CVE-2026-56003
  (* Security fix *)
patches/packages/proftpd-1.3.9c-arm-1_slack15.0.txz:  Upgraded.
  This update fixes bugs and security issues:
  ExecEnviron values not passed due to regression since 1.3.8.d.
  Stack buffer overflow in MLSD/MLST handling for long path names.
  MaxTransfersPerUser no longer enforces configured limits.
  AdminControlsACLs for config, get actions not honored as they should be.
  Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
  buffers without bounds checking.
  RewriteMap unescape builtin use causes one-byte out-of-bounds write,
  fails to reject illegal characters.
  SQL group name lookup concatenates client-provided group names without
  escaping.
  Authenticated SFTP sessions can overflow the SFTP packet buffer.
  Default Controls socket ACLs unintentionally allow all users access for
  sending Controls requests.
  (* Security fix *)
patches/packages/tftp-hpa-5.4-arm-1_slack15.0.txz:  Upgraded.
  This update fixes bugs and security issues:
  Fix several security-relevant bugs in path validation
  (tftpd/path.c): an uninitialized buffer read and a broken
  path tokenizer could let a crafted or unlucky request bypass
  path restrictions or crash the daemon.
  Fix buffer overflows in the tftp client: an unbounded strcpy()
  when building requests, an out-of-bounds write when putting
  multiple files to a remote directory, and an unbounded write
  into the interactive command-line argument array.
  Fix an out-of-bounds read while scanning request fields in
  tftpd, and an incorrect address family used when creating the
  per-transfer socket on platforms without recvmsg().
  (* Security fix *)
patches/packages/xorg-server-1.20.14-arm-21_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)
patches/packages/xorg-server-xephyr-1.20.14-arm-21_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xnest-1.20.14-arm-21_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xvfb-1.20.14-arm-21_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xwayland-21.1.4-arm-13_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)

Tue Jul 7 10:08:08 CEST 2026

extra/php82/php82-8.2.32-arm-1.txz:  Upgraded.
  This update fixes a security issue:
  OpenSSL: Fixed memory corruption (zend_mm_heap corrupted) in
  openssl_encrypt with AES-WRAP-PAD.
  For more information, see:
    https://www.php.net/ChangeLog-8.php#8.2.32
    https://www.cve.org/CVERecord?id=CVE-2026-14355
  (* Security fix *)
patches/packages/c-ares-1.34.7-arm-1_slack15.0.txz:  Upgraded.
  This release fixes the following security issues:
  Use-after-free / double-free in c-ares' query-completion handling, remotely
  triggerable via ares_getaddrinfo() over TCP.
  CPU-exhaustion denial of service via unbounded DNS name compression pointer
  chains.
  Memory-amplification denial of service via unvalidated DNS header record
  counts.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-33630
    https://github.com/c-ares/c-ares/security/advisories/GHSA-6wfj-rwm7-3542
    https://github.com/c-ares/c-ares/security/advisories/GHSA-pjmc-gx33-gc76
    https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj
  (* Security fix *)
patches/packages/mutt-2.4.1-arm-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  Prevent unsigned int overflow in imap_cmd_step buffer growth.
  The idata->blen field is unsigned int (32-bit) while the companion
  variable len is size_t (64-bit on LP64). When a malicious IMAP server
  sends a response line longer than UINT_MAX bytes without newline, the
  expression wraps to a small value, causing safe_realloc() to shrink the
  buffer while len retains its original huge value. The subsequent
  mutt_socket_readln() then writes far past the shrunken allocation.
  Fix by changing idata->blen from unsigned int to size_t, matching the
  type of len and preventing the overflow on all platforms.
  (* Security fix *)
patches/packages/openssh-10.4p1-arm-1_slack15.0.txz:  Upgraded.
  This release contains a number of security fixes:
  sftp(1): when downloading files on the command-line using
  "sftp host:/path .", a malicious server could cause the file to
  be downloaded to an unexpected location. This issue was identified
  by the Swival Security Scanner.
  scp(1): when copying files between two remote destinations, do
  not allow a malicious server to write files to the parent
  directory of the intended target directory.  This issue was
  identified by the Swival Security Scanner.
  sshd(8): when using the "internal-sftp" SFTP server implementation
  (this is not the default), long command lines were previously
  truncated silently after the 9th argument. If a security-relevant
  option was in the 10th or later position, it would be discarded.
  Reported by Steve Caffrey.
  sshd(8): add a documentation note to mention that the
  GSSAPIStrictAcceptorCheck option is ineffective when the server
  is joined to a Windows Active Directory. Reported by Yarin Aharoni
  of Safebreach.
  sshd(8): DisableForwarding=yes didn't override PermitTunnel=yes
  as it was documented to do. Note that PermitTunnel is not enabled
  by default. Reported independently by Huzaifa Sidhpurwala of
  Redhat and Marko Jevtic.
  sshd(8): avoid a potential pre-authentication denial of service
  when GSSAPIAuthentication was enabled (this feature is off by
  default). This was not mitigated by MaxAuthTries, but would be
  penalised by PerSourcePenalties. This was reported by Manfred
  Kaiser of the milCERT AT (Austrian Ministry of Defence).
  sshd(8): fix a number of cases where the minimum authentication
  delay was not being enforced. Reported by the Orange Cyberdefense
  Vulnerability Team.
  ssh(1): fix a possible client-side use-after-free if the server
  changes its host key during a key reexchange. This was reported by
  Zhenpeng (Leo) Lin of Depthfirst.
  For more information, see:
    https://www.openssh.org/releasenotes.html#10.4
  (* Security fix *)

Aggiornamenti

Rss

Aggiornamenti di script e guide

24/02/2022: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware
15/12/2015: Aggiornato HowTo automatizzare la compilazione del kernel
15/12/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
24/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
22/11/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
07/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
05/11/2015: Nuovo HowTo Automatizzare l'aggiornamento di Slackware current
30/10/2015: Aggiornato HowTo Automatizzare la prima configurazione di Slackware
26/05/2015: Aggiornato HowTo mini Slackware su pendrive
07/05/2015: Aggiornato HowTo automatizzare la compilazione del kernel
13/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel
02/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel

Automatizzare l'aggiornamento di Slackware current

Questo script provvede ad aggiornare Slackware o Slackware64 all'ultima current in maniera del tutto autonoma, dalla ricerca di aggiornamenti all'aggiornamento del bootloader.

Scarica la lista dei pacchetti e la confronta con quelli installati, dopodiché controlla se i nuovi pacchetti sono presenti in un eventuale DVD già montato altrimenti li scarica da internet.

Lo script può gestire anche un sistema multilib, infatti se...

5 novembre 2015

Automatizzare la prima configurazione di Slackware

Uno script da eseguire al primo avvio di Slackware.

Mi capita spesso di fare nuove installazioni di Slackware e di ripetere sempre le stesse operazioni atte ad una prima configurazione di base, come ad esempio l'italianizzazione o l'impostazione della corretta risoluzione framebuffer.

Per cui ho deciso di raggruppare tutte queste operazioni di base, che possono...

30 dicembre 2014

Semplice sistema di sorveglianza

Ecco che la bash ci viene in aiuto anche per realizzare un semplice sistema di video sorveglianza molto economico. script

Questo script scatta una foto dalla webcam impostata nella variabile DEV con mplayer, ne fa una copia con la data corrente come nome del file per conservare una copia di tutte le foto scattate e per sapere a prima vista a quando risalgono. Dopodiché carica entrambe le copie della foto sul server ftp...

25 gennaio 2014

Logitech RX1000 pulsante 5

Spesso i produttori di hardware ottengono costi di produzione più bassi utilizzando componenti con capacità superiori in dispositivi non progettati per sfruttarle piuttosto che utilizzando componenti su misura, questo è anche il caso del mio mouse Logitech RX1000.

Aprendo il mouse e guardando le piste stampate sul retro della scheda si nota che il controller ha un pin inutilizzato, quindi leggendo il codice (CY7C63813) sul chip e trovandone il...

12 gennaio 2014

Automatizzare la compilazione del kernel

Compilare il kernel Linux non è certamente cosa difficile, ma chi è alle prime armi spesso è spaventato da questa procedura e anche per chi è pratico a volte diventa scocciante aggiornare ad ogni release. info

Dunque ho scritto questo script bash che automatizza la procedura: rileva quanti core ha il proprio processore per decidere in quanti processi paralleli eseguire la compilazione in modo da ottimizzarne i tempi, poi controlla se la versione scelta...

07 dicembre 2013

<< articoli precedenti articoli più recenti >>

Slackware Linux e risoluzione di problemi, di Andrea Peluso

ChangeLog repository

Sat Sep 3 13:07:00 CEST 2022

ChangeLog Slackware current

Sat Jul 11 00:25:39 CEST 2026

Fri Jul 10 01:55:49 CEST 2026

Wed Jul 8 23:48:24 CEST 2026

ChangeLog Slackware arm 64 current

Sun Jul 12 10:08:08 CEST 2026

Sat Jul 11 10:08:08 CEST 2026

Fri Jul 10 10:08:08 CEST 2026

ChangeLog Slackware stable

Sat Jul 11 00:25:39 CEST 2026

Fri Jul 10 01:55:49 CEST 2026

Wed Jul 8 23:48:24 CEST 2026

ChangeLog Slackware arm stable

Sat Jul 11 10:08:08 CEST 2026

Thu Jul 9 10:08:08 CEST 2026

Tue Jul 7 10:08:08 CEST 2026

Aggiornamenti

Aggiornamenti di script e guide

Automatizzare l'aggiornamento di Slackware current

Automatizzare la prima configurazione di Slackware

Semplice sistema di sorveglianza

Logitech RX1000 pulsante 5

Automatizzare la compilazione del kernel

Condividi sui tuoi social preferiti!