☑ Aggancia questa barra allo schermo | ☐ Disattiva gli effetti grafici
✖

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.

Slackware Linux e risoluzione di problemi, di Andrea Peluso


ChangeLog repository

Repository Rss

blender-3.0.1-x86_64-1_ap.txz:  Upgraded.

ChangeLog Slackware current

ChangeLog x86 Rss - ChangeLog x86_64 Rss

a/btrfs-progs-7.3-x86_64-1.txz:  Upgraded.
a/patch-2.8.1-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  Prevent creation of out-of-tree files.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-115207
  (* Security fix *)
ap/fwupd-2.1.9-x86_64-1.txz:  Upgraded.
ap/kexec-tools-2.0.32-x86_64-5.txz:  Rebuilt.
  load-latest-kernel-initrd-with-kexec.sh: prevent buildup of duplicated
  reset_devices on the kernel command line.
  Thanks to Petri Kaukasoina.
d/ruby-4.0.9-x86_64-1.txz:  Upgraded.
d/strace-7.3-x86_64-1.txz:  Upgraded.
l/dbus-python-1.5.1-x86_64-1.txz:  Upgraded.
l/glib-networking-2.90.1-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  Unbounded TLS 1.3 session ticket queue growth in glib-networking allows
  remote denial of service.
  glib-networking macOS OpenSSL backend incorrectly trusts non-SSL policy
  certificates as TLS anchors.
  glib-networking TLS client session cache key not rebuilt after certificate
  property change, allowing stale session resumption.
  glib-networking: Missing TLS purpose validation in glib-networking OpenSSL
  backend allows Extended Key Usage bypass.
  glib-networking: Unbounded memory growth in glib-networking GnuTLS backend
  application data buffer during TLS handshake allows remote denial of service.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-103963
    https://www.cve.org/CVERecord?id=CVE-2026-112963
    https://www.cve.org/CVERecord?id=CVE-2026-113624
    https://www.cve.org/CVERecord?id=CVE-2026-113622
    https://www.cve.org/CVERecord?id=CVE-2026-113623
  (* Security fix *)
l/lmdb-1.0.3-x86_64-1.txz:  Upgraded.
l/pipewire-1.6.10-x86_64-1.txz:  Upgraded.
l/python-certifi-2026.10.23-x86_64-1.txz:  Upgraded.
  Remove more eMudhra certificates.
  (* Security fix *)
l/python-pycparser-3.12-x86_64-1.txz:  Upgraded.
n/openldap-2.7.2-x86_64-1.txz:  Upgraded.
n/samba-4.25.1-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  Access control bypass via vfs_ceph_rgw case-insensitive open.
  Please note that this issue only affects the recently released 4.25.0 version
  and only the newly introduced vfs_ceph_rgw module.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-109411
  (* Security fix *)
testing/packages/mesa-26.3.0_rc2-x86_64-1.txz:  Upgraded.

a/usbutils-020-x86_64-1.txz:  Upgraded.
ap/kexec-tools-2.0.32-x86_64-4.txz:  Rebuilt.
  load-latest-kernel-initrd-with-kexec.sh: handle the case where there is no
  base initrd, but AMD and/or Intel ucode was requested.
  Thanks to Petri Kaukasoina.
ap/man-pages-6.20-noarch-1.txz:  Upgraded.
d/python-setuptools-84.2.1-x86_64-1.txz:  Upgraded.
d/ruby-4.0.8-x86_64-1.txz:  Upgraded.
l/PyQt5_sip-12.20.0-x86_64-1.txz:  Upgraded.
l/harfbuzz-15.0.0-x86_64-1.txz:  Upgraded.
l/libtraceevent-1.9.1-x86_64-1.txz:  Upgraded.
l/libtracefs-1.8.4-x86_64-1.txz:  Upgraded.
l/mozilla-nss-3.132-x86_64-1.txz:  Upgraded.
l/python-sphinx-9.2.0-x86_64-1.txz:  Upgraded.
n/getmail-6.20.02-x86_64-1.txz:  Upgraded.
n/iproute2-7.3.0-x86_64-1.txz:  Upgraded.
x/intel-media-driver-26.4.1-x86_64-1.txz:  Upgraded.
x/xkeyboard-config-2.49-noarch-1.txz:  Upgraded.
xap/xsnow-3.9.9-x86_64-1.txz:  Upgraded.
xfce/elementary-xfce-0.23-noarch-1.txz:  Upgraded.
  Thanks to 01micko for the application-x-audacity-project+sqlite3.svg fix.
kernels/memtest/memtest:  Upgraded.
  Upgraded to memtest86plus-9.00.

a/kernel-firmware-20261021_59f9fc2-noarch-1.txz:  Upgraded.
a/kernel-generic-7.2.12-x86_64-1.txz:  Upgraded.
ap/kexec-tools-2.0.32-x86_64-3.txz:  Rebuilt.
  load-latest-kernel-initrd-with-kexec.sh: add reset_devices to the kernel
  command line. Some drivers need this to initialize properly from a dirty
  state with a kexec boot.
  Thanks to teoberi.
ap/nano-9.3-x86_64-1.txz:  Upgraded.
d/kernel-headers-7.2.12-x86-1.txz:  Upgraded.
k/kernel-source-7.2.12-noarch-1.txz:  Upgraded.
l/brotli-1.2.1-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in
  Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote
  unauthenticated attacker to corrupt adjacent decoder state memory, disclose
  sensitive memory contents, cause a denial of service, or potentially execute
  arbitrary code using a crafted Brotli-compressed stream.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-111497
  (* Security fix *)
l/nodejs-24.22.1-x86_64-1.txz:  Upgraded.
n/bind-9.20.30-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  Crafted DNS messages could exhaust CPU while being parsed.
  Fix remote termination of named under concurrent GSS-TSIG traffic.
  Possible crash with redirect and qname-minimization strict.
  Fix a bug when resuming from a query initiated by RPZ.
  For more information, see:
    https://kb.isc.org/docs/CVE-2026-19630
    https://kb.isc.org/docs/CVE-2026-94300
    https://kb.isc.org/docs/CVE-2026-96888
    https://kb.isc.org/docs/CVE-2026-97313
    https://www.cve.org/CVERecord?id=CVE-2026-19630
    https://www.cve.org/CVERecord?id=CVE-2026-94300
    https://www.cve.org/CVERecord?id=CVE-2026-96888
    https://www.cve.org/CVERecord?id=CVE-2026-97313
  (* Security fix *)
n/php-8.5.12-x86_64-1.txz:  Upgraded.
  This update fixes bugs and security issues, including the following
  critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://www.php.net/ChangeLog-8.php#8.5.12
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.

ChangeLog Slackware arm 64 current

ChangeLog arm 64 Rss

a/usbutils-020-aarch64-1.txz:  Upgraded.
ap/kexec-tools-2.0.32-aarch64-3.txz:  Rebuilt.
ap/man-pages-6.20-noarch-1.txz:  Upgraded.
d/python-setuptools-84.2.1-aarch64-1.txz:  Upgraded.
d/ruby-4.0.8-aarch64-1.txz:  Upgraded.
l/PyQt5_sip-12.20.0-aarch64-1.txz:  Upgraded.
l/harfbuzz-15.0.0-aarch64-1.txz:  Upgraded.
l/libtraceevent-1.9.1-aarch64-1.txz:  Upgraded.
l/libtracefs-1.8.4-aarch64-1.txz:  Upgraded.
l/mozilla-nss-3.132-aarch64-1.txz:  Upgraded.
l/python-sphinx-9.2.0-aarch64-1.txz:  Upgraded.
n/getmail-6.20.02-aarch64-1.txz:  Upgraded.
n/iproute2-7.3.0-aarch64-1.txz:  Upgraded.
x/xkeyboard-config-2.49-aarch64-1.txz:  Upgraded.
xap/xsnow-3.9.9-aarch64-1.txz:  Upgraded.
xfce/elementary-xfce-0.23-noarch-1.txz:  Upgraded.
  Thanks to 01micko for the application-x-audacity-project+sqlite3.svg fix.

a/kernel-firmware-20261021_59f9fc2-noarch-1.txz:  Upgraded.
ap/kexec-tools-2.0.32-aarch64-2.txz:  Rebuilt.
  load-latest-kernel-initrd-with-kexec.sh: add reset_devices to the kernel
  command line. Some drivers need this to initialize properly from a dirty
  state with a kexec boot.
  Thanks to teoberi.
ap/nano-9.3-aarch64-1.txz:  Upgraded.
l/brotli-1.2.1-aarch64-1.txz:  Upgraded.
l/nodejs-24.22.1-aarch64-1.txz:  Upgraded.
n/bind-9.20.30-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  Crafted DNS messages could exhaust CPU while being parsed.
  Fix remote termination of named under concurrent GSS-TSIG traffic.
  Possible crash with redirect and qname-minimization strict.
  Fix a bug when resuming from a query initiated by RPZ.
  For more information, see:
    https://kb.isc.org/docs/CVE-2026-19630
    https://kb.isc.org/docs/CVE-2026-94300
    https://kb.isc.org/docs/CVE-2026-96888
    https://kb.isc.org/docs/CVE-2026-97313
    https://www.cve.org/CVERecord?id=CVE-2026-19630
    https://www.cve.org/CVERecord?id=CVE-2026-94300
    https://www.cve.org/CVERecord?id=CVE-2026-96888
    https://www.cve.org/CVERecord?id=CVE-2026-97313
  (* Security fix *)
n/php-8.5.12-aarch64-1.txz:  Upgraded.
  This update fixes bugs and security issues, including the following
  critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://www.php.net/ChangeLog-8.php#8.5.12
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)

a/kernel_armv8-7.2.12-aarch64-1.txz:  Upgraded.
  /boot/initrd-armv8/[load_kernel_modules]: Added modules xts & aes_ce_blk to the
  base set.  Thanks to Brent Earl.
d/google-go-lang-1.27.3-aarch64-1.txz:  Upgraded.
d/kernel-headers-7.2.12-aarch64-1.txz:  Upgraded.
d/llvm-23.1.4-aarch64-1.txz:  Upgraded.
d/python-pip-26.2.2-aarch64-1.txz:  Upgraded.
d/python-setuptools-84.2.0-aarch64-1.txz:  Upgraded.
d/rkdeveloptool-1.32-aarch64-1.txz:  Added.
  Thanks to Michales Michaloudes for the original build script, and thanks to
  SCerovec for the suggestion.
k/kernel-source-7.2.12-aarch64-1.txz:  Upgraded.
l/elfutils-0.197-aarch64-1.txz:  Upgraded.
l/libclc-23.1.4-aarch64-1.txz:  Upgraded.
l/mozilla-nss-3.131.1-aarch64-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
l/mujs-1.3.11-aarch64-1.txz:  Upgraded.
l/nodejs-24.22.0-aarch64-2.txz:  Rebuilt.
  Remove untrusted emSign certificates.
  (* Security fix *)
l/python-certifi-2026.10.19-aarch64-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
l/python-markdown-3.11.2-aarch64-1.txz:  Upgraded.
l/python-sphinx-9.1.1-aarch64-1.txz:  Upgraded.
n/c-ares-1.34.9-aarch64-1.txz:  Upgraded.
  This update fixes security issues:
  Memory corruption when an application cancels its lookups after a connection
  failure.
  A DNS reply that arrived from a different server than the one queried could
  be accepted.
  Use-after-free of a lookup after shutting down a failed connection.
  Use-after-free when an application cancels lookups from a callback, or shuts
  a channel down.
  Use-after-free of a connection after the socket-state callback returns.
  Use-after-free when an application cancels lookups from a server-state
  callback.
  Use-after-free of a server record when an application changes its DNS
  servers from a callback.
  Use-after-free of a cached DNS answer while the application is still reading
  it.
  Buffer overflow when `ares_dup()` or `ares_save_options()` runs while
  another thread changes the servers.
  Uninitialized memory returned for a numeric IPv6 name with a prefix length.
  The query cache could return an answer obtained using different EDNS
  options.
  For more information, see:
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wpr3-8q3r-4q8c
    https://github.com/c-ares/c-ares/security/advisories/GHSA-fqh5-3x7m-wp44
    https://github.com/c-ares/c-ares/security/advisories/GHSA-97vq-4mxv-7vhm
    https://github.com/c-ares/c-ares/security/advisories/GHSA-rf6g-ww74-97qh
    https://github.com/c-ares/c-ares/security/advisories/GHSA-mw23-pfg6-2x9r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-v33j-65h4-4ch8
    https://github.com/c-ares/c-ares/security/advisories/GHSA-pj7p-v3cw-hq66
    https://github.com/c-ares/c-ares/security/advisories/GHSA-grv7-fq5q-9vfc
    https://github.com/c-ares/c-ares/security/advisories/GHSA-ph6c-3cvx-mq6v
    https://github.com/c-ares/c-ares/security/advisories/GHSA-cfcv-8v2j-qj6r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wrgc-prmw-27xh
  (* Security fix *)
n/ca-certificates-20261020-noarch-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
xap/audacious-4.6.2-aarch64-1.txz:  Upgraded.
xap/audacious-plugins-4.6.2-aarch64-1.txz:  Upgraded.
xap/mozilla-firefox-153.5.1esr-aarch64-1.txz:  Upgraded.
  This update fixes a security issue.
  For more information, see:
    https://www.mozilla.org/en-US/firefox/153.5.1/releasenotes/
    https://www.mozilla.org/security/advisories/mfsa2026-112
    https://www.cve.org/CVERecord?id=CVE-2026-113470
  (* Security fix *)
xap/mozilla-thunderbird-153.5.1esr-aarch64-1.txz:  Upgraded.
  This update contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/153.5.0esr/releasenotes/
    https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/
    https://www.cve.org/CVERecord?id=CVE-2026-113866
    https://www.cve.org/CVERecord?id=CVE-2026-113867
    https://www.cve.org/CVERecord?id=CVE-2026-113868
    https://www.cve.org/CVERecord?id=CVE-2026-113470
  (* Security fix *)
installer/*:  Rebuilt.
kernels/*:  Upgraded.

ChangeLog Slackware stable

ChangeLog x86 Rss - ChangeLog x86_64 Rss

patches/packages/brotli-1.2.1-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in
  Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote
  unauthenticated attacker to corrupt adjacent decoder state memory, disclose
  sensitive memory contents, cause a denial of service, or potentially execute
  arbitrary code using a crafted Brotli-compressed stream.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-111497
  (* Security fix *)
patches/packages/patch-2.8.1-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  Prevent creation of out-of-tree files.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-115207
  (* Security fix *)
patches/packages/python-certifi-2026.10.23-x86_64-1_slack15.0.txz:  Upgraded.
  Remove more eMudhra certificates.
  (* Security fix *)

patches/packages/linux-5.15.223/kernel-generic-5.15.223-x86_64-1.txz:  Upgraded.
patches/packages/linux-5.15.223/kernel-headers-5.15.223-x86-1.txz:  Upgraded.
patches/packages/linux-5.15.223/kernel-huge-5.15.223-x86_64-1.txz:  Upgraded.
patches/packages/linux-5.15.223/kernel-modules-5.15.223-x86_64-1.txz:  Upgraded.
patches/packages/linux-5.15.223/kernel-source-5.15.223-noarch-1.txz:  Upgraded.
  This update fixes bugs and security issues, including the PwnEscape flaw.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-99999
  (* Security fix *)
  Be sure to upgrade your initrd after upgrading the kernel packages.
  If you use lilo to boot your machine, be sure lilo.conf points to the correct
  kernel and initrd and run lilo as root to update the bootloader.
  If you use elilo to boot your machine, you should run eliloconfig to copy the
  kernel and initrd to the EFI System Partition.

extra/php80/php80-8.0.30-x86_64-2_slack15.0.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
extra/php81/php81-8.1.34-x86_64-2_slack15.0.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
extra/php82/php82-8.2.35-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes bugs and security issues, including the following
  critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://www.php.net/ChangeLog-8.php#8.2.35
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
patches/packages/php-7.4.33-x86_64-4_slack15.0.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)

ChangeLog Slackware arm stable

ChangeLog arm Rss

extra/php80/php80-8.0.30-arm-2.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
extra/php81/php81-8.1.34-arm-2.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
extra/php82/php82-8.2.35-arm-1.txz:  Upgraded.
  This update fixes bugs and security issues, including the following
  critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://www.php.net/ChangeLog-8.php#8.2.35
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)
patches/packages/linux-5.15.223/*:  Upgraded.
  This update fixes bugs and security issues, including the PwnEscape flaw.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-99999
  (* Security fix *)
patches/packages/nano-9.3-arm-1_slack15.0.txz:  Upgraded.
patches/packages/php-7.4.33-arm-3_slack15.0.txz:  Rebuilt.
  This update fixes the following critical remote code execution flaw:
  Avoid state corruption via bailout.
  For more information, see:
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
    https://www.cve.org/CVERecord?id=CVE-2026-109618
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  (* Security fix *)

patches/packages/c-ares-1.34.9-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Memory corruption when an application cancels its lookups after a connection
  failure.
  A DNS reply that arrived from a different server than the one queried could
  be accepted.
  Use-after-free of a lookup after shutting down a failed connection.
  Use-after-free when an application cancels lookups from a callback, or shuts
  a channel down.
  Use-after-free of a connection after the socket-state callback returns.
  Use-after-free when an application cancels lookups from a server-state
  callback.
  Use-after-free of a server record when an application changes its DNS
  servers from a callback.
  Use-after-free of a cached DNS answer while the application is still reading
  it.
  Buffer overflow when `ares_dup()` or `ares_save_options()` runs while
  another thread changes the servers.
  Uninitialized memory returned for a numeric IPv6 name with a prefix length.
  The query cache could return an answer obtained using different EDNS
  options.
  For more information, see:
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wpr3-8q3r-4q8c
    https://github.com/c-ares/c-ares/security/advisories/GHSA-fqh5-3x7m-wp44
    https://github.com/c-ares/c-ares/security/advisories/GHSA-97vq-4mxv-7vhm
    https://github.com/c-ares/c-ares/security/advisories/GHSA-rf6g-ww74-97qh
    https://github.com/c-ares/c-ares/security/advisories/GHSA-mw23-pfg6-2x9r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-v33j-65h4-4ch8
    https://github.com/c-ares/c-ares/security/advisories/GHSA-pj7p-v3cw-hq66
    https://github.com/c-ares/c-ares/security/advisories/GHSA-grv7-fq5q-9vfc
    https://github.com/c-ares/c-ares/security/advisories/GHSA-ph6c-3cvx-mq6v
    https://github.com/c-ares/c-ares/security/advisories/GHSA-cfcv-8v2j-qj6r
    https://github.com/c-ares/c-ares/security/advisories/GHSA-wrgc-prmw-27xh
  (* Security fix *)
patches/packages/ca-certificates-20261020-noarch-1_slack15.0.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
patches/packages/mozilla-nss-3.131.1-arm-1_slack15.0.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)
patches/packages/python-certifi-2026.10.19-arm-1_slack15.0.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
  (* Security fix *)


Slackware Linux on ARM is kept running by a small farm of build machines
humming away in the background - and by the people who help keep them
running. If the project is useful to you, please consider chipping in.
Donations pay for build hardware, electricity, and the time it takes
to keep the port current and moving forward.

Details on how to contribute are here:
   https://arm.slackware.com/sponsor/

A big thank you to everyone who has already supported the project - it
makes a real difference, and it is very much appreciated.


  Stuart Winter <mozes@slackware>

patches/packages/libX11-1.8.14-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  ximcp: bound XIM_OPEN_REPLY attribute lengths.
  ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths.
  lcGenConv: bound byteM_parse_codeset() reads.
  xkb: Check the keysym range in _XkbReadKeyActions.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003753.html
    https://www.cve.org/CVERecord?id=CVE-2026-94283
    https://www.cve.org/CVERecord?id=CVE-2026-94284
    https://www.cve.org/CVERecord?id=CVE-2026-94285
    https://www.cve.org/CVERecord?id=CVE-2026-88806
  (* Security fix *)
patches/packages/libXi-1.8.4-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Out-of-bounds read in libXi's XQueryDeviceState().
  Out-of-bounds read in libXi's XI2 class parsing via size_classes()
  and copy_classes().
  Out-of-bounds read in libXi's XI2 class parser.
  Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing.
  Out-of-bounds read in libXi's XListInputDevices().
  Out-of-bounds read in libXi's XListInputDevices() class parsing.
  Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion.
  libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow.
  libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-93541
    https://www.cve.org/CVERecord?id=CVE-2026-93542
    https://www.cve.org/CVERecord?id=CVE-2026-93543
    https://www.cve.org/CVERecord?id=CVE-2026-93544
    https://www.cve.org/CVERecord?id=CVE-2026-93545
    https://www.cve.org/CVERecord?id=CVE-2026-94282
    https://www.cve.org/CVERecord?id=CVE-2026-109089
    https://www.cve.org/CVERecord?id=CVE-2026-109090
  (* Security fix *)
patches/packages/libXpm-3.5.20-arm-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  Denial of service via unsigned underflow in libXpm's write path.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-94287
  (* Security fix *)
patches/packages/libXrender-0.9.13-arm-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  Out-of-bounds read in libXrender's XRenderQueryFormat reply parser.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-88807
  (* Security fix *)
patches/packages/libXtst-1.2.6-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  parse_reply_call_callback: check element size against remaining reply buffer.
  parse_reply_call_callback: reject zero-progress RECORD reply elements.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003757.html
    https://www.cve.org/CVERecord?id=CVE-2026-94286
    https://www.cve.org/CVERecord?id=CVE-2026-109088
  (* Security fix *)

Aggiornamenti

Rss

Aggiornamenti di script e guide

24/02/2022: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware
15/12/2015: Aggiornato HowTo automatizzare la compilazione del kernel
15/12/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
24/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
22/11/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
07/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
05/11/2015: Nuovo HowTo Automatizzare l'aggiornamento di Slackware current
30/10/2015: Aggiornato HowTo Automatizzare la prima configurazione di Slackware
26/05/2015: Aggiornato HowTo mini Slackware su pendrive
07/05/2015: Aggiornato HowTo automatizzare la compilazione del kernel
13/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel
02/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel



Automatizzare l'aggiornamento di Slackware current

Questo script provvede ad aggiornare Slackware o Slackware64 all'ultima current in maniera del tutto autonoma, dalla ricerca di aggiornamenti all'aggiornamento del bootloader.

script

Scarica la lista dei pacchetti e la confronta con quelli installati, dopodiché controlla se i nuovi pacchetti sono presenti in un eventuale DVD già montato altrimenti li scarica da internet.

Lo script può gestire anche un sistema multilib, infatti se...

Leggi tutto...

Automatizzare la prima configurazione di Slackware

Uno script da eseguire al primo avvio di Slackware.

script

Mi capita spesso di fare nuove installazioni di Slackware e di ripetere sempre le stesse operazioni atte ad una prima configurazione di base, come ad esempio l'italianizzazione o l'impostazione della corretta risoluzione framebuffer.

Per cui ho deciso di raggruppare tutte queste operazioni di base, che possono...

Leggi tutto...

Semplice sistema di sorveglianza

Ecco che la bash ci viene in aiuto anche per realizzare un semplice sistema di video sorveglianza molto economico. script

Questo script scatta una foto dalla webcam impostata nella variabile DEV con mplayer, ne fa una copia con la data corrente come nome del file per conservare una copia di tutte le foto scattate e per sapere a prima vista a quando risalgono. Dopodiché carica entrambe le copie della foto sul server ftp...

Leggi tutto...

Logitech RX1000 pulsante 5

Spesso i produttori di hardware ottengono costi di produzione più bassi utilizzando componenti con capacità superiori in dispositivi non progettati per sfruttarle piuttosto che utilizzando componenti su misura, questo è anche il caso del mio mouse Logitech RX1000. hardware

Aprendo il mouse e guardando le piste stampate sul retro della scheda si nota che il controller ha un pin inutilizzato, quindi leggendo il codice (CY7C63813) sul chip e trovandone il...

Leggi tutto...

Automatizzare la compilazione del kernel

Compilare il kernel Linux non è certamente cosa difficile, ma chi è alle prime armi spesso è spaventato da questa procedura e anche per chi è pratico a volte diventa scocciante aggiornare ad ogni release. info

Dunque ho scritto questo script bash che automatizza la procedura: rileva quanti core ha il proprio processore per decidere in quanti processi paralleli eseguire la compilazione in modo da ottimizzarne i tempi, poi controlla se la versione scelta...

Leggi tutto...



   articoli più recenti >>

Condividi sui tuoi social preferiti!

Telegram Facebook Linkedin Twitter Pinterest
.
↑