https://www.sya54m.eu Latest 20 entries in the Slackware-15.0 ChangeLog https://www.sya54m.eu/immagini/s256.png https://www.sya54m.eu en Sat, 17 Oct 2026 00:41:46 +0200 Sat, 17 Oct 2026 14:30:09 +0200 www.sya54m.eu https://www.sya54m.eu Sat, 17 Oct 2026 00:41:46 +0200 1792190506 patches/packages/libX11-1.8.14-i586-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  ximcp: bound XIM_OPEN_REPLY attribute lengths.
  ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths.
  lcGenConv: bound byteM_parse_codeset() reads.
  xkb: Check the keysym range in _XkbReadKeyActions.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003753.html
    https://www.cve.org/CVERecord?id=CVE-2026-94283
    https://www.cve.org/CVERecord?id=CVE-2026-94284
    https://www.cve.org/CVERecord?id=CVE-2026-94285
    https://www.cve.org/CVERecord?id=CVE-2026-88806
  (* Security fix *)
patches/packages/libXi-1.8.4-i586-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Out-of-bounds read in libXi's XQueryDeviceState().
  Out-of-bounds read in libXi's XI2 class parsing via size_classes()
  and copy_classes().
  Out-of-bounds read in libXi's XI2 class parser.
  Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing.
  Out-of-bounds read in libXi's XListInputDevices().
  Out-of-bounds read in libXi's XListInputDevices() class parsing.
  Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion.
  libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow.
  libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-93541
    https://www.cve.org/CVERecord?id=CVE-2026-93542
    https://www.cve.org/CVERecord?id=CVE-2026-93543
    https://www.cve.org/CVERecord?id=CVE-2026-93544
    https://www.cve.org/CVERecord?id=CVE-2026-93545
    https://www.cve.org/CVERecord?id=CVE-2026-94282
    https://www.cve.org/CVERecord?id=CVE-2026-109089
    https://www.cve.org/CVERecord?id=CVE-2026-109090
  (* Security fix *)
patches/packages/libXpm-3.5.20-i586-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  Denial of service via unsigned underflow in libXpm's write path.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-94287
  (* Security fix *)
patches/packages/libXrender-0.9.13-i586-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  Out-of-bounds read in libXrender's XRenderQueryFormat reply parser.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-88807
  (* Security fix *)
]]> https://www.sya54m.eu Wed, 14 Oct 2026 23:48:34 +0200 1792014514 patches/packages/libarchive-3.8.10-i586-1_slack15.0.txz:  Upgraded.
  Libarchive 3.8.10 is a security, bugfix and minor feature release.
  For more information, see:
    https://github.com/libarchive/libarchive/compare/v3.8.9...v3.8.10
  (* Security fix *)
]]> https://www.sya54m.eu Wed, 14 Oct 2026 02:05:38 +0200 1791936338 patches/packages/expat-2.9.0-i586-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Integer overflow in function expat_realloc on 32bit platforms.
  Validate parameter `len` against available buffer capacity in
  XML_ParseBuffer.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-102633
    https://www.cve.org/CVERecord?id=CVE-2026-77214
  (* Security fix *)
]]> https://www.sya54m.eu Sat, 10 Oct 2026 02:31:52 +0200 1791592312 patches/packages/libxml2-2.11.9-i586-12_slack15.0.txz:  Rebuilt.
  One of the recent patches (a7511af09f99995cdf81994db21f4eba564276b5) for a
  relatively minor issue (an out of bounds read) is causing regressions.
  We'll look into whether the patch requires some other commits to work
  properly or if it can be fixed, but for now revert it.
  Thanks to baldzhang.
]]> https://www.sya54m.eu Sat, 10 Oct 2026 01:12:04 +0200 1791587524 patches/packages/mutt-2.4.3-i586-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  When an email is processed as a template, an out-of-bounds write
  vulnerability in the convert_file_from_to() function can be triggered
  by a specially crafted Content-Type header. A remote attacker could
  entice a user to use a malicious email message as a template, potentially
  leading to memory corruption and application instability.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-107570
  (* Security fix *)
]]> https://www.sya54m.eu Thu, 08 Oct 2026 01:52:05 +0200 1791417125 patches/packages/xorg-server-1.20.14-i586-22_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  XKB SetGeometry TextDoodad Double Free.
  Present Extension Cross-Window Notify Use-After-Free.
  GLX RenderLarge Heap Buffer Overflow.
  XKB ResizeKeyType Numeric Truncation.
  XFixes Pointer Barrier Event List Buffer Overflow.
  XKB ChangeKeycodeRange Heap Out-of-Bounds Write.
  RandR ChangeProviderProperty Heap Buffer Overflow.
  XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write.
  XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003747.html
    https://www.cve.org/CVERecord?id=CVE-2026-88812
    https://www.cve.org/CVERecord?id=CVE-2026-93515
    https://www.cve.org/CVERecord?id=CVE-2026-93517
    https://www.cve.org/CVERecord?id=CVE-2026-93518
    https://www.cve.org/CVERecord?id=CVE-2026-93519
    https://www.cve.org/CVERecord?id=CVE-2026-93520
    https://www.cve.org/CVERecord?id=CVE-2026-93521
    https://www.cve.org/CVERecord?id=CVE-2026-93523
    https://www.cve.org/CVERecord?id=CVE-2026-93524
  (* Security fix *)
patches/packages/xorg-server-xephyr-1.20.14-i586-22_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xnest-1.20.14-i586-22_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xvfb-1.20.14-i586-22_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xwayland-21.1.4-i586-20_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  XKB SetGeometry TextDoodad Double Free.
  Present Extension Cross-Window Notify Use-After-Free.
  GLX RenderLarge Heap Buffer Overflow.
  XKB ResizeKeyType Numeric Truncation.
  XFixes Pointer Barrier Event List Buffer Overflow.
  XKB ChangeKeycodeRange Heap Out-of-Bounds Write.
  RandR ChangeProviderProperty Heap Buffer Overflow.
  XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write.
  XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003747.html
    https://www.cve.org/CVERecord?id=CVE-2026-88812
    https://www.cve.org/CVERecord?id=CVE-2026-93515
    https://www.cve.org/CVERecord?id=CVE-2026-93517
    https://www.cve.org/CVERecord?id=CVE-2026-93518
    https://www.cve.org/CVERecord?id=CVE-2026-93519
    https://www.cve.org/CVERecord?id=CVE-2026-93520
    https://www.cve.org/CVERecord?id=CVE-2026-93521
    https://www.cve.org/CVERecord?id=CVE-2026-93523
    https://www.cve.org/CVERecord?id=CVE-2026-93524
  (* Security fix *)
]]> https://www.sya54m.eu Wed, 07 Oct 2026 01:28:23 +0200 1791329303 patches/packages/openssh-10.6p1-i586-1_slack15.0.txz:  Upgraded.
  This update fixes bugs and security issues:
  For more information, see:
    http://www.openssh.org/releasenotes.html#10.6
  (* Security fix *)
]]> https://www.sya54m.eu Tue, 06 Oct 2026 00:56:24 +0200 1791240984 patches/packages/cups-2.4.20-i586-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  The scheduler did not open temporary PPD files in exclusive mode.
  The scheduler did not remove all job status attributes from a job creation
  request.
  The scheduler did not validate the request language value.
  Attribute names were not validated as proper keyword values.
  The `cupsUTF32toUTF8` function incorrectly treated UTF-32 values as 64-bit.
  Held jobs for temporary print queues could crash the scheduler.
  The backend did not sanitize IPP attribute strings.
  The scheduler did not filter out group separators from job submissions.
  Quota and policy operations did not treat usernames as case-sensitive.
  The scheduler's startup permission checks were vulnerable to TOU attacks.
  The scheduler did not sanitize fax numbers.
  The 'mailto' notifier did not sanitize the recipient address provided to the
  sendmail command.
  The scheduler could crash when modifying a class.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-55480
    https://github.com/openprinting/cups/security/advisories/GHSA-r9hj-j2rw-4q3m
    https://github.com/openprinting/cups/security/advisories/GHSA-7j85-5r23-xhvh
    https://www.cve.org/CVERecord?id=CVE-2026-61702
    https://github.com/openprinting/cups/security/advisories/GHSA-w9hj-hq9p-m7f6
    https://www.cve.org/CVERecord?id=CVE-2026-87875
    https://github.com/openprinting/cups/security/advisories/GHSA-qqm8-4q5h-jg55
    https://www.cve.org/CVERecord?id=CVE-2026-55453
    https://github.com/openprinting/cups/security/advisories/GHSA-wjc4-qhjr-5m5x
    https://www.cve.org/CVERecord?id=CVE-2026-87876
    https://github.com/openprinting/cups/security/advisories/GHSA-gj33-wxpv-6fgg
    https://www.cve.org/CVERecord?id=CVE-2026-55467
    https://www.cve.org/CVERecord?id=CVE-2026-105326
    https://github.com/openprinting/cups/security/advisories/GHSA-pwg4-pv39-8c22
  (* Security fix *)
]]> https://www.sya54m.eu Fri, 02 Oct 2026 02:44:52 +0200 1790901892 patches/packages/glibc-zoneinfo-2026e-noarch-1_slack15.0.txz:  Upgraded.
  This package provides the latest timezone updates.
patches/packages/httpd-2.4.69-i586-1_slack15.0.txz:  Upgraded.
  This is a bugfix release.
  For more information, see:
    https://downloads.apache.org/httpd/CHANGES_2.4.69
]]> https://www.sya54m.eu Thu, 01 Oct 2026 02:51:38 +0200 1790815898 patches/packages/libpng-1.6.59-i586-1_slack15.0.txz:  Upgraded.
  Fixed use-after-free of zlib input in `png_read_end` after incomplete zTXt,
  iTXt or iCCP decompression.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-46675
  (* Security fix *)
patches/packages/mozilla-thunderbird-140.17.0esr-i686-1_slack15.0.txz:  Upgraded.
  This release contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/140.17.0esr/releasenotes/
    https://www.mozilla.org/en-US/security/advisories/mfsa2026-102/
    https://www.cve.org/CVERecord?id=CVE-2026-103500
    https://www.cve.org/CVERecord?id=CVE-2026-100756
    https://www.cve.org/CVERecord?id=CVE-2026-100757
    https://www.cve.org/CVERecord?id=CVE-2026-100758
    https://www.cve.org/CVERecord?id=CVE-2026-100759
    https://www.cve.org/CVERecord?id=CVE-2026-100762
    https://www.cve.org/CVERecord?id=CVE-2026-92035
    https://www.cve.org/CVERecord?id=CVE-2026-100766
    https://www.cve.org/CVERecord?id=CVE-2026-100767
    https://www.cve.org/CVERecord?id=CVE-2026-100769
    https://www.cve.org/CVERecord?id=CVE-2026-100770
    https://www.cve.org/CVERecord?id=CVE-2026-100771
    https://www.cve.org/CVERecord?id=CVE-2026-100772
    https://www.cve.org/CVERecord?id=CVE-2026-100773
    https://www.cve.org/CVERecord?id=CVE-2026-100774
    https://www.cve.org/CVERecord?id=CVE-2026-100775
    https://www.cve.org/CVERecord?id=CVE-2026-100776
    https://www.cve.org/CVERecord?id=CVE-2026-100777
    https://www.cve.org/CVERecord?id=CVE-2026-100778
    https://www.cve.org/CVERecord?id=CVE-2026-100779
    https://www.cve.org/CVERecord?id=CVE-2026-100780
    https://www.cve.org/CVERecord?id=CVE-2026-100781
    https://www.cve.org/CVERecord?id=CVE-2026-100782
    https://www.cve.org/CVERecord?id=CVE-2026-100783
    https://www.cve.org/CVERecord?id=CVE-2026-100784
    https://www.cve.org/CVERecord?id=CVE-2026-100785
    https://www.cve.org/CVERecord?id=CVE-2026-100786
    https://www.cve.org/CVERecord?id=CVE-2026-100788
    https://www.cve.org/CVERecord?id=CVE-2026-100789
    https://www.cve.org/CVERecord?id=CVE-2026-100790
    https://www.cve.org/CVERecord?id=CVE-2026-100791
    https://www.cve.org/CVERecord?id=CVE-2026-100832
    https://www.cve.org/CVERecord?id=CVE-2026-100792
    https://www.cve.org/CVERecord?id=CVE-2026-100794
    https://www.cve.org/CVERecord?id=CVE-2026-96869
    https://www.cve.org/CVERecord?id=CVE-2026-100797
    https://www.cve.org/CVERecord?id=CVE-2026-100801
    https://www.cve.org/CVERecord?id=CVE-2026-100803
    https://www.cve.org/CVERecord?id=CVE-2026-100807
    https://www.cve.org/CVERecord?id=CVE-2026-100811
    https://www.cve.org/CVERecord?id=CVE-2026-100818
    https://www.cve.org/CVERecord?id=CVE-2026-100819
    https://www.cve.org/CVERecord?id=CVE-2026-100820
    https://www.cve.org/CVERecord?id=CVE-2026-100821
  (* Security fix *)
patches/packages/pcre2-10.49-i586-2_slack15.0.txz:  Rebuilt.
  Fixed missing _slack15.0 tag. Thanks to lucabon.
]]> https://www.sya54m.eu Wed, 30 Sep 2026 00:57:16 +0200 1790722636 patches/packages/groff-1.24.2-i586-2_slack15.0.txz:  Rebuilt.
  Revert a commit that's causing performance issues.
  Thanks to opty.
patches/packages/mozilla-firefox-140.17.0esr-i686-1_slack15.0.txz:  Upgraded.
  This update contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/firefox/140.17.0/releasenotes/
    https://www.mozilla.org/security/advisories/mfsa2026-99/
    https://www.cve.org/CVERecord?id=CVE-2026-100756
    https://www.cve.org/CVERecord?id=CVE-2026-100757
    https://www.cve.org/CVERecord?id=CVE-2026-100758
    https://www.cve.org/CVERecord?id=CVE-2026-100759
    https://www.cve.org/CVERecord?id=CVE-2026-100762
    https://www.cve.org/CVERecord?id=CVE-2026-92035
    https://www.cve.org/CVERecord?id=CVE-2026-100766
    https://www.cve.org/CVERecord?id=CVE-2026-100767
    https://www.cve.org/CVERecord?id=CVE-2026-100769
    https://www.cve.org/CVERecord?id=CVE-2026-100770
    https://www.cve.org/CVERecord?id=CVE-2026-100771
    https://www.cve.org/CVERecord?id=CVE-2026-100772
    https://www.cve.org/CVERecord?id=CVE-2026-100773
    https://www.cve.org/CVERecord?id=CVE-2026-100774
    https://www.cve.org/CVERecord?id=CVE-2026-100775
    https://www.cve.org/CVERecord?id=CVE-2026-100776
    https://www.cve.org/CVERecord?id=CVE-2026-100777
    https://www.cve.org/CVERecord?id=CVE-2026-100778
    https://www.cve.org/CVERecord?id=CVE-2026-100779
    https://www.cve.org/CVERecord?id=CVE-2026-100780
    https://www.cve.org/CVERecord?id=CVE-2026-100781
    https://www.cve.org/CVERecord?id=CVE-2026-100782
    https://www.cve.org/CVERecord?id=CVE-2026-100783
    https://www.cve.org/CVERecord?id=CVE-2026-100784
    https://www.cve.org/CVERecord?id=CVE-2026-100785
    https://www.cve.org/CVERecord?id=CVE-2026-100786
    https://www.cve.org/CVERecord?id=CVE-2026-100788
    https://www.cve.org/CVERecord?id=CVE-2026-100789
    https://www.cve.org/CVERecord?id=CVE-2026-100790
    https://www.cve.org/CVERecord?id=CVE-2026-100791
    https://www.cve.org/CVERecord?id=CVE-2026-100832
    https://www.cve.org/CVERecord?id=CVE-2026-100792
    https://www.cve.org/CVERecord?id=CVE-2026-100794
    https://www.cve.org/CVERecord?id=CVE-2026-96869
    https://www.cve.org/CVERecord?id=CVE-2026-100797
    https://www.cve.org/CVERecord?id=CVE-2026-100801
    https://www.cve.org/CVERecord?id=CVE-2026-100803
    https://www.cve.org/CVERecord?id=CVE-2026-100807
    https://www.cve.org/CVERecord?id=CVE-2026-100811
    https://www.cve.org/CVERecord?id=CVE-2026-100818
    https://www.cve.org/CVERecord?id=CVE-2026-100819
    https://www.cve.org/CVERecord?id=CVE-2026-100820
    https://www.cve.org/CVERecord?id=CVE-2026-100821
  (* Security fix *)
]]> https://www.sya54m.eu Tue, 29 Sep 2026 00:17:10 +0200 1790633830 patches/packages/groff-1.24.2-i586-1_slack15.0.txz:  Upgraded.
  This release corrects command injection security vulnerabilities
  (CWE-78) in the mmroff, pdfmom, and pre-grohtml programs. The last of
  these is a preprocessor that is run when groff or troff is run with the
  `-T html` or `-T xhtml` options. The vulnerabilities are variously
  14-26 years old. Malicious input can escape groff's default "safer"
  mode, running commands embedded in that input at the user's privilege
  level. The groff development team recommends this release to any users
  who employ the named tools or GNU troff output formats with untrusted
  inputs.
  (* Security fix *)
patches/packages/pcre2-10.49-i586-1.txz:  Upgraded.
  This update fixes a security issue.
  An attacker-controlled regex pattern could lead to an out-of-bounds write
  with arbitrary data.
  For more information, see:
    https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m
  (* Security fix *)
]]> https://www.sya54m.eu Fri, 25 Sep 2026 01:11:03 +0200 1790291463 extra/php82/php82-8.2.34-i586-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  FPM: IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address
  comparison.
  OpenSSL: TLS hostname verification falls back to CN after SAN mismatch.
  OpenSSL: Heap buffer overflow in php_openssl_matches_wildcard_name() on
  crafted server certificate wildcard CN.
  Phar: Integer overflow in phar_tar_number() allowing TAR archive entry
  injection.
  SOAP: Unbounded recursion in server-side cleanup_xml_node().
  SOAP: Integer overflow to buffer overflow in SOAP HTTP parsing.
  Standard: Out-of-bounds read in convert.* stream filters when
  line-break-chars contains NUL.
  Standard: Cross-origin credential leak in HTTP stream wrapper redirects.
  Standard: Out-of-bounds read in the HTTP stream wrapper when following a
  redirect with an empty Location header.
  For more information, see:
    https://www.php.net/ChangeLog-8.php#8.2.34
    https://www.cve.org/CVERecord?id=CVE-2026-91768
    https://www.cve.org/CVERecord?id=CVE-2025-1218
    https://www.cve.org/CVERecord?id=CVE-2026-91769
    https://www.cve.org/CVERecord?id=CVE-2026-91767
    https://www.cve.org/CVERecord?id=CVE-2026-6103
    https://www.cve.org/CVERecord?id=CVE-2026-91765
    https://www.cve.org/CVERecord?id=CVE-2025-14181
    https://www.cve.org/CVERecord?id=CVE-2026-92842
    https://www.cve.org/CVERecord?id=CVE-2026-91766
    https://www.cve.org/CVERecord?id=CVE-2026-93682
    https://www.cve.org/CVERecord?id=CVE-2026-17545
  (* Security fix *)
]]> https://www.sya54m.eu Mon, 21 Sep 2026 23:52:23 +0200 1790027543 patches/packages/rsync-3.5.1-i586-1_slack15.0.txz:  Upgraded.
  This is a bugfix release.
  For more information, see /usr/doc/rsync-3.5.1/NEWS.md.
patches/packages/util-linux-2.42.4-i586-1_slack15.0.txz:  Upgraded.
  This update fixes bugs and a security issue:
  nsenter: close cgroup.procs fd after join to prevent authority leak.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-78408
  (* Security fix *)
]]> https://www.sya54m.eu Fri, 18 Sep 2026 23:22:03 +0200 1789766523 patches/packages/stunnel-5.82-i586-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Fixed truncation and out-of-bounds reads when inheriting binary
  session ticket keys containing null bytes (thanks to Jose A. Diaz).
  Prevented OCSP stapling response failures from terminating the
  daemon (thanks to Jose A. Diaz).
  (* Security fix *)
]]> https://www.sya54m.eu Thu, 17 Sep 2026 00:54:54 +0200 1789599294 patches/packages/mozilla-firefox-140.16.0esr-i686-1_slack15.0.txz:  Upgraded.
  This update contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/firefox/140.16.0/releasenotes/
    https://www.mozilla.org/security/advisories/mfsa2026-92/
    https://www.cve.org/CVERecord?id=CVE-2026-92005
    https://www.cve.org/CVERecord?id=CVE-2026-92006
    https://www.cve.org/CVERecord?id=CVE-2026-92007
    https://www.cve.org/CVERecord?id=CVE-2026-92008
    https://www.cve.org/CVERecord?id=CVE-2026-92009
    https://www.cve.org/CVERecord?id=CVE-2026-92010
    https://www.cve.org/CVERecord?id=CVE-2026-92011
    https://www.cve.org/CVERecord?id=CVE-2026-92012
    https://www.cve.org/CVERecord?id=CVE-2026-92013
    https://www.cve.org/CVERecord?id=CVE-2026-92014
    https://www.cve.org/CVERecord?id=CVE-2026-92015
    https://www.cve.org/CVERecord?id=CVE-2026-92016
    https://www.cve.org/CVERecord?id=CVE-2026-92017
    https://www.cve.org/CVERecord?id=CVE-2026-92018
    https://www.cve.org/CVERecord?id=CVE-2026-92019
    https://www.cve.org/CVERecord?id=CVE-2026-92020
    https://www.cve.org/CVERecord?id=CVE-2026-92021
    https://www.cve.org/CVERecord?id=CVE-2026-92022
    https://www.cve.org/CVERecord?id=CVE-2026-92023
    https://www.cve.org/CVERecord?id=CVE-2026-92024
    https://www.cve.org/CVERecord?id=CVE-2026-92025
    https://www.cve.org/CVERecord?id=CVE-2026-92026
    https://www.cve.org/CVERecord?id=CVE-2026-92027
    https://www.cve.org/CVERecord?id=CVE-2026-92028
    https://www.cve.org/CVERecord?id=CVE-2026-92029
    https://www.cve.org/CVERecord?id=CVE-2026-92030
    https://www.cve.org/CVERecord?id=CVE-2026-92031
    https://www.cve.org/CVERecord?id=CVE-2026-92032
  (* Security fix *)
patches/packages/mozilla-thunderbird-140.16.0esr-i686-1_slack15.0.txz:  Upgraded.
  This release contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/140.16.0esr/releasenotes/
    https://www.mozilla.org/en-US/security/advisories/mfsa2026-95/
    https://www.cve.org/CVERecord?id=CVE-2026-92238
    https://www.cve.org/CVERecord?id=CVE-2026-92239
    https://www.cve.org/CVERecord?id=CVE-2026-92240
    https://www.cve.org/CVERecord?id=CVE-2026-92005
    https://www.cve.org/CVERecord?id=CVE-2026-92006
    https://www.cve.org/CVERecord?id=CVE-2026-92007
    https://www.cve.org/CVERecord?id=CVE-2026-92008
    https://www.cve.org/CVERecord?id=CVE-2026-92009
    https://www.cve.org/CVERecord?id=CVE-2026-92010
    https://www.cve.org/CVERecord?id=CVE-2026-92011
    https://www.cve.org/CVERecord?id=CVE-2026-92012
    https://www.cve.org/CVERecord?id=CVE-2026-92013
    https://www.cve.org/CVERecord?id=CVE-2026-92014
    https://www.cve.org/CVERecord?id=CVE-2026-92015
    https://www.cve.org/CVERecord?id=CVE-2026-92016
    https://www.cve.org/CVERecord?id=CVE-2026-92017
    https://www.cve.org/CVERecord?id=CVE-2026-92018
    https://www.cve.org/CVERecord?id=CVE-2026-92019
    https://www.cve.org/CVERecord?id=CVE-2026-92020
    https://www.cve.org/CVERecord?id=CVE-2026-92021
    https://www.cve.org/CVERecord?id=CVE-2026-92022
    https://www.cve.org/CVERecord?id=CVE-2026-92023
    https://www.cve.org/CVERecord?id=CVE-2026-92024
    https://www.cve.org/CVERecord?id=CVE-2026-92025
    https://www.cve.org/CVERecord?id=CVE-2026-92026
    https://www.cve.org/CVERecord?id=CVE-2026-92027
    https://www.cve.org/CVERecord?id=CVE-2026-92028
    https://www.cve.org/CVERecord?id=CVE-2026-92029
    https://www.cve.org/CVERecord?id=CVE-2026-92030
    https://www.cve.org/CVERecord?id=CVE-2026-92031
    https://www.cve.org/CVERecord?id=CVE-2026-92032
  (* Security fix *)
]]> https://www.sya54m.eu Tue, 15 Sep 2026 00:10:20 +0200 1789423820 patches/packages/speech-dispatcher-0.12.1-i586-1_slack15.0.txz:  Upgraded.
  Needed by mozilla-firefox-140.15.0esr.
  Thanks to Lockywolf.
]]> https://www.sya54m.eu Sun, 13 Sep 2026 00:41:37 +0200 1789252897 patches/packages/glibc-zoneinfo-2026d-noarch-1_slack15.0.txz:  Upgraded.
  This package provides the latest timezone updates.
]]> https://www.sya54m.eu Fri, 11 Sep 2026 02:35:54 +0200 1789086954 patches/packages/ca-certificates-20260910-noarch-1_slack15.0.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
]]> https://www.sya54m.eu Thu, 10 Sep 2026 02:16:15 +0200 1788999375 patches/packages/xz-5.8.4-i586-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  liblzma: lzma_alone_decoder(), lzma_lzip_decoder(), lzma_auto_decoder(),
  and lzma_microlzma_decoder(): Fix an invalid memory access after memory
  allocation has failed and the application reinitializes the existing
  decoder to decode a different file. This bug could at least result in a
  crash.
  For more information, see:
    https://github.com/tukaani-project/xz/security/advisories/GHSA-5qpq-xqfv-j9pg
  (* Security fix *)
]]>