Benvenuti su Slacky.eu - Italian Slackware Community

Community dedicata alla distribuzione Slackware Linux.

Slacky.eu è un progetto che offre un Forum in italiano per Slackware Linux, leggi la nostra storia.

Aggiornamenti dal mondo Slackware

News

3 Febbraio 2022 - Slackware 15.0

Oggi (2 febbraio alle 22:22 orario UTC) è stata finalmente rilasciata la Slackware 15.0. Vi aspettiamo nel forum per commentare. Happy fun :)

13 Gennaio 2022 - Slackware 15 RC3

Siamo arrivati alla terza, e a meno di sorprese, l'ultima Release Candidate di Slackware 15. Da ora in poi ci saranno modifiche solo in caso di problemi seri, ma tutto lascia supporre che il 17 gennaio, come anticipato da Pat su LinuxQuestions, esca la tanto sospirata versione 15. Ti aspettiamo nel forum per parlarne.

16 Agosto 2021 - Slackware 15 RC1

È uscita stanotte la prima Release Candidate di Slackware 15. Come ha scritto Pat si tratta di un "congelamento", a meno di bugfix. Questo significa che la 15.0 sarà rilasciata con i software nella versione presente in questa RC1, a meno appunto di bug trovati, o aggiornamenti di sicurezza.

15 Aprile 2021 - Slackware 15 beta

Qualche giorno fa Pat ha rilasciato un corposo aggiornamento definendolo beta. La data dell'uscita di Slackware 15 si fa sempre più vicina.


ChangeLog

Slackware Current

			
  • Fri, 16 Oct 2026 22:41:46 +0000
    Fri Oct 16 22:41:46 UTC 2026
    a/sysvinit-scripts-16.0-noarch-8.txz: Rebuilt.
    rc.6: if a new kernel/initrd was loaded with kexec, do a kexec reboot.
    Thanks to Mr.Gadgets.
    ap/kexec-tools-2.0.32-x86_64-1.txz: Added.
    ap/sqlite-3.54.1-x86_64-1.txz: Upgraded.
    d/pkgconf-3.0.9-x86_64-1.txz: Upgraded.
    d/rust-1.99.1-x86_64-1.txz: Upgraded.
    l/PyQt-builder-1.20.1-x86_64-1.txz: Upgraded.
    l/appstream-1.2.1-x86_64-1.txz: Upgraded.
    l/blake3-1.8.7-x86_64-1.txz: Added.
    l/libvips-8.18.7-x86_64-1.txz: Added.
    l/libwmf-0.2.17-x86_64-1.txz: Upgraded.
    l/python-tomlkit-0.15.2-x86_64-1.txz: Upgraded.
    n/cifs-utils-7.9-x86_64-1.txz: Upgraded.
    n/nmap-7.992-x86_64-1.txz: Upgraded.
    n/spice-0.16.0-x86_64-3.txz: Rebuilt.
    [PATCH] inputs: Fix keyboard and mouse state leaks on interface removal.
    This prevents a big core dump out of QEMU.
    Thanks to Daedra.
    x/libX11-1.8.14-x86_64-1.txz: Upgraded.
    This update fixes security issues:
    ximcp: bound XIM_OPEN_REPLY attribute lengths.
    ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths.
    lcGenConv: bound byteM_parse_codeset() reads.
    xkb: Check the keysym range in _XkbReadKeyActions.
    For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003753.html
    https://www.cve.org/CVERecord?id=CVE-2026-94283
    https://www.cve.org/CVERecord?id=CVE-2026-94284
    https://www.cve.org/CVERecord?id=CVE-2026-94285
    https://www.cve.org/CVERecord?id=CVE-2026-88806
    (* Security fix *)
    x/libXi-1.8.4-x86_64-1.txz: Upgraded.
    This update fixes security issues:
    Out-of-bounds read in libXi's XQueryDeviceState().
    Out-of-bounds read in libXi's XI2 class parsing via size_classes()
    and copy_classes().
    Out-of-bounds read in libXi's XI2 class parser.
    Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing.
    Out-of-bounds read in libXi's XListInputDevices().
    Out-of-bounds read in libXi's XListInputDevices() class parsing.
    Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion.
    libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow.
    libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow.
    For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-93541
    https://www.cve.org/CVERecord?id=CVE-2026-93542
    https://www.cve.org/CVERecord?id=CVE-2026-93543
    https://www.cve.org/CVERecord?id=CVE-2026-93544
    https://www.cve.org/CVERecord?id=CVE-2026-93545
    https://www.cve.org/CVERecord?id=CVE-2026-94282
    https://www.cve.org/CVERecord?id=CVE-2026-109089
    https://www.cve.org/CVERecord?id=CVE-2026-109090
    (* Security fix *)
    x/libXpm-3.5.20-x86_64-1.txz: Upgraded.
    This update fixes a security issue:
    Denial of service via unsigned underflow in libXpm's write path.
    For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-94287
    (* Security fix *)
    x/libXrender-0.9.13-x86_64-1.txz: Upgraded.
    This update fixes a security issue:
    Out-of-bounds read in libXrender's XRenderQueryFormat reply parser.
    For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-88807
    (* Security fix *)
  • Thu, 15 Oct 2026 21:38:08 +0000
    Thu Oct 15 21:38:08 UTC 2026
    a/kernel-firmware-20261014_d545571-noarch-1.txz: Upgraded.
    a/kernel-generic-7.2.11-x86_64-1.txz: Upgraded.
    a/pkgtools-16.0-noarch-3.txz: Rebuilt.
    makepkg: add loongarch64 to the list of $ARCH for which xz will decide how
    many threads to use.
    Thanks to shipujin.
    d/kernel-headers-7.2.11-x86-1.txz: Upgraded.
    k/kernel-source-7.2.11-noarch-1.txz: Upgraded.
    l/cryptopp-8.9.0-x86_64-4.txz: Rebuilt.
    Fix libdir in libcryptopp.pc.
    Thanks to frslk7.
    l/imagemagick-7.1.2_34-x86_64-1.txz: Upgraded.
    l/libgit2-1.9.7-x86_64-1.txz: Added.
    Thanks to gmgf.
    l/orc-0.4.44-x86_64-1.txz: Upgraded.
    l/polkit-128-x86_64-1.txz: Upgraded.
    l/python-pluggy-1.7.0-x86_64-1.txz: Upgraded.
    isolinux/initrd.img: Rebuilt.
    kernels/*: Upgraded.
    usb-and-pxe-installers/usbboot.img: Rebuilt.
  • Wed, 14 Oct 2026 21:48:34 +0000
    Wed Oct 14 21:48:34 UTC 2026
    l/libarchive-3.8.10-x86_64-1.txz: Upgraded.
    Libarchive 3.8.10 is a security, bugfix and minor feature release.
    For more information, see:
    https://github.com/libarchive/libarchive/compare/v3.8.9...v3.8.10
    (* Security fix *)
    l/libzip-1.12.1-x86_64-1.txz: Upgraded.
    l/nodejs-24.22.0-x86_64-1.txz: Upgraded.
    l/python-doxyqml-0.6.0-x86_64-1.txz: Upgraded.
    l/simdutf-9.3.0-x86_64-1.txz: Upgraded.
    Shared library .so-version bump.
    l/vte-0.84.1-x86_64-5.txz: Rebuilt.
    Recompiled against simdutf-9.3.0.
    n/curl-8.23.0-x86_64-1.txz: Upgraded.
    This update fixes security issues:
    local interface connection reuse mixup.
    info leak uploading over WebSockets with GnuTLS.
    password leak in CURLINFO_EFFECTIVE_URL.
    authorization: Negotiate sent to foreign origin.
    server-set cookie aborts cookie jar load.
    never-ending loop via server response omission.
    FTP wildcard write callback mixup.
    TFTP direction confusion.
    -J no-clobber guarantee bypassed with 103 early hints.
    curl_mime_free stack overflow by recursion.
    HTTP/2 upload Use-After-Free.
    redirect to SFTP or SCP bypasses host verification.
    server-set cookie erases cookie jar.
    Negotiate credentials sent to redirected origin.
    leaking host credentials to HTTP proxy.
    auto client cert connection reuse mixup.
    cross-origin reuse of a Negotiate connection.
    HSTS cache import drops longer-lived child.
    HSTS response erases persisted entries.
    knownhost callback mismatches key as missing.
    wolfSSL public-key pinning bypass.
    For more information, see:
    https://curl.se/docs/CVE-2026-107929.html
    https://curl.se/docs/CVE-2026-107928.html
    https://curl.se/docs/CVE-2026-94266.html
    https://curl.se/docs/CVE-2026-94265.html
    https://curl.se/docs/CVE-2026-92386.html
    https://curl.se/docs/CVE-2026-92387.html
    https://curl.se/docs/CVE-2026-92388.html
    https://curl.se/docs/CVE-2026-92389.html
    https://curl.se/docs/CVE-2026-92390.html
    https://curl.se/docs/CVE-2026-92391.html
    https://curl.se/docs/CVE-2026-92392.html
    https://curl.se/docs/CVE-2026-86410.html
    https://curl.se/docs/CVE-2026-86412.html
    https://curl.se/docs/CVE-2026-86413.html
    https://curl.se/docs/CVE-2026-86414.html
    https://curl.se/docs/CVE-2026-86415.html
    https://curl.se/docs/CVE-2026-87861.html
    https://curl.se/docs/CVE-2026-87862.html
    https://curl.se/docs/CVE-2026-87863.html
    https://curl.se/docs/CVE-2026-87865.html
    https://curl.se/docs/CVE-2026-87866.html
    https://www.cve.org/CVERecord?id=CVE-2026-107929
    https://www.cve.org/CVERecord?id=CVE-2026-107928
    https://www.cve.org/CVERecord?id=CVE-2026-94266
    https://www.cve.org/CVERecord?id=CVE-2026-94265
    https://www.cve.org/CVERecord?id=CVE-2026-92386
    https://www.cve.org/CVERecord?id=CVE-2026-92387
    https://www.cve.org/CVERecord?id=CVE-2026-92388
    https://www.cve.org/CVERecord?id=CVE-2026-92389
    https://www.cve.org/CVERecord?id=CVE-2026-92390
    https://www.cve.org/CVERecord?id=CVE-2026-92391
    https://www.cve.org/CVERecord?id=CVE-2026-92392
    https://www.cve.org/CVERecord?id=CVE-2026-86410
    https://www.cve.org/CVERecord?id=CVE-2026-86412
    https://www.cve.org/CVERecord?id=CVE-2026-86413
    https://www.cve.org/CVERecord?id=CVE-2026-86414
    https://www.cve.org/CVERecord?id=CVE-2026-86415
    https://www.cve.org/CVERecord?id=CVE-2026-87861
    https://www.cve.org/CVERecord?id=CVE-2026-87862
    https://www.cve.org/CVERecord?id=CVE-2026-87863
    https://www.cve.org/CVERecord?id=CVE-2026-87865
    https://www.cve.org/CVERecord?id=CVE-2026-87866
    (* Security fix *)
    n/ngtcp2-1.25.0-x86_64-3.txz: Rebuilt.
    Also build libngtcp2_crypto_gnutls.
    x/mesa-26.2.5-x86_64-1.txz: Upgraded.
    xap/freerdp-3.32.2-x86_64-1.txz: Upgraded.
    Sorry, grabbed the completely wrong version before.

Slackware 15.0 (Stable)

			
  • Fri, 16 Oct 2026 22:41:46 +0000
    Fri Oct 16 22:41:46 UTC 2026
    patches/packages/libX11-1.8.14-x86_64-1_slack15.0.txz: Upgraded.
    This update fixes security issues:
    ximcp: bound XIM_OPEN_REPLY attribute lengths.
    ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths.
    lcGenConv: bound byteM_parse_codeset() reads.
    xkb: Check the keysym range in _XkbReadKeyActions.
    For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003753.html
    https://www.cve.org/CVERecord?id=CVE-2026-94283
    https://www.cve.org/CVERecord?id=CVE-2026-94284
    https://www.cve.org/CVERecord?id=CVE-2026-94285
    https://www.cve.org/CVERecord?id=CVE-2026-88806
    (* Security fix *)
    patches/packages/libXi-1.8.4-x86_64-1_slack15.0.txz: Upgraded.
    This update fixes security issues:
    Out-of-bounds read in libXi's XQueryDeviceState().
    Out-of-bounds read in libXi's XI2 class parsing via size_classes()
    and copy_classes().
    Out-of-bounds read in libXi's XI2 class parser.
    Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing.
    Out-of-bounds read in libXi's XListInputDevices().
    Out-of-bounds read in libXi's XListInputDevices() class parsing.
    Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion.
    libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow.
    libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow.
    For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-93541
    https://www.cve.org/CVERecord?id=CVE-2026-93542
    https://www.cve.org/CVERecord?id=CVE-2026-93543
    https://www.cve.org/CVERecord?id=CVE-2026-93544
    https://www.cve.org/CVERecord?id=CVE-2026-93545
    https://www.cve.org/CVERecord?id=CVE-2026-94282
    https://www.cve.org/CVERecord?id=CVE-2026-109089
    https://www.cve.org/CVERecord?id=CVE-2026-109090
    (* Security fix *)
    patches/packages/libXpm-3.5.20-x86_64-1_slack15.0.txz: Upgraded.
    This update fixes a security issue:
    Denial of service via unsigned underflow in libXpm's write path.
    For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-94287
    (* Security fix *)
    patches/packages/libXrender-0.9.13-x86_64-1_slack15.0.txz: Upgraded.
    This update fixes a security issue:
    Out-of-bounds read in libXrender's XRenderQueryFormat reply parser.
    For more information, see:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    https://www.cve.org/CVERecord?id=CVE-2026-88807
    (* Security fix *)
  • Wed, 14 Oct 2026 21:48:34 +0000
    Wed Oct 14 21:48:34 UTC 2026
    patches/packages/libarchive-3.8.10-x86_64-1_slack15.0.txz: Upgraded.
    Libarchive 3.8.10 is a security, bugfix and minor feature release.
    For more information, see:
    https://github.com/libarchive/libarchive/compare/v3.8.9...v3.8.10
    (* Security fix *)
  • Wed, 14 Oct 2026 00:05:38 +0000
    Wed Oct 14 00:05:38 UTC 2026
    patches/packages/expat-2.9.0-x86_64-1_slack15.0.txz: Upgraded.
    This update fixes security issues:
    Integer overflow in function expat_realloc on 32bit platforms.
    Validate parameter `len` against available buffer capacity in
    XML_ParseBuffer.
    For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-102633
    https://www.cve.org/CVERecord?id=CVE-2026-77214
    (* Security fix *)