News
3 Febbraio 2022 - Slackware 15.0
Oggi (2 febbraio alle 22:22 orario UTC) è stata finalmente rilasciata la Slackware 15.0. Vi aspettiamo nel forum per commentare. Happy fun :)
13 Gennaio 2022 - Slackware 15 RC3
Siamo arrivati alla terza, e a meno di sorprese, l'ultima Release Candidate di Slackware 15. Da ora in poi ci saranno modifiche solo in caso di problemi seri, ma tutto lascia supporre che il 17 gennaio, come anticipato da Pat su LinuxQuestions, esca la tanto sospirata versione 15. Ti aspettiamo nel forum per parlarne.
16 Agosto 2021 - Slackware 15 RC1
È uscita stanotte la prima Release Candidate di Slackware 15. Come ha scritto Pat si tratta di un "congelamento", a meno di bugfix. Questo significa che la 15.0 sarà rilasciata con i software nella versione presente in questa RC1, a meno appunto di bug trovati, o aggiornamenti di sicurezza.
15 Aprile 2021 - Slackware 15 beta
Qualche giorno fa Pat ha rilasciato un corposo aggiornamento definendolo beta. La data dell'uscita di Slackware 15 si fa sempre più vicina.
ChangeLog
Slackware Current
- Wed, 21 Oct 2026 21:33:15 +0000
Wed Oct 21 21:33:15 UTC 2026
a/kernel-firmware-20261021_59f9fc2-noarch-1.txz: Upgraded.
a/kernel-generic-7.2.12-x86_64-1.txz: Upgraded.
ap/kexec-tools-2.0.32-x86_64-3.txz: Rebuilt.
load-latest-kernel-initrd-with-kexec.sh: add reset_devices to the kernel
command line. Some drivers need this to initialize properly from a dirty
state with a kexec boot.
Thanks to teoberi.
ap/nano-9.3-x86_64-1.txz: Upgraded.
d/kernel-headers-7.2.12-x86-1.txz: Upgraded.
k/kernel-source-7.2.12-noarch-1.txz: Upgraded.
l/brotli-1.2.1-x86_64-1.txz: Upgraded.
l/nodejs-24.22.1-x86_64-1.txz: Upgraded.
n/bind-9.20.30-x86_64-1.txz: Upgraded.
This update fixes security issues:
Crafted DNS messages could exhaust CPU while being parsed.
Fix remote termination of named under concurrent GSS-TSIG traffic.
Possible crash with redirect and qname-minimization strict.
Fix a bug when resuming from a query initiated by RPZ.
For more information, see:
https://kb.isc.org/docs/CVE-2026-19630
https://kb.isc.org/docs/CVE-2026-94300
https://kb.isc.org/docs/CVE-2026-96888
https://kb.isc.org/docs/CVE-2026-97313
https://www.cve.org/CVERecord?id=CVE-2026-19630
https://www.cve.org/CVERecord?id=CVE-2026-94300
https://www.cve.org/CVERecord?id=CVE-2026-96888
https://www.cve.org/CVERecord?id=CVE-2026-97313
(* Security fix *)
n/php-8.5.12-x86_64-1.txz: Upgraded.
This update fixes bugs and security issues, including the following
critical remote code execution flaw:
Avoid state corruption via bailout.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.5.12
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
https://www.cve.org/CVERecord?id=CVE-2026-109618
https://www.cve.org/CVERecord?id=CVE-2026-109619
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt. - Wed, 21 Oct 2026 00:53:24 +0000
Wed Oct 21 00:53:24 UTC 2026
d/google-go-lang-1.27.3-x86_64-1.txz: Upgraded.
d/llvm-23.1.4-x86_64-1.txz: Upgraded.
d/python-pip-26.2.2-x86_64-1.txz: Upgraded.
d/python-setuptools-84.2.0-x86_64-1.txz: Upgraded.
l/elfutils-0.197-x86_64-1.txz: Upgraded.
l/libclc-23.1.4-x86_64-1.txz: Upgraded.
l/mozilla-nss-3.131.1-x86_64-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
(* Security fix *)
l/mujs-1.3.11-x86_64-1.txz: Upgraded.
l/nodejs-24.22.0-x86_64-2.txz: Rebuilt.
Remove untrusted emSign certificates.
(* Security fix *)
l/python-certifi-2026.10.19-x86_64-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
(* Security fix *)
l/python-markdown-3.11.2-x86_64-1.txz: Upgraded.
l/python-sphinx-9.1.1-x86_64-1.txz: Upgraded.
n/c-ares-1.34.9-x86_64-1.txz: Upgraded.
This update fixes security issues:
Memory corruption when an application cancels its lookups after a connection
failure.
A DNS reply that arrived from a different server than the one queried could
be accepted.
Use-after-free of a lookup after shutting down a failed connection.
Use-after-free when an application cancels lookups from a callback, or shuts
a channel down.
Use-after-free of a connection after the socket-state callback returns.
Use-after-free when an application cancels lookups from a server-state
callback.
Use-after-free of a server record when an application changes its DNS
servers from a callback.
Use-after-free of a cached DNS answer while the application is still reading
it.
Buffer overflow when `ares_dup()` or `ares_save_options()` runs while
another thread changes the servers.
Uninitialized memory returned for a numeric IPv6 name with a prefix length.
The query cache could return an answer obtained using different EDNS
options.
For more information, see:
https://github.com/c-ares/c-ares/security/advisories/GHSA-wpr3-8q3r-4q8c
https://github.com/c-ares/c-ares/security/advisories/GHSA-fqh5-3x7m-wp44
https://github.com/c-ares/c-ares/security/advisories/GHSA-97vq-4mxv-7vhm
https://github.com/c-ares/c-ares/security/advisories/GHSA-rf6g-ww74-97qh
https://github.com/c-ares/c-ares/security/advisories/GHSA-mw23-pfg6-2x9r
https://github.com/c-ares/c-ares/security/advisories/GHSA-v33j-65h4-4ch8
https://github.com/c-ares/c-ares/security/advisories/GHSA-pj7p-v3cw-hq66
https://github.com/c-ares/c-ares/security/advisories/GHSA-grv7-fq5q-9vfc
https://github.com/c-ares/c-ares/security/advisories/GHSA-ph6c-3cvx-mq6v
https://github.com/c-ares/c-ares/security/advisories/GHSA-cfcv-8v2j-qj6r
https://github.com/c-ares/c-ares/security/advisories/GHSA-wrgc-prmw-27xh
(* Security fix *)
n/ca-certificates-20261020-noarch-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
(* Security fix *)
xap/audacious-4.6.2-x86_64-1.txz: Upgraded.
xap/audacious-plugins-4.6.2-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-153.5.1esr-x86_64-1.txz: Upgraded.
This update fixes a security issue.
For more information, see:
https://www.mozilla.org/en-US/firefox/153.5.1/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2026-112
https://www.cve.org/CVERecord?id=CVE-2026-113470
(* Security fix *)
xap/mozilla-thunderbird-153.5.1esr-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/153.5.0esr/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/
https://www.cve.org/CVERecord?id=CVE-2026-113866
https://www.cve.org/CVERecord?id=CVE-2026-113867
https://www.cve.org/CVERecord?id=CVE-2026-113868
https://www.cve.org/CVERecord?id=CVE-2026-113470
(* Security fix *) - Mon, 19 Oct 2026 21:37:34 +0000
Mon Oct 19 21:37:34 UTC 2026
a/haveged-1.9.27-x86_64-1.txz: Upgraded.
ap/cpufetch-1.07-x86_64-1.txz: Added.
This seems to not know about many recent microarchitectures, but whatever,
we'll add it anyway. Thanks to SCerovec for the suggestion.
ap/ghostscript-10.08.0-x86_64-3.txz: Rebuilt.
Dump the internal openjpeg library so that we compile against the
system version to prevent symbol clashes when something links to both
libgs and libopenjp2. Thanks to marrowsuck.
d/pkgconf-3.0.10-x86_64-1.txz: Upgraded.
n/NetworkManager-1.58.1-x86_64-5.txz: Rebuilt.
In /etc/default/networkmanager, comment out WAIT_UNTIL_ONLINE=true.
Most users will not need this delay by default, but if you do then go ahead
and uncomment it.
n/ethtool-7.2-x86_64-1.txz: Upgraded.
n/network-scripts-16.0-noarch-7.txz: Rebuilt.
rc.inet2: for network mounts, mention that WAIT_UNTIL_ONLINE=true in
/etc/default/networkmanager can also be used if a delay is required.
x/ibus-1.5.35_rc1-x86_64-1.txz: Upgraded.
testing/packages/linux-7.3.x/kernel-generic-7.3.0-x86_64-1.txz: Added.
testing/packages/linux-7.3.x/kernel-headers-7.3.0-x86-1.txz: Added.
testing/packages/linux-7.3.x/kernel-source-7.3.0-noarch-1.txz: Added.
Slackware 15.0 (Stable)
- Wed, 21 Oct 2026 21:33:15 +0000
Wed Oct 21 21:33:15 UTC 2026
extra/php80/php80-8.0.30-x86_64-2_slack15.0.txz: Rebuilt.
This update fixes the following critical remote code execution flaw:
Avoid state corruption via bailout.
For more information, see:
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
https://www.cve.org/CVERecord?id=CVE-2026-109618
https://www.cve.org/CVERecord?id=CVE-2026-109619
(* Security fix *)
extra/php81/php81-8.1.34-x86_64-2_slack15.0.txz: Rebuilt.
This update fixes the following critical remote code execution flaw:
Avoid state corruption via bailout.
For more information, see:
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
https://www.cve.org/CVERecord?id=CVE-2026-109618
https://www.cve.org/CVERecord?id=CVE-2026-109619
(* Security fix *)
extra/php82/php82-8.2.35-x86_64-1_slack15.0.txz: Upgraded.
This update fixes bugs and security issues, including the following
critical remote code execution flaw:
Avoid state corruption via bailout.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.2.35
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
https://www.cve.org/CVERecord?id=CVE-2026-109618
https://www.cve.org/CVERecord?id=CVE-2026-109619
(* Security fix *)
patches/packages/php-7.4.33-x86_64-4_slack15.0.txz: Rebuilt.
This update fixes the following critical remote code execution flaw:
Avoid state corruption via bailout.
For more information, see:
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
https://www.cve.org/CVERecord?id=CVE-2026-109618
https://www.cve.org/CVERecord?id=CVE-2026-109619
(* Security fix *) - Wed, 21 Oct 2026 00:53:24 +0000
Wed Oct 21 00:53:24 UTC 2026
patches/packages/c-ares-1.34.9-x86_64-1_slack15.0.txz: Upgraded.
This update fixes security issues:
Memory corruption when an application cancels its lookups after a connection
failure.
A DNS reply that arrived from a different server than the one queried could
be accepted.
Use-after-free of a lookup after shutting down a failed connection.
Use-after-free when an application cancels lookups from a callback, or shuts
a channel down.
Use-after-free of a connection after the socket-state callback returns.
Use-after-free when an application cancels lookups from a server-state
callback.
Use-after-free of a server record when an application changes its DNS
servers from a callback.
Use-after-free of a cached DNS answer while the application is still reading
it.
Buffer overflow when `ares_dup()` or `ares_save_options()` runs while
another thread changes the servers.
Uninitialized memory returned for a numeric IPv6 name with a prefix length.
The query cache could return an answer obtained using different EDNS
options.
For more information, see:
https://github.com/c-ares/c-ares/security/advisories/GHSA-wpr3-8q3r-4q8c
https://github.com/c-ares/c-ares/security/advisories/GHSA-fqh5-3x7m-wp44
https://github.com/c-ares/c-ares/security/advisories/GHSA-97vq-4mxv-7vhm
https://github.com/c-ares/c-ares/security/advisories/GHSA-rf6g-ww74-97qh
https://github.com/c-ares/c-ares/security/advisories/GHSA-mw23-pfg6-2x9r
https://github.com/c-ares/c-ares/security/advisories/GHSA-v33j-65h4-4ch8
https://github.com/c-ares/c-ares/security/advisories/GHSA-pj7p-v3cw-hq66
https://github.com/c-ares/c-ares/security/advisories/GHSA-grv7-fq5q-9vfc
https://github.com/c-ares/c-ares/security/advisories/GHSA-ph6c-3cvx-mq6v
https://github.com/c-ares/c-ares/security/advisories/GHSA-cfcv-8v2j-qj6r
https://github.com/c-ares/c-ares/security/advisories/GHSA-wrgc-prmw-27xh
(* Security fix *)
patches/packages/ca-certificates-20261020-noarch-1_slack15.0.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
(* Security fix *)
patches/packages/mozilla-firefox-140.17.0esr-x86_64-2_slack15.0.txz: Rebuilt.
This update fixes a security issue:
Build --with-system-zlib and --with-system-nss to pick up the latest
CA certificates.
(* Security fix *)
patches/packages/mozilla-nss-3.131.1-x86_64-1_slack15.0.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
(* Security fix *)
patches/packages/mozilla-thunderbird-140.17.0esr-x86_64-2_slack15.0.txz: Rebuilt.
This update fixes a security issue:
Build --with-system-zlib and --with-system-nss to pick up the latest
CA certificates.
(* Security fix *)
patches/packages/python-certifi-2026.10.19-x86_64-1_slack15.0.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
(* Security fix *) - Sat, 17 Oct 2026 22:51:26 +0000
Sat Oct 17 22:51:26 UTC 2026
patches/packages/libXtst-1.2.6-x86_64-1_slack15.0.txz: Upgraded.
This update fixes security issues:
parse_reply_call_callback: check element size against remaining reply buffer.
parse_reply_call_callback: reject zero-progress RECORD reply elements.
For more information, see:
https://lists.x.org/archives/xorg-announce/2026-October/003757.html
https://www.cve.org/CVERecord?id=CVE-2026-94286
https://www.cve.org/CVERecord?id=CVE-2026-109088
(* Security fix *)
Forum Slacky
- 14/10/2026
- 14/10/2026
- 14/10/2026
- 12/10/2026
- 02/10/2026
- 30/09/2026
- 08/09/2026
- 06/09/2026
- 10/08/2026
- 27/07/2026
- 07/07/2026
- 03/07/2026
- 20/06/2026
- 18/06/2026
- 15/06/2026
- 07/06/2026
- 07/06/2026
- 26/04/2026
- 24/04/2026
- 23/04/2026
- 19/04/2026
- 09/04/2026
- 06/04/2026
- 01/03/2026
- 28/02/2026