blender-3.0.1-x86_64-1_ap.txz: Upgraded.
a/elogind-257.16-x86_64-5.txz: Rebuilt.
Remove orphaned session cgroups.
Thanks to gcosbug.
a/eudev-3.2.15-x86_64-1.txz: Upgraded.
a/mkinitrd-1.4.11-x86_64-81.txz: Rebuilt.
/etc/default/geninitrd: make the initrd.gz symlink to prevent problems with
LILO when upgrading from an earlier version of Slackware while retaining
the existing lilo.conf.
ap/groff-1.24.2-x86_64-1.txz: Upgraded.
This release corrects command injection security vulnerabilities
(CWE-78) in the mmroff, pdfmom, and pre-grohtml programs. The last of
these is a preprocessor that is run when groff or troff is run with the
`-T html` or `-T xhtml` options. The vulnerabilities are variously
14-26 years old. Malicious input can escape groff's default "safer"
mode, running commands embedded in that input at the user's privilege
level. The groff development team recommends this release to any users
who employ the named tools or GNU troff output formats with untrusted
inputs.
(* Security fix *)
ap/lxc-7.0.0-x86_64-4.txz: Rebuilt.
Use cgroup v2 (the host must be running this).
Drop obsolete package aaa_elflibs.
Update version in the generated slackpkg.conf.
Thanks to roberto967.
d/google-go-lang-1.27.1-x86_64-1.txz: Upgraded.
kde/wcslib-8.10-x86_64-2.txz: Rebuilt.
Fix some bogus directory permissions.
Thanks to josiah.
l/at-spi2-core-2.62.0.1-x86_64-2.txz: Rebuilt.
[PATCH] at-spi-bus-launcher: Clean up dbus-daemon when terminating from
signals other than SIGTERM.
Thanks to gcosbug.
l/dbus-python-1.5.0-x86_64-1.txz: Upgraded.
l/hunspell-1.7.4-x86_64-1.txz: Upgraded.
l/pcre2-10.49-x86_64-1.txz: Upgraded.
This update fixes a security issue.
An attacker-controlled regex pattern could lead to an out-of-bounds write
with arbitrary data.
For more information, see:
https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m
(* Security fix *)
l/python-lxml-6.1.2-x86_64-2.txz: Rebuilt.
Reverted. 6.1.3 breaks the elogind build.
n/network-scripts-16.0-noarch-1.txz: Upgraded.
rc.inet2: add comments about how to inhibit rc.rpc from starting.
Thanks to guanx.
n/rpcbind-1.3.1-x86_64-2.txz: Rebuilt.
rc.rpc: if DISABLE_RPC_SERVICES=true in /etc/default/rpc, then don't start
the RPC services.
Thanks to guanx.
x/egl-wayland-1.1.23-x86_64-1.txz: Upgraded.
xap/freerdp-3.32.1-x86_64-1.txz: Upgraded.
a/lilo-24.2-x86_64-17.txz: Rebuilt.
lilo-reinstall: also reinstall if image=/boot/vmlinuz.
Thanks to Bravo_97.
ap/qpdf-12.4.2-x86_64-1.txz: Upgraded.
d/ccache-4.14.1-x86_64-1.txz: Upgraded.
kde/ktextaddons-2.2.0-x86_64-1.txz: Upgraded.
kde/wcslib-8.10-x86_64-1.txz: Upgraded.
l/dbus-glib-0.116-x86_64-1.txz: Upgraded.
l/frei0r-plugins-3.6.0-x86_64-1.txz: Upgraded.
l/imagemagick-7.1.2_32-x86_64-1.txz: Upgraded.
Added configure option --enable-year2038.
Thanks to bigbadaboum.
n/tftp-hpa-7.2-x86_64-1.txz: Upgraded.
a/libcgroup-3.2.0-x86_64-4.txz: Rebuilt.
Fixed the BUILD number.
a/elogind-257.16-aarch64-4.txz: Rebuilt.
Remove orphaned session cgroups.
Thanks to gcosbug.
a/eudev-3.2.15-aarch64-1.txz: Upgraded.
a/mkinitrd-1.4.11-aarch64-44.txz: Rebuilt.
ap/groff-1.24.2-aarch64-1.txz: Upgraded.
This release corrects command injection security vulnerabilities
(CWE-78) in the mmroff, pdfmom, and pre-grohtml programs. The last of
these is a preprocessor that is run when groff or troff is run with the
`-T html` or `-T xhtml` options. The vulnerabilities are variously
14-26 years old. Malicious input can escape groff's default "safer"
mode, running commands embedded in that input at the user's privilege
level. The groff development team recommends this release to any users
who employ the named tools or GNU troff output formats with untrusted
inputs.
(* Security fix *)
ap/lxc-7.0.0-aarch64-4.txz: Rebuilt.
Use cgroup v2 (the host must be running this).
Drop obsolete package aaa_elflibs.
Update version in the generated slackpkg.conf.
Thanks to roberto967.
d/google-go-lang-1.27.1-aarch64-1.txz: Upgraded.
kde/wcslib-8.10-aarch64-2.txz: Rebuilt.
Fix some bogus directory permissions.
Thanks to josiah.
l/at-spi2-core-2.62.0.1-aarch64-2.txz: Rebuilt.
[PATCH] at-spi-bus-launcher: Clean up dbus-daemon when terminating from
signals other than SIGTERM.
Thanks to gcosbug.
l/dbus-python-1.5.0-aarch64-1.txz: Upgraded.
l/hunspell-1.7.4-aarch64-1.txz: Upgraded.
l/pcre2-10.49-aarch64-1.txz: Upgraded.
This update fixes a security issue.
An attacker-controlled regex pattern could lead to an out-of-bounds write
with arbitrary data.
For more information, see:
https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m
(* Security fix *)
l/python-lxml-6.1.2-aarch64-3.txz: Rebuilt.
Reverted. 6.1.3 breaks the elogind build.
n/network-scripts-16.0-noarch-1.txz: Upgraded.
rc.inet2: add comments about how to inhibit rc.rpc from starting.
Thanks to guanx.
n/rpcbind-1.3.1-aarch64-2.txz: Rebuilt.
rc.rpc: if DISABLE_RPC_SERVICES=true in /etc/default/rpc, then don't start
the RPC services.
Thanks to guanx.
x/egl-wayland-1.1.23-aarch64-1.txz: Upgraded.
xap/freerdp-3.32.1-aarch64-1.txz: Upgraded.
a/hwm-bw-raspberrypi-2026.06.29-aarch64-2.txz: Rebuilt.
Replaced the Raspberry Pi bcm2712d0.dtbo overlay with one written for
the mainline Kernel. The firmware applies this overlay on Raspberry Pi 5
boards with the BCM2712 D0 SoC (Rev 1.1), but the upstream (RPi vendor)
version fails against mainline Device Trees, leaving D0 boards running the
C0 tree. With the pin controller enabled (we disabled it in Linux 6.18) this
caused a Kernel panic (SError in brcmstb_pull_config_set) at boot.
The new overlay applies the mainline bcm2712-d-rpi-5-b.dts changes
(pinctrl, pinctrl_aon, gio_aon and uart10 interrupt), so the firmware
can select the correct tree on both C0 and D0 boards with no
device_tree= setting needed in config.txt.
a/inotify-tools-4.26.262-aarch64-1.txz: Upgraded.
a/kbd-2.10.0-aarch64-5.txz: Rebuilt.
Preserve permissions on /etc/rc.d/rc.font. Thanks to LuckyCyborg.
rc.font: if the first font doesn't load, just exit. Probably nothing was
done to the console, but I'm not confident that's the case if we run
"setfont" on the way out.
rc.font: skip fonts that don't load.
Add a couple extra font list examples.
Spleen is a really nice looking font. Let's make it the default.
IMHO, Spleen looks best at 120 columns, so let's go back to that.
Don't use "setfont -R"; it may be broken. Thanks to jtsn.
Don't exit on nomodeset. Thanks to jtsn.
a/kernel-firmware-20260925_a06a853-noarch-1.txz: Upgraded.
a/libcgroup-3.2.0-aarch64-2.txz: Rebuilt.
The defaults file contained CGROUP_VERSION=2, commented out. I'd noticed
this, but also saw that the version is assumed to be 1 if there's no
uncommented CGROUP_VERSION, so I left it that way. But it could confuse
people about what the default CGROUP_VERSION is, so let's change it to 1
and uncomment it so that it's more obvious.
Thanks to 0XBF.
Add new options to the default config file.
Thanks to 0XBF and gcosbug.
a/pkgtools-16.0-noarch-1.txz: Upgraded.
setup.services: make rc.font selectable.
Thanks to Petri Kaukasoina.
a/sysvinit-scripts-16.0-noarch-4.txz: Rebuilt.
rc.S: handle new cgroups default file options and fix a logic bug.
Thanks to 0XBF and gcosbug.
ap/fonts-uw-ttyp0-2.1-aarch64-1.txz: Added.
Thanks to r1w1s1.
ap/qpdf-12.4.2-aarch64-1.txz: Upgraded.
ap/slackpkg-16.0.1-noarch-1.txz: Upgraded.
If gpg fails in middle of slackpkg execution, try to detect again the better
gpg version to use (Piter PUNK).
Improve the reordering of packages in upgrade-all (Piter PUNK).
Change the spinning bar function to handle better if it's called two times in
a row (Piter PUNK).
Remove some dead code (Piter PUNK).
ap/spleen-2.2.0-aarch64-1.txz: Added.
Thanks to jtsn.
d/ccache-4.14.1-aarch64-1.txz: Upgraded.
d/clinfo-3.1.26.09.26-aarch64-1.txz: Upgraded.
d/gdb-18.1-aarch64-1.txz: Upgraded.
kde/ktextaddons-2.2.0-aarch64-1.txz: Upgraded.
kde/wcslib-8.10-aarch64-1.txz: Upgraded.
l/dbus-glib-0.116-aarch64-1.txz: Upgraded.
l/frei0r-plugins-3.6.0-aarch64-1.txz: Upgraded.
l/gspell-1.14.5-aarch64-1.txz: Upgraded.
l/imagemagick-7.1.2_32-aarch64-1.txz: Upgraded.
Added configure option --enable-year2038.
Thanks to bigbadaboum.
l/meson-python-0.22.0-aarch64-1.txz: Upgraded.
l/openexr-3.5.1-aarch64-1.txz: Upgraded.
Fix heap buffer overflow in ZSTD deep scanline decoding.
(* Security fix *)
l/python-markdown-3.11-aarch64-1.txz: Upgraded.
l/python-scikit-build-core-1.1.0-aarch64-1.txz: Upgraded.
l/utf8proc-2.12.0-aarch64-1.txz: Upgraded.
n/cifs-utils-7.8-aarch64-1.txz: Upgraded.
n/samba-4.25.0-aarch64-1.txz: Upgraded.
n/tftp-hpa-7.2-aarch64-1.txz: Upgraded.
x/bdf2psf-1.249-aarch64-1.txz: Added.
Needed to build the console fonts in fonts-uw-ttyp0.
Thanks to B. Watson and the late Didier Spaier.
a/kbd-2.10.0-aarch64-4.txz: Rebuilt.
Use setfont -R when reverting to bootup defaults.
Apply the new font on all the consoles.
Rearrange to correctly catch the error code from the first use of setfont in
auto mode. Thanks to r1w1s1.
Don't run auto mode if we see nomodeset on the kernel command line.
Put the font list to try in auto mode in /etc/default/rc.font instead of half
coding it in the script to make it easy to use something other than Terminus.
It's a matter of taste, but let's bump the minimum columns to 130.
a/pam-1.7.3-aarch64-1.txz: Upgraded.
ap/fwupd-2.1.8-aarch64-1.txz: Upgraded.
ap/mariadb-12.3.3-aarch64-1.txz: Upgraded.
kde/fcitx5-configtool-5.1.16-aarch64-1.txz: Upgraded.
kde/kirigami-addons-1.14.2-aarch64-1.txz: Upgraded.
kde/plasma-wayland-protocols-1.23.0-aarch64-1.txz: Upgraded.
l/aom-3.15.1-aarch64-1.txz: Upgraded.
l/libuv-1.53.0-aarch64-1.txz: Upgraded.
l/netpbm-11.15.08-aarch64-1.txz: Upgraded.
l/parted-3.8-aarch64-1.txz: Upgraded.
l/python-setuptools_scm-10.3.4-aarch64-1.txz: Upgraded.
l/python-vcs_versioning-2.5.0-aarch64-1.txz: Upgraded.
l/simdutf-9.2.1-aarch64-1.txz: Upgraded.
n/gnupg2-2.5.24-aarch64-1.txz: Upgraded.
n/php-8.5.11-aarch64-1.txz: Upgraded.
This update fixes security issues:
FPM: IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address
comparison.
MySQLnd: Various packet overreads in mysqlnd wire protocol.
OpenSSL: TLS hostname verification falls back to CN after SAN mismatch.
OpenSSL: Heap buffer overflow in php_openssl_matches_wildcard_name() on
crafted server certificate wildcard CN.
Phar: Integer overflow in phar_tar_number() allowing TAR archive entry
injection.
SOAP: Unbounded recursion in server-side cleanup_xml_node().
SOAP: Integer overflow to buffer overflow in SOAP HTTP parsing.
Standard: Out-of-bounds read in the HTTP stream wrapper when following a
redirect with an empty Location header.
Standard: Out-of-bounds read in convert.* stream filters when
line-break-chars contains NUL.
Standard: Cross-origin credential leak in HTTP stream wrapper redirects.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.5.11
https://www.cve.org/CVERecord?id=CVE-2026-91768
https://www.cve.org/CVERecord?id=CVE-2025-1218
https://www.cve.org/CVERecord?id=CVE-2026-91769
https://www.cve.org/CVERecord?id=CVE-2026-91767
https://www.cve.org/CVERecord?id=CVE-2026-6103
https://www.cve.org/CVERecord?id=CVE-2026-91765
https://www.cve.org/CVERecord?id=CVE-2025-14181
https://www.cve.org/CVERecord?id=CVE-2026-93682
https://www.cve.org/CVERecord?id=CVE-2026-92842
https://www.cve.org/CVERecord?id=CVE-2026-91766
https://www.cve.org/CVERecord?id=CVE-2026-17545
(* Security fix *)
x/fcitx5-5.1.23-aarch64-1.txz: Upgraded.
x/fcitx5-chinese-addons-5.1.15-aarch64-1.txz: Upgraded.
x/fcitx5-m17n-5.1.8-aarch64-1.txz: Upgraded.
x/fcitx5-qt-5.1.16-aarch64-1.txz: Upgraded.
x/libime-1.1.17-aarch64-1.txz: Upgraded.
patches/packages/groff-1.24.2-x86_64-1_slack15.0.txz: Upgraded.
This release corrects command injection security vulnerabilities
(CWE-78) in the mmroff, pdfmom, and pre-grohtml programs. The last of
these is a preprocessor that is run when groff or troff is run with the
`-T html` or `-T xhtml` options. The vulnerabilities are variously
14-26 years old. Malicious input can escape groff's default "safer"
mode, running commands embedded in that input at the user's privilege
level. The groff development team recommends this release to any users
who employ the named tools or GNU troff output formats with untrusted
inputs.
(* Security fix *)
patches/packages/pcre2-10.49-x86_64-1.txz: Upgraded.
This update fixes a security issue.
An attacker-controlled regex pattern could lead to an out-of-bounds write
with arbitrary data.
For more information, see:
https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m
(* Security fix *)
extra/php82/php82-8.2.34-x86_64-1_slack15.0.txz: Upgraded.
This update fixes security issues:
FPM: IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address
comparison.
OpenSSL: TLS hostname verification falls back to CN after SAN mismatch.
OpenSSL: Heap buffer overflow in php_openssl_matches_wildcard_name() on
crafted server certificate wildcard CN.
Phar: Integer overflow in phar_tar_number() allowing TAR archive entry
injection.
SOAP: Unbounded recursion in server-side cleanup_xml_node().
SOAP: Integer overflow to buffer overflow in SOAP HTTP parsing.
Standard: Out-of-bounds read in convert.* stream filters when
line-break-chars contains NUL.
Standard: Cross-origin credential leak in HTTP stream wrapper redirects.
Standard: Out-of-bounds read in the HTTP stream wrapper when following a
redirect with an empty Location header.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.2.34
https://www.cve.org/CVERecord?id=CVE-2026-91768
https://www.cve.org/CVERecord?id=CVE-2025-1218
https://www.cve.org/CVERecord?id=CVE-2026-91769
https://www.cve.org/CVERecord?id=CVE-2026-91767
https://www.cve.org/CVERecord?id=CVE-2026-6103
https://www.cve.org/CVERecord?id=CVE-2026-91765
https://www.cve.org/CVERecord?id=CVE-2025-14181
https://www.cve.org/CVERecord?id=CVE-2026-92842
https://www.cve.org/CVERecord?id=CVE-2026-91766
https://www.cve.org/CVERecord?id=CVE-2026-93682
https://www.cve.org/CVERecord?id=CVE-2026-17545
(* Security fix *)
patches/packages/rsync-3.5.1-x86_64-1_slack15.0.txz: Upgraded.
This is a bugfix release.
For more information, see /usr/doc/rsync-3.5.1/NEWS.md.
patches/packages/util-linux-2.42.4-x86_64-1_slack15.0.txz: Upgraded.
This update fixes bugs and a security issue:
nsenter: close cgroup.procs fd after join to prevent authority leak.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2026-78408
(* Security fix *)
patches/packages/groff-1.24.2-arm-1_slack15.0.txz: Upgraded.
This release corrects command injection security vulnerabilities
(CWE-78) in the mmroff, pdfmom, and pre-grohtml programs. The last of
these is a preprocessor that is run when groff or troff is run with the
`-T html` or `-T xhtml` options. The vulnerabilities are variously
14-26 years old. Malicious input can escape groff's default "safer"
mode, running commands embedded in that input at the user's privilege
level. The groff development team recommends this release to any users
who employ the named tools or GNU troff output formats with untrusted
inputs.
(* Security fix *)
patches/packages/pcre2-10.49-arm-1_slack15.0.txz: Upgraded.
This update fixes a security issue.
An attacker-controlled regex pattern could lead to an out-of-bounds write
with arbitrary data.
For more information, see:
https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m
(* Security fix *)
extra/php82/php82-8.2.34-arm-1.txz: Upgraded.
This update fixes security issues:
FPM: IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address
comparison.
OpenSSL: TLS hostname verification falls back to CN after SAN mismatch.
OpenSSL: Heap buffer overflow in php_openssl_matches_wildcard_name() on
crafted server certificate wildcard CN.
Phar: Integer overflow in phar_tar_number() allowing TAR archive entry
injection.
SOAP: Unbounded recursion in server-side cleanup_xml_node().
SOAP: Integer overflow to buffer overflow in SOAP HTTP parsing.
Standard: Out-of-bounds read in convert.* stream filters when
line-break-chars contains NUL.
Standard: Cross-origin credential leak in HTTP stream wrapper redirects.
Standard: Out-of-bounds read in the HTTP stream wrapper when following a
redirect with an empty Location header.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.2.34
https://www.cve.org/CVERecord?id=CVE-2026-91768
https://www.cve.org/CVERecord?id=CVE-2025-1218
https://www.cve.org/CVERecord?id=CVE-2026-91769
https://www.cve.org/CVERecord?id=CVE-2026-91767
https://www.cve.org/CVERecord?id=CVE-2026-6103
https://www.cve.org/CVERecord?id=CVE-2026-91765
https://www.cve.org/CVERecord?id=CVE-2025-14181
https://www.cve.org/CVERecord?id=CVE-2026-92842
https://www.cve.org/CVERecord?id=CVE-2026-91766
https://www.cve.org/CVERecord?id=CVE-2026-93682
https://www.cve.org/CVERecord?id=CVE-2026-17545
(* Security fix *)
patches/packages/rsync-3.5.1-arm-1_slack15.0.txz: Upgraded.
This is a bugfix release.
For more information, see /usr/doc/rsync-3.5.1/NEWS.md.
patches/packages/stunnel-5.82-arm-1_slack15.0.txz: Upgraded.
This update fixes security issues:
Fixed truncation and out-of-bounds reads when inheriting binary
session ticket keys containing null bytes (thanks to Jose A. Diaz).
Prevented OCSP stapling response failures from terminating the
daemon (thanks to Jose A. Diaz).
(* Security fix *)
patches/packages/util-linux-2.42.4-arm-1_slack15.0.txz: Upgraded.
This update fixes bugs and a security issue:
nsenter: close cgroup.procs fd after join to prevent authority leak.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2026-78408
(* Security fix *)
24/02/2022: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware
15/12/2015: Aggiornato HowTo automatizzare la compilazione del kernel
15/12/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
24/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
22/11/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
07/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
05/11/2015: Nuovo HowTo Automatizzare l'aggiornamento di Slackware current
30/10/2015: Aggiornato HowTo Automatizzare la prima configurazione di Slackware
26/05/2015: Aggiornato HowTo mini Slackware su pendrive
07/05/2015: Aggiornato HowTo automatizzare la compilazione del kernel
13/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel
02/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel
Questo script provvede ad aggiornare Slackware o Slackware64 all'ultima current in maniera del tutto autonoma, dalla ricerca di aggiornamenti all'aggiornamento del bootloader.
Scarica la lista dei pacchetti e la confronta con quelli installati, dopodiché controlla se i nuovi pacchetti sono presenti in un eventuale DVD già montato altrimenti li scarica da internet.
Lo script può gestire anche un sistema multilib, infatti se...
Uno script da eseguire al primo avvio di Slackware.
Mi capita spesso di fare nuove installazioni di Slackware e di ripetere sempre le stesse operazioni atte ad una prima configurazione di base, come ad esempio l'italianizzazione o l'impostazione della corretta risoluzione framebuffer.
Per cui ho deciso di raggruppare tutte queste operazioni di base, che possono...
Ecco che la bash ci viene in aiuto anche per realizzare un semplice sistema di video sorveglianza molto economico.
Questo script scatta una foto dalla webcam impostata nella variabile DEV con mplayer, ne fa una copia con la data corrente come nome del file per conservare una copia di tutte le foto scattate e per sapere a prima vista a quando risalgono. Dopodiché carica entrambe le copie della foto sul server ftp...
Spesso i produttori di hardware ottengono costi di produzione più bassi utilizzando componenti con capacità superiori in dispositivi non progettati per sfruttarle piuttosto che utilizzando componenti su misura, questo è anche il caso del mio mouse Logitech RX1000.
Aprendo il mouse e guardando le piste stampate sul retro della scheda si nota che il controller ha un pin inutilizzato, quindi leggendo il codice (CY7C63813) sul chip e trovandone il...
Compilare il kernel Linux non è certamente cosa difficile, ma chi è alle prime armi spesso è spaventato da questa procedura e anche per chi è pratico a volte diventa scocciante aggiornare ad ogni release.
Dunque ho scritto questo script bash che automatizza la procedura: rileva quanti core ha il proprio processore per decidere in quanti processi paralleli eseguire la compilazione in modo da ottimizzarne i tempi, poi controlla se la versione scelta...
Condividi sui tuoi social preferiti!
Telegram Facebook Linkedin Twitter Pinterest