Slackware Linux e risoluzione di problemi, di Andrea Peluso

Sat Sep 3 13:07:00 CEST 2022

blender-3.0.1-x86_64-1_ap.txz:  Upgraded.

Mon Apr 6 00:07:15 CEST 2026

l/SDL2_image-2.8.10-x86_64-1.txz:  Upgraded.
l/accountsservice-26.13.3-x86_64-1.txz:  Upgraded.
  Shared library .so-version bump.
l/libwmf-0.2.15-x86_64-1.txz:  Upgraded.
l/qt6-6.10.3_20260330_6417867c-x86_64-2.txz:  Rebuilt.
  Patched to get qdoc building with LLVM22.
  Thanks to Brent Spillner.
n/nfs-utils-2.9.1-x86_64-1.txz:  Upgraded.
xfce/xfce4-whiskermenu-plugin-2.10.1-x86_64-2.txz:  Rebuilt.
  Recompiled against accountsservice-26.13.3.

Sun Apr 5 01:32:32 CEST 2026

l/SDL3-3.4.4-x86_64-1.txz:  Upgraded.
l/harfbuzz-14.1.0-x86_64-1.txz:  Upgraded.
l/openexr-3.4.9-x86_64-1.txz:  Upgraded.
  This release addresses several security vulnerabilities:
  DWA Lossy Decoder Heap Out-of-Bounds Write.
  Signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write.
  Signed integer overflow (undefined behavior) in undo_pxr24_impl may allow
  bounds-check bypass in PXR24 decompression.
  Misaligned write in LossyDctDecoder_execute leading to undefined behavior
  (DWA/DWAB decompression).
  Signed integer overflow in generic_unpack() when parsing EXR files with
  crafted negative dataWindow.min.x.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34589
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34588
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34380
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34379
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34378
  (* Security fix *)
l/python-charset-normalizer-3.4.7-x86_64-1.txz:  Upgraded.
n/postfix-3.11.1-x86_64-2.txz:  Rebuilt.
  Added support for LMDB.
  Thanks to Thom1b.
x/gtk-layer-shell-0.10.1-x86_64-1.txz:  Upgraded.

Sat Apr 4 01:48:17 CEST 2026

a/cryptsetup-2.8.6-x86_64-1.txz:  Upgraded.
a/hwdata-0.406-noarch-1.txz:  Upgraded.
a/infozip-6.0-x86_64-8.txz:  Rebuilt.
  This update fixes security issues:
  Improper handling of Unicode strings can lead to a null pointer dereference.
  The conversion of a wide string to a local string leads to an of out-of-bounds
  write.
  Thanks to pbslxw for the heads-up.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4217
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0529
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0530
  (* Security fix *)
a/kernel-firmware-20260402_583d336-noarch-1.txz:  Upgraded.
a/kernel-generic-6.18.21-x86_64-1.txz:  Upgraded.
ap/screen-5.0.1-x86_64-2.txz:  Rebuilt.
  Build using --enable-utmp.
  Rename --with-sys-screenrc to --with-system-screenrc.
  Remove obsolete configure options.
  Thanks to opty.
ap/xorriso-1.5.8-x86_64-1.txz:  Upgraded.
d/kernel-headers-6.18.21-x86-1.txz:  Upgraded.
d/mercurial-7.2.1-x86_64-1.txz:  Upgraded.
d/perl-5.42.2-x86_64-2.txz:  Rebuilt.
  Upgraded: XML-Parser-2.47.
  This seems to be the last working version... not sure why.
  Thanks to fulalas.
k/kernel-source-6.18.21-noarch-1.txz:  Upgraded.
l/aom-3.13.3-x86_64-1.txz:  Upgraded.
l/libburn-1.5.8-x86_64-1.txz:  Upgraded.
l/qt6-6.10.3_20260330_6417867c-x86_64-1.txz:  Upgraded.
n/bind-9.20.22-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  Fix crash when reconfiguring zone update policy during active updates.
  Fixed a crash that could occur when running rndc reconfig to change a
  zone's update policy (e.g., from allow-update to update-policy) while
  DNS UPDATE requests were being processed for that zone.
  ISC would like to thank Vitaly Simonovich for bringing this issue to
  our attention.
  (* Security fix *)
n/fetchmail-6.6.3-x86_64-1.txz:  Upgraded.
n/openssh-10.3p1-x86_64-1.txz:  Upgraded.
x/libinput-1.31.1-x86_64-1.txz:  Upgraded.
x/wayland-protocols-1.48-noarch-1.txz:  Upgraded.
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.

Sun Apr 5 10:08:08 CEST 2026

l/SDL3-3.4.4-aarch64-1.txz:  Upgraded.
l/harfbuzz-14.1.0-aarch64-1.txz:  Upgraded.
l/openexr-3.4.9-aarch64-1.txz:  Upgraded.
  This release addresses several security vulnerabilities:
  DWA Lossy Decoder Heap Out-of-Bounds Write.
  Signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write.
  Signed integer overflow (undefined behavior) in undo_pxr24_impl may allow
  bounds-check bypass in PXR24 decompression.
  Misaligned write in LossyDctDecoder_execute leading to undefined behavior
  (DWA/DWAB decompression).
  Signed integer overflow in generic_unpack() when parsing EXR files with
  crafted negative dataWindow.min.x.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34589
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34588
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34380
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34379
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34378
  (* Security fix *)
l/python-charset-normalizer-3.4.7-aarch64-1.txz:  Upgraded.
n/postfix-3.11.1-aarch64-2.txz:  Rebuilt.
  Added support for LMDB.
  Thanks to Thom1b.
x/gtk-layer-shell-0.10.1-aarch64-1.txz:  Upgraded.

Sat Apr 4 10:08:08 CEST 2026

a/cryptsetup-2.8.6-aarch64-1.txz:  Upgraded.
a/hwdata-0.406-aarch64-1.txz:  Upgraded.
a/infozip-6.0-aarch64-6.txz:  Rebuilt.
  This update fixes security issues:
  Improper handling of Unicode strings can lead to a null pointer dereference.
  The conversion of a wide string to a local string leads to an of out-of-bounds
  write.
  Thanks to pbslxw for the heads-up.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4217
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0529
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0530
  (* Security fix *)
a/kernel-firmware-20260402_583d336-noarch-1.txz:  Upgraded.
ap/screen-5.0.1-aarch64-3.txz:  Rebuilt.
  Build using --enable-utmp.
  Rename --with-sys-screenrc to --with-system-screenrc.
  Remove obsolete configure options.
  Thanks to opty.
ap/xorriso-1.5.8-aarch64-1.txz:  Upgraded.
d/mercurial-7.2.1-aarch64-1.txz:  Upgraded.
d/perl-5.42.2-aarch64-2.txz:  Rebuilt.
  Upgraded: XML-Parser-2.47.
  This seems to be the last working version... not sure why.
  Thanks to fulalas.
l/aom-3.13.3-aarch64-1.txz:  Upgraded.
l/libburn-1.5.8-aarch64-1.txz:  Upgraded.
l/qt6-6.10.3_20260330_6417867c-aarch64-1.txz:  Upgraded.
n/bind-9.20.22-aarch64-1.txz:  Upgraded.
  This update fixes a security issue:
  Fix crash when reconfiguring zone update policy during active updates.
  Fixed a crash that could occur when running rndc reconfig to change a
  zone's update policy (e.g., from allow-update to update-policy) while
  DNS UPDATE requests were being processed for that zone.
  ISC would like to thank Vitaly Simonovich for bringing this issue to
  our attention.
  (* Security fix *)
n/fetchmail-6.6.3-aarch64-1.txz:  Upgraded.
n/openssh-10.3p1-aarch64-1.txz:  Upgraded.
x/libinput-1.31.1-aarch64-1.txz:  Upgraded.
x/wayland-protocols-1.48-aarch64-1.txz:  Upgraded.

Thu Apr 2 10:08:08 CEST 2026

a/upower-1.91.2-aarch64-1.txz:  Upgraded.
a/util-linux-2.42-aarch64-1.txz:  Upgraded.
ap/vim-9.2.0280-aarch64-1.txz:  Upgraded.
  Comment everything out in the default /usr/share/vim/vimrc.
  Thanks to jtsn.
kde/libindi-2.2.0-aarch64-1.txz:  Upgraded.
l/gtk4-4.22.2-aarch64-1.txz:  Upgraded.
l/harfbuzz-14.0.0-aarch64-1.txz:  Upgraded.
l/jemalloc-5.3.0-aarch64-3.txz:  Rebuilt.
  Rebuilt with --with-lg-page=16 to support aarch64 kernels with non-4K page
  sizes (e.g. the RPi vendor kernel uses 16K). jemalloc 5.x permits building
  for a larger page size than the running kernel, so this covers 4K through 64K
  without issue. Fixes runtime abort: "Unsupported system page size" on affected
  kernels.
l/python-pillow-12.2.0-aarch64-1.txz:  Upgraded.
l/python-pybind11-3.0.3-aarch64-1.txz:  Upgraded.
l/spirv-llvm-translator-22.1.1-aarch64-1.txz:  Upgraded.
x/mesa-26.0.4-aarch64-1.txz:  Upgraded.
x/noto-fonts-ttf-2026.04.01-noarch-1.txz:  Upgraded.
xap/vim-gvim-9.2.0280-aarch64-1.txz:  Upgraded.
xap/xscreensaver-6.15-aarch64-1.txz:  Upgraded.
testing/packages/rust-1.94.1-aarch64-1.txz:  Upgraded.

Sat Apr 4 01:48:17 CEST 2026

patches/packages/infozip-6.0-x86_64-8_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  Improper handling of Unicode strings can lead to a null pointer dereference.
  The conversion of a wide string to a local string leads to an of out-of-bounds
  write.
  Thanks to pbslxw for the heads-up.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4217
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0529
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0530
  (* Security fix *)
patches/packages/krita-5.0.2-x86_64-3_slack15.0.txz:  Rebuilt.
  This update fixes a security issue:
  Heap-based buffer overflow when parsing TGA files.
  Thanks to pbslxw for the heads-up.
  For more information, see:
    https://kde.org/info/security/advisory-20250929-1.txt
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59820
  (* Security fix *)

Tue Mar 31 23:58:54 CEST 2026

patches/packages/xz-5.2.13-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Fix a buffer overflow in lzma_index_append().
  Fix invalid memory access in --files and --files0.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34743
  (* Security fix *)

Fri Mar 27 05:09:20 CET 2026

extra/tigervnc/tigervnc-1.16.2-x86_64-1_slack15.0.txz:  Upgraded.
  Fixed missing security fixes in the 1.16.1 release.
  (* Security fix *)
patches/packages/libpng-1.6.56-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE.
  Out-of-bounds read/write in the palette expansion on ARM Neon.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-33416
    https://www.cve.org/CVERecord?id=CVE-2026-33636
  (* Security fix *)
testing/packages/rust-1.94.1-x86_64-1_slack15.0.txz:  Upgraded.

Sat Apr 4 10:08:08 CEST 2026

patches/packages/infozip-6.0-arm-6_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  Improper handling of Unicode strings can lead to a null pointer dereference.
  The conversion of a wide string to a local string leads to an of out-of-bounds
  write.
  Thanks to pbslxw for the heads-up.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4217
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0529
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0530
  (* Security fix *)

Wed Apr 1 10:08:08 CEST 2026

patches/packages/xz-5.2.13-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Fix a buffer overflow in lzma_index_append().
  Fix invalid memory access in --files and --files0.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34743
  (* Security fix *)

Fri Mar 27 09:08:08 CET 2026

extra/tigervnc/tigervnc-1.16.2-arm-1_slack15.0.txz:  Upgraded.
  Fixed missing security fixes in the 1.16.1 release.
  (* Security fix *)
patches/packages/libpng-1.6.56-arm-1_slack15.0.txz:  Upgraded.
  This update fixes security issues:
  Use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE.
  Out-of-bounds read/write in the palette expansion on ARM Neon.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-33416
    https://www.cve.org/CVERecord?id=CVE-2026-33636
  (* Security fix *)

Aggiornamenti di script e guide

24/02/2022: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware
15/12/2015: Aggiornato HowTo automatizzare la compilazione del kernel
15/12/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
24/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
22/11/2015: Aggiornato HowTo Automatizzare l'aggiornamento di Slackware current
07/11/2015: Aggiornato HowTo automatizzare la compilazione del kernel
05/11/2015: Nuovo HowTo Automatizzare l'aggiornamento di Slackware current
30/10/2015: Aggiornato HowTo Automatizzare la prima configurazione di Slackware
26/05/2015: Aggiornato HowTo mini Slackware su pendrive
07/05/2015: Aggiornato HowTo automatizzare la compilazione del kernel
13/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel
02/04/2015: Aggiornato HowTo automatizzare la compilazione del kernel