Miroirs/slackware-current
1
0
Fork 0
mirror of git://slackware.nl/current.git synced 2024-12-26 09:58:59 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
slackware-current/UPGRADE.TXT

184 lines
8.5 KiB
Text
Raw Permalink Normal View History

Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
Slackware 14.2 to 15.0 Upgrade HOWTO <volkerdi@slackware.com>
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
This document explains how to upgrade from Slackware 14.2 to Slackware 15.0.
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
----------------------------------------------------------------------------
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
For details of important changes from Slackware 14.2 to 15.0, see the file
'CHANGES_AND_HINTS.TXT'. Thanks to Robby Workman for help with this.
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
Before you begin, I would strongly recommend making a backup of your
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
system, or, if not the entire system, at least the /etc directory. You
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
might find that you need to refer to a few things after the upgrade
process is complete. Back it up, or take your chances.
OK, now that everything is safely backed up, let's proceed. :-)
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
To do this, you'll need the Slackware 15.0 packages. If these are on a DVD,
create a new directory to mount the DVD on so that it doesn't get in the way
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
during the upgrade:
mkdir /packages
mount /dev/cdrom /packages
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
The packages don't have to be on a DVD, as an alternative you could
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
copy the slackware directory (the one with the various package
subdirectories in it, basically the "slackware" or "slackware64" directory
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
from the install disc) to someplace like /root/slackware/. The important thing
is that you know where the slackware packages directory is. We'll use
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
/root/slackware in the following examples.
0. Put your machine in single-user mode:
telinit 1
Note that this is _not_ strictly required, and there have been reports
of success remotely upgrading machines that are still in multiuser
mode. However, more things can go wrong in multiuser, so especially
if you're considering a remote upgrade in multiuser mode, you might
want to clone the machine locally so that you can do a test run to
uncover any problem areas and come up with workarounds for them.
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
1. Upgrade your glibc shared libraries. This is important, or things
Slackware 14.0 Wed Sep 26 01:10:42 UTC 2012 Slackware 14.0 x86_64 stable is released! We're perfectionists here at Slackware, so this release has been a long time a-brewing. But we think you'll agree that it was worth the wait. Slackware 14.0 combines modern components, ease of use, and flexible configuration... our "KISS" philosophy demands it. The ISOs are off to be replicated, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. Please consider supporting the Slackware project by picking up a copy from store.slackware.com. We're taking pre-orders now, and offer a discount if you sign up for a subscription. Thanks to everyone who helped make this happen. The Slackware team, the upstream developers, and (of course) the awesome Slackware user community. Have fun! :-)
2012-09-26 03:10:42 +02:00
might go haywire during the next part of the upgrade:
Wed Jan 26 20:46:44 UTC 2022 a/aaa_libraries-15.0-x86_64-17.txz: Rebuilt. Upgraded: libcap.so.2.63, libglib-2.0.so.0.7000.3, libgmodule-2.0.so.0.7000.3, libgobject-2.0.so.0.7000.3, libgthread-2.0.so.0.7000.3, libtdb.so.1.4.6. a/mkinitrd-1.4.11-x86_64-28.txz: Rebuilt. Support kernel modules compressed with xz. Thanks to baldzhang. l/glib2-2.70.3-x86_64-1.txz: Upgraded. l/libcap-2.63-x86_64-1.txz: Upgraded. n/bluez-5.63-x86_64-2.txz: Rebuilt. rc.bluetooth: use #!/bin/bash shebang. Filter commented and empty lines when parsing uart.conf. Thanks to atelszewski.
2022-01-26 21:46:44 +01:00
upgradepkg --install-new /root/slackware/a/aaa_glibc-solibs-*.txz
Slackware 14.0 Wed Sep 26 01:10:42 UTC 2012 Slackware 14.0 x86_64 stable is released! We're perfectionists here at Slackware, so this release has been a long time a-brewing. But we think you'll agree that it was worth the wait. Slackware 14.0 combines modern components, ease of use, and flexible configuration... our "KISS" philosophy demands it. The ISOs are off to be replicated, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. Please consider supporting the Slackware project by picking up a copy from store.slackware.com. We're taking pre-orders now, and offer a discount if you sign up for a subscription. Thanks to everyone who helped make this happen. The Slackware team, the upstream developers, and (of course) the awesome Slackware user community. Have fun! :-)
2012-09-26 03:10:42 +02:00
2. Upgrade your package utilities and related tools:
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
Slackware 14.2 Thu Jun 30 20:26:57 UTC 2016 Slackware 14.2 x86_64 stable is released! The long development cycle (the Linux community has lately been living in "interesting times", as they say) is finally behind us, and we're proud to announce the release of Slackware 14.2. The new release brings many updates and modern tools, has switched from udev to eudev (no systemd), and adds well over a hundred new packages to the system. Thanks to the team, the upstream developers, the dedicated Slackware community, and everyone else who pitched in to help make this release a reality. The ISOs are off to be replicated, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. Please consider supporting the Slackware project by picking up a copy from store.slackware.com. We're taking pre-orders now, and offer a discount if you sign up for a subscription. Have fun! :-)
2016-06-30 22:26:57 +02:00
upgradepkg /root/slackware/a/pkgtools-*.txz
upgradepkg /root/slackware/a/tar-*.txz
upgradepkg /root/slackware/a/xz-*.txz
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
upgradepkg /root/slackware/a/findutils-*.txz
3. Upgrade everything else (and install new packages):
Tue Dec 21 19:04:03 UTC 2021 ap/vim-8.2.3868-x86_64-1.txz: Upgraded. kde/breeze-icons-5.89.0-noarch-2.txz: Rebuilt. Applied upstream patches: [PATCH] improve installation of light fallback icons [PATCH] Include "*@*" in the icon_files list for installation Thanks to Heinz Wiesinger. l/gtk+3-3.24.31-x86_64-1.txz: Upgraded. l/zstd-1.5.1-x86_64-1.txz: Upgraded. n/net-snmp-5.9.1-x86_64-4.txz: Rebuilt. Moved options for snmpd from rc.snmpd to /etc/default/snmpd. Thanks to Jakub 'shasta' Jankowski. xap/vim-gvim-8.2.3868-x86_64-1.txz: Upgraded.
2021-12-21 20:04:03 +01:00
upgradepkg --install-new --terse /root/slackware/*/*.t?z
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
4. Remove obsolete packages. The CHANGES_AND_HINTS.TXT file should have a
list of these. You may also wish to go into /var/lib/pkgtools/packages
and take a look at the package list:
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
ls -lt | less
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
You may spot some old, obsolete, or discontinued packages. If so,
you can remove these using 'removepkg'. This command will get rid of
the packages which became obsolete since Slackware 14.2 or were
introduced during the 15.0 development cycle and later removed:
Tue Dec 21 19:04:03 UTC 2021 ap/vim-8.2.3868-x86_64-1.txz: Upgraded. kde/breeze-icons-5.89.0-noarch-2.txz: Rebuilt. Applied upstream patches: [PATCH] improve installation of light fallback icons [PATCH] Include "*@*" in the icon_files list for installation Thanks to Heinz Wiesinger. l/gtk+3-3.24.31-x86_64-1.txz: Upgraded. l/zstd-1.5.1-x86_64-1.txz: Upgraded. n/net-snmp-5.9.1-x86_64-4.txz: Rebuilt. Moved options for snmpd from rc.snmpd to /etc/default/snmpd. Thanks to Jakub 'shasta' Jankowski. xap/vim-gvim-8.2.3868-x86_64-1.txz: Upgraded.
2021-12-21 20:04:03 +01:00
removepkg --terse ConsoleKit2 PyQt Thunar aaa_elflibs amarok amor ash \
automoc4 bigreqsproto calligra-l10n-bs calligra-l10n-ca \
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
calligra-l10n-ca@valencia calligra-l10n-cs calligra-l10n-da \
calligra-l10n-de calligra-l10n-el calligra-l10n-en_GB calligra-l10n-es \
calligra-l10n-et calligra-l10n-fi calligra-l10n-fr calligra-l10n-gl \
calligra-l10n-hu calligra-l10n-it calligra-l10n-ja calligra-l10n-kk \
calligra-l10n-nb calligra-l10n-nl calligra-l10n-pl calligra-l10n-pt \
calligra-l10n-pt_BR calligra-l10n-ru calligra-l10n-sk calligra-l10n-sv \
calligra-l10n-tr calligra-l10n-uk calligra-l10n-zh_CN \
calligra-l10n-zh_TW cargo cgmanager compositeproto damageproto db42 \
db44 dirmngr dmxproto dri2proto dri3proto eigen2 eject evieext \
fixesproto fontcacheproto fontsproto gcc-java getty-ps glade3 \
glibc-solibs glproto gnome-themes-standard gnu-cobol gst-plugins-base0 \
gst-plugins-good0 gstreamer0 gtk-xfce-engine herqq idnkit ilmbase \
imapd inputproto intel-gpu-tools js185 kaccessible kajongg \
kaudiocreator kbproto kde-base-artwork kde-baseapps kde-l10n-ar \
kde-l10n-bg kde-l10n-bs kde-l10n-ca kde-l10n-ca@valencia kde-l10n-cs \
kde-l10n-da kde-l10n-de kde-l10n-el kde-l10n-en_GB kde-l10n-es \
kde-l10n-et kde-l10n-eu kde-l10n-fa kde-l10n-fi kde-l10n-fr \
kde-l10n-ga kde-l10n-gl kde-l10n-he kde-l10n-hi kde-l10n-hr \
kde-l10n-hu kde-l10n-ia kde-l10n-id kde-l10n-is kde-l10n-it \
kde-l10n-ja kde-l10n-kk kde-l10n-km kde-l10n-ko kde-l10n-lt \
kde-l10n-lv kde-l10n-mr kde-l10n-nb kde-l10n-nds kde-l10n-nl \
kde-l10n-nn kde-l10n-pa kde-l10n-pl kde-l10n-pt kde-l10n-pt_BR \
kde-l10n-ro kde-l10n-ru kde-l10n-sk kde-l10n-sl kde-l10n-sr \
kde-l10n-sv kde-l10n-tr kde-l10n-ug kde-l10n-uk kde-l10n-wa \
kde-l10n-zh_CN kde-l10n-zh_TW kde-runtime kde-wallpapers kde-workspace \
kdeartwork kdegraphics-strigi-analyzer kdelibs \
kdenetwork-strigi-analyzers kdepim kdepim-apps-libs kdepimlibs \
kdesdk-strigi-analyzers kdevelop-php kdevelop-php-docs kdevplatform \
kdewebdev keybinder kgamma kio-mtp klettres korundum kplayer kppp \
kremotecontrol ksaneplugin ksnapshot ksysguard ktuberling ktux \
kuser kwebkitpart lha libXfont libart_lgpl libbluedevil libcroco \
libkdeedu libkgeomap liblastfm libmcs libmm-qt libmowgli libmsn \
libnm-qt libtermcap libva-intel-driver libwmf-docs mailx man \
mkfontdir mozjs52 mozjs60 mozjs68 mplayerthumbs nepomuk-core \
nepomuk-widgets notify-python openldap-client openssl10 \
openssl10-solibs orage oxygen-icons pairs perlkde perlqt \
phonon-gstreamer pm-utils presentproto printproto pth pykde4 pyrex \
python python-enum34 qca-qt5 qimageblitz qjson qt qt-gstreamer qtruby \
qtscriptgenerator randrproto raptor2 rasqal recordproto redland \
renderproto resourceproto rfkill rxvt scim scim-anthy scim-hangul \
scim-input-pad scim-m17n scim-pinyin scim-tables scrnsaverproto \
seamonkey-solibs sendmail sendmail-cf slocate smokegen smokekde \
smokeqt soprano strigi superkaramba tetex tetex-doc transfig trn \
urwid videoproto virtuoso-ose wicd-kde wireless-tools workbone \
xcmiscproto xextproto xf86-video-xgi xf86-video-xgixp xf86bigfontproto \
xf86dgaproto xf86driproto xf86miscproto xf86vidmodeproto xfractint \
xineramaproto xproto xv
5. Fix your config files. Some of the config files in /etc are going to
need your attention. You'll find the new incoming config files on
your system with the ".new" extension. You may need to fill these in
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
with information from your old config files and then move them over.
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
Feel brave? You can use this little script to install most of the
.new config files in /etc. If you've made any local changes you'll
need to add them to the newly installed files. Your old config files
will be copied to *.bak. Anyway, it might be an easier starting
point. Here it is:
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
#!/bin/sh
cd /etc
find . -name "*.new" | while read configfile ; do
if [ ! "$configfile" = "./rc.d/rc.inet1.conf.new" \
-a ! "$configfile" = "./rc.d/rc.local.new" \
-a ! "$configfile" = "./group.new" \
-a ! "$configfile" = "./passwd.new" \
-a ! "$configfile" = "./shadow.new" ]; then
cp -a $(echo $configfile | rev | cut -f 2- -d . | rev) \
$(echo $configfile | rev | cut -f 2- -d . | rev).bak 2> /dev/null
Tue Aug 28 22:05:19 UTC 2018 a/sysvinit-scripts-2.1-noarch-18.txz: Rebuilt. rc.cpufreq: for CPUs that use intel_pstate, default to the performance governor. The performance governor provides power savings while avoiding the ramp-up lag caused by using "ondemand", which defaults to "powersave" on these systems. Thanks to EdGr. d/bison-3.1-x86_64-1.txz: Upgraded.
2018-08-29 00:05:19 +02:00
mv --verbose $configfile $(echo $configfile | rev | cut -f 2- -d . | rev)
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
fi
done
Mon May 28 19:12:29 UTC 2018 a/pkgtools-15.0-noarch-13.txz: Rebuilt. installpkg: default line length for --terselength is the number of columns. removepkg: added --terse mode. upgradepkg: default line length for --terselength is the number of columns. upgradepkg: accept -option in addition to --option. ap/vim-8.1.0026-x86_64-1.txz: Upgraded. d/bison-3.0.5-x86_64-1.txz: Upgraded. e/emacs-26.1-x86_64-1.txz: Upgraded. kde/kopete-4.14.3-x86_64-8.txz: Rebuilt. Recompiled against libidn-1.35. n/conntrack-tools-1.4.5-x86_64-1.txz: Upgraded. n/libnetfilter_conntrack-1.0.7-x86_64-1.txz: Upgraded. n/libnftnl-1.1.0-x86_64-1.txz: Upgraded. n/links-2.16-x86_64-2.txz: Rebuilt. Rebuilt to enable X driver for -g mode. n/lynx-2.8.9dev.19-x86_64-1.txz: Upgraded. n/nftables-0.8.5-x86_64-1.txz: Upgraded. n/p11-kit-0.23.11-x86_64-1.txz: Upgraded. n/ulogd-2.0.7-x86_64-1.txz: Upgraded. n/whois-5.3.1-x86_64-1.txz: Upgraded. xap/network-manager-applet-1.8.12-x86_64-1.txz: Upgraded. xap/vim-gvim-8.1.0026-x86_64-1.txz: Upgraded.
2018-05-28 21:12:29 +02:00
You might also wish to move this config file over:
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
/usr/share/vim/vimrc.new
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
6. IMPORTANT! *Before* attempting to reboot your system, you will need
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
to make sure that the bootloader has been updated for the new kernel!
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
First, be sure your initrd is up to date (if you use one). You can
build a new initrd automatically by running the geninitrd script:
Slackware 14.0 Wed Sep 26 01:10:42 UTC 2012 Slackware 14.0 x86_64 stable is released! We're perfectionists here at Slackware, so this release has been a long time a-brewing. But we think you'll agree that it was worth the wait. Slackware 14.0 combines modern components, ease of use, and flexible configuration... our "KISS" philosophy demands it. The ISOs are off to be replicated, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. Please consider supporting the Slackware project by picking up a copy from store.slackware.com. We're taking pre-orders now, and offer a discount if you sign up for a subscription. Thanks to everyone who helped make this happen. The Slackware team, the upstream developers, and (of course) the awesome Slackware user community. Have fun! :-)
2012-09-26 03:10:42 +02:00
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
# geninitrd
Slackware 14.0 Wed Sep 26 01:10:42 UTC 2012 Slackware 14.0 x86_64 stable is released! We're perfectionists here at Slackware, so this release has been a long time a-brewing. But we think you'll agree that it was worth the wait. Slackware 14.0 combines modern components, ease of use, and flexible configuration... our "KISS" philosophy demands it. The ISOs are off to be replicated, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. Please consider supporting the Slackware project by picking up a copy from store.slackware.com. We're taking pre-orders now, and offer a discount if you sign up for a subscription. Thanks to everyone who helped make this happen. The Slackware team, the upstream developers, and (of course) the awesome Slackware user community. Have fun! :-)
2012-09-26 03:10:42 +02:00
If you use LILO, make sure the paths in /etc/lilo.conf point to a valid
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
kernel and then type 'lilo' to reinstall LILO. If you use a USB memory
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
stick to boot, copy the new kernel to it in place of the old one.
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
If you are using elilo on a machine with UEFI BIOS, run the eliloconfig
command to install the new kernel and initrd to the EFI System Partition.
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
7. Return to multi-user mode:
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
telinit 3
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
8. Reboot to start using the new kernel.
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
Mon Dec 20 19:41:32 UTC 2021 a/pkgtools-15.0-noarch-42.txz: Rebuilt. setup.services: list rc.nfsd. Suggested by alienBOB. l/expat-2.4.2-x86_64-1.txz: Upgraded. l/gegl-0.4.34-x86_64-1.txz: Upgraded. n/httpd-2.4.52-x86_64-1.txz: Upgraded. SECURITY: CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. Credits: Chamal SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (cve.mitre.org) A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Credits: ae 1/4*a-o(R)e 1/4 TengMA(@Te3t123) For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224 (* Security fix *) xap/gimp-2.10.30-x86_64-1.txz: Upgraded. xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538 (* Security fix *) xap/xlockmore-5.68-x86_64-1.txz: Upgraded. xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
2021-12-20 20:41:32 +01:00
At this point you should be running Slackware 15.0. :-)
Slackware 13.1 Wed May 19 08:58:23 UTC 2010 Slackware 13.1 x86_64 stable is released! Lots of thanks are due -- see the RELEASE_NOTES and the rest of the ChangeLog for credits. The ISOs are on their way to replication, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. We are taking pre-orders now at store.slackware.com, and offering a discount if you sign up for a subscription. Consider picking up a copy to help support the project. Thanks again to the Slackware community for testing, contributing, and generally holding us to a high level of quality. :-) Enjoy!
2010-05-19 10:58:23 +02:00
I wish everyone good luck with this!
---
Patrick Volkerding
volkerdi@slackware.com
Reference in a new issue Copy permalink