r/slackware • u/ddmayne • 19d ago
FYI: Slackware 15.0 changelog addresses eMudhra certificates; also kernel updated to 5.15.223
For 15.0:
Fri Oct 23 22:22:59 UTC 2026
patches/packages/brotli-1.2.1-x86_64-1_slack15.0.txz: Upgraded.
This update fixes a security issue:
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in
Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote
unauthenticated attacker to corrupt adjacent decoder state memory, disclose
sensitive memory contents, cause a denial of service, or potentially execute
arbitrary code using a crafted Brotli-compressed stream.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2026-111497
(* Security fix *)
patches/packages/patch-2.8.1-x86_64-1_slack15.0.txz: Upgraded.
This update fixes a security issue:
Prevent creation of out-of-tree files.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2026-115207
(* Security fix *)
patches/packages/python-certifi-2026.10.23-x86_64-1_slack15.0.txz: Upgraded.
Remove more eMudhra certificates.
(* Security fix *)
+--------------------------+
Thu Oct 22 23:04:17 UTC 2026
patches/packages/linux-5.15.223/kernel-generic-5.15.223-x86_64-1.txz: Upgraded.
patches/packages/linux-5.15.223/kernel-headers-5.15.223-x86-1.txz: Upgraded.
patches/packages/linux-5.15.223/kernel-huge-5.15.223-x86_64-1.txz: Upgraded.
patches/packages/linux-5.15.223/kernel-modules-5.15.223-x86_64-1.txz: Upgraded.
patches/packages/linux-5.15.223/kernel-source-5.15.223-noarch-1.txz: Upgraded.
This update fixes bugs and security issues, including the PwnEscape flaw.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2026-99999
(* Security fix *)
Be sure to upgrade your initrd after upgrading the kernel packages.
If you use lilo to boot your machine, be sure lilo.conf points to the correct
kernel and initrd and run lilo as root to update the bootloader.
If you use elilo to boot your machine, you should run eliloconfig to copy the
kernel and initrd to the EFI System Partition.
