Stack Clash Fixes

You may have heard about Stack Clash vulnerabilities that was published by Qualys last week. It was an old bug, but affected many systems running Linux both x86 and x86_64. As they coordinated the fixes with upstream vendors, the fixes has been released for public. Today's update is all about kernel update both in -stable (14.2 only) and -current. They are now upgraded to 4.4.74 and 4.9.34 which contains the fixes for Stack Clash. You are advised to upgrade your kernel as soon as possible. The other update that were both in -stable and -current are mozilla-thunderbird which is now updated to 52.2.1.

For those running -current, there are more updates in this batch:
lrzip: Upgraded to 0.631lvm2: Upgraded to 2.02.171time: Upgraded to 1.7.2mpg123: Upgraded to 1.25.0glib2: Upgraded to 2.52.3glibmm: Upgraded to 2.52.0gtkmm3: Upgraded to 3.22.1plus more in the past updates Users running Skylake/Kabylake processors should also read this thread on LQ about a bug in the Hyper-Threading featu…

Mid June Updates

More than 2 weeks since i gave an update to -current development and things are going more interesting in -current branch. It stays up-to-date with latest changes upstream while keeping the stability standards high. Here's some highlight in the last two weeks:
Kernel: Upgraded to 4.9.31Firefox: Upgraded to 52.2.0ESR releaseThunderbird: Upgraded to 52.2.0 release and switched to GTK+3NetworkManager: Upgraded to 1.8.0sqlite: Upgraded to 3.19.3bind: Upgraded to 9.11.1_P1gnupg2: Upgraded to 2.1.21gpgme: Upgraded to 1.9.0 (drop libgpgme-pthread support)pth -> npth replacementdirmngr removal (included in latest gnupg2)samba: Upgraded to 4.6.5glew: Upgraded to 2.0.0irssi: Upgraded to 1.0.3libdrm: Upgraded to 2.4.81mesa: Upgraded to 17.1.2gdb: Upgraded to 8.0sane: Upgraded to 1.0.27alsa-lib: Upgraded to Upgraded to 3.8.2mutt: Upgraded to 1.8.3 Due to the changes in the gnupg2 package, some startup scripts might need a little tweak. It dropped some options, so you might nee…

Migrating to x86_64

This evening, i decided to remove my Slackware-Current installation on my old Asus laptop which is still at 32 bit architecture and replace it with Slackware 14.2 64 bit architecture. The reason is simple: more and more upstream projects are supporting only for x86_64. Google, Facebook, Apple, and many big companies invest heavily on x86_64 architecture which has better future. It supports more memory without the use of PAE and better overall performance. Another reason is because i want to play more with Docker, which is (again) only available for x86_64 platform. Docker is now considered mature and ready to be deployed into production environments, so it's time to learn more about it.

I decided to stay with Slackware64 14.2 instead of going with -current for this laptop. I simply use the dual-side DVD of Slackware64-14.2 i got from Slackware Store and install it directly on the laptop. I formatted the old drive and in just under 15 minutes, the full installation is completed.


What Happened in 10 Days of Development?

My last post was about 11 days ago when we were talking about security update for kdelibs and freetype. Since then, -current is still progressing but i didn't write anything for the past 10 days. So, what happened in the past 10 days?

First, we have a new kernel. It jumped 2 minor releases to 4.9.30, the latest LTS release from 4.9.x branch, maintained by Greg K-H. Next we have mesa upgraded to 17.1.1 along with enabled Vulkan drivers for Intel and Radeon, thanks to a new package vulkan-sdk.

alsa-lib and alsa-plugins are now upgraded to 1.1.4, bringing many updates to the sound stack. ffmpeg also received it's first minor release, 3.3.1 fixing tons of bugs. We also see many updated packages:
aaa_terminfo: Upgraded to 6.0 bash: Upgraded to 4.4.012 ccache: Upgraded to 3.3.4gkrellm: Upgraded to 2.3.10 mozilla-firefox: Upgraded to 52.1.2esrnano: Upgraded to 2.8.4 NetworkManager: Upgraded to 1.8.0 newt: Upgraded to 0.52.20 pango: Upgraded to 1.40.6samba: Upgraded to 4.6.4 (security …

Security Update: kdelibs, freetype

Current is progressing nicely after a basic toolchain bump last week. The kernel stock is bumped rapidly and bugs are squashed while security updates were deployed in short period. There are two security updates that were recently released:
kdelibs: Upgraded to 4.14.32freetype: Rebuilt to fix out-of-bound heap-based overflow Lots of small improvements were added into current's mkinitrd, elilo, and sysvinit-scripts. The kernel also received 2 changes during the last two updates: 9P_FS_POSIX_ACL and CIFS_SMB2. These two were requested in LQ. Patrick is following mesa development as well so at this moment, we have latest mesa available in -current. We also have the latest git 2.13.0 which includes big changes for developers.

Having latest version on a package comes with a price, especially when it relates to GCC. Since Slackware jumped from 5.3.0 to 7.1.0 in -current (6.3.0 was in /testing for a while) and the changes itself are quite big, some users quickly found some scripts in SBo …

Cinnamon 3.4 for Slackware 14.2

I have just pushed necessary changes to bring Cinnamon 3.4 packages for Slackware 14.2 users. I bumped some dependencies in the process, but not all deps are bumped since some requires newer GTK+3 stack, which only happening in current.

There are some notes on this packages:
I keep mozjs 24.x branch in 14.2 since it works fineSame thing with cjs 3.2.0 since newer cjs requires newer librariesCinnamon 3.4 can work with cjs 3.2 or 3.4.I disabled wacom support in cinnamon-control-center to avoid adding another dependency (libwacom). This package already exists in Slackware-Current, so it's built with wacom support. For those who want to compile Cinnamon 3.4 for Slackware 14.2, please use 14.2 branch. Master branch is now used for tracking Slackware-Current.

Let me know if you found any trouble using Cinnamon 3.4.

MP3 support in Current

Since MP3 patent has expired in April, some distributions is planning to add full MP3 support by default, starting with Fedora and now Slackware is doing the same thing, except that it has been included in the latest -current tree by the addition of lame package and all relevant packages are being rebuilt to support libmp3lame. I hoped that someday x264 can be included as well or even better x265. They are released under GNU GPL v2.

Another multimedia-related packages being bumped are GStreamer and gst-plugins-{base,good,libav}. They are now upgraded to 1.12.0 which was released few days ago. Flex is now bumped to 2.6.4 which should honor yy_* macros and fix many issues in other open source projects. Lastly, glibc is rebuilt to revert a patch that caused IFUNC errors to be emitted during boot. It's just purely cosmetic.

I'm pretty sure next Slackware release will be another awesome release with all the great goodies. If you are planning to test the latest Slackware-Current wi…