Mon Dec 20 19:41:32 UTC 202120211220194132

a/pkgtools-15.0-noarch-42.txz:  Rebuilt.
  setup.services: list rc.nfsd. Suggested by alienBOB.
l/expat-2.4.2-x86_64-1.txz:  Upgraded.
l/gegl-0.4.34-x86_64-1.txz:  Upgraded.
n/httpd-2.4.52-x86_64-1.txz:  Upgraded.
  SECURITY: CVE-2021-44790: Possible buffer overflow when parsing
  multipart content in mod_lua of Apache HTTP Server 2.4.51 and
  earlier (cve.mitre.org)
  A carefully crafted request body can cause a buffer overflow in
  the mod_lua multipart parser (r:parsebody() called from Lua
  scripts).
  The Apache httpd team is not aware of an exploit for the
  vulnerabilty though it might be possible to craft one.
  This issue affects Apache HTTP Server 2.4.51 and earlier.
  Credits: Chamal
  SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in
  forward proxy configurations in Apache HTTP Server 2.4.51 and
  earlier (cve.mitre.org)
  A crafted URI sent to httpd configured as a forward proxy
  (ProxyRequests on) can cause a crash (NULL pointer dereference)
  or, for configurations mixing forward and reverse proxy
  declarations, can allow for requests to be directed to a
  declared Unix Domain Socket endpoint (Server Side Request
  Forgery).
  This issue affects Apache HTTP Server 2.4.7 up to 2.4.51
  (included).
  Credits: ae 1/4*a-o(R)e 1/4
  TengMA(@Te3t123)
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224
  (* Security fix *)
xap/gimp-2.10.30-x86_64-1.txz:  Upgraded.
xap/mozilla-thunderbird-91.4.1-x86_64-1.txz:  Upgraded.
  This release contains security fixes and improvements.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/
    https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538
  (* Security fix *)
xap/xlockmore-5.68-x86_64-1.txz:  Upgraded.
xap/xsnow-3.4.2-x86_64-1.txz:  Upgraded.

1 files changed, 89 insertions, 74 deletions

diff --git a/UPGRADE.TXT b/UPGRADE.TXT
index 1efbba02c..84e0837ba 100644
--- a/UPGRADE.TXT
+++ b/UPGRADE.TXT
@@ -1,32 +1,32 @@
 

-Slackware 14.1 to 14.2 Upgrade HOWTO  <volkerdi@slackware.com>

+Slackware 14.2 to 15.0 Upgrade HOWTO  <volkerdi@slackware.com>

 

-This document explains how to upgrade from Slackware 14.1 to Slackware 14.2.

+This document explains how to upgrade from Slackware 14.2 to Slackware 15.0.

 

 ----------------------------------------------------------------------------

 

-For details of important changes from Slackware 14.1 to 14.2, see the file

-'CHANGES_AND_HINTS.TXT'.  Thanks to Robby Workman for help with this.

+For details of important changes from Slackware 14.2 to 15.0, see the file

+'CHANGES_AND_HINTS.TXT'. Thanks to Robby Workman for help with this.

 

 Before you begin, I would strongly recommend making a backup of your

-system, or, if not the entire system, at least the /etc directory.  You

+system, or, if not the entire system, at least the /etc directory. You

 might find that you need to refer to a few things after the upgrade

 process is complete. Back it up, or take your chances.

 

 OK, now that everything is safely backed up, let's proceed. :-)

 

-To do this, you'll need the Slackware 14.2 packages.  If these are on a CD,

-create a new directory to mount the CD on so that it doesn't get in the way

+To do this, you'll need the Slackware 15.0 packages. If these are on a DVD,

+create a new directory to mount the DVD on so that it doesn't get in the way

 during the upgrade:

 

 mkdir /packages

 mount /dev/cdrom /packages

 

-The packages don't have to be on a CD-ROM, as an alternative you could

+The packages don't have to be on a DVD, as an alternative you could

 copy the slackware directory (the one with the various package

 subdirectories in it, basically the "slackware" or "slackware64" directory

-from the install disc) to someplace like /root/slackware/.  The important thing

-is that you know where the slackware packages directory is.  We'll use

+from the install disc) to someplace like /root/slackware/. The important thing

+is that you know where the slackware packages directory is. We'll use

 /root/slackware in the following examples.

 

 

@@ -41,7 +41,7 @@ is that you know where the slackware packages directory is.  We'll use
     uncover any problem areas and come up with workarounds for them.

 

 

-1.  Upgrade your glibc shared libraries.  This is important, or things

+1.  Upgrade your glibc shared libraries. This is important, or things

     might go haywire during the next part of the upgrade:

 

     upgradepkg /root/slackware/a/aaa_glibc-solibs-*.txz

@@ -59,45 +59,79 @@ is that you know where the slackware packages directory is.  We'll use
 

     upgradepkg --install-new /root/slackware/*/*.t?z

 

-    If you wish to upgrade everything except for the KDEI language

-    packs for KDE (these take a lot of space and can be dealt with

-    after the main upgrade more quickly and easily), running this

-    script in the "slackware" directory will do the trick:

 

-    #!/bin/sh

-    for dir in a ap d e f k kde l n t tcl x xap xfce y ; do

-      ( cd $dir ; upgradepkg --install-new *.t?z )

-    done

-

-

-4.  Remove obsolete packages.  The CHANGES_AND_HINTS.TXT file should have a

-    list of these.  You may also wish to go into /var/log/packages and take

-    a look at the package list:

+4.  Remove obsolete packages. The CHANGES_AND_HINTS.TXT file should have a

+    list of these. You may also wish to go into /var/lib/pkgtools/packages

+    and take a look at the package list:

 

     ls -lt | less

 

-    You may spot some old, obsolete, or discontinued packages.  If so,

-    you can remove these using 'removepkg'.  This command will get rid of

-    the packages which became obsolete since Slackware 14.1:

-

-    removepkg ConsoleKit apmd bluez-hcidump cxxlibs foomatic-filters \

-      gnome-icon-theme imlib kdeadmin kdenetwork kdesdk kdetoys kwallet \

-      lesstif libelf libjpeg libxfcegui4 networkmanagement obex-data-server \

-      obexfs open-cobol oxygen-gtk3 phonon-mplayer phonon-xine pil portmap \

-      procps qca-cyrus-sasl qca-gnupg qca-ossl udev xchat xf86-input-aiptek \

-      xf86-video-modesetting xfce4-mixer xfce4-volumed xfwm4-themes

-

-

-5.  Fix your config files.  Some of the config files in /etc are going to 

-    need your attention.  You'll find the new incoming config files on 

-    your system with the ".new" extension.  You may need to fill these in 

+    You may spot some old, obsolete, or discontinued packages. If so,

+    you can remove these using 'removepkg'. This command will get rid of

+    the packages which became obsolete since Slackware 14.2 or were

+    introduced during the 15.0 development cycle and later removed:

+

+    removepkg ConsoleKit2 PyQt Thunar aaa_elflibs amarok amor ash automoc4 \

+      bigreqsproto calligra-l10n-bs calligra-l10n-ca \

+      calligra-l10n-ca@valencia calligra-l10n-cs calligra-l10n-da \

+      calligra-l10n-de calligra-l10n-el calligra-l10n-en_GB calligra-l10n-es \

+      calligra-l10n-et calligra-l10n-fi calligra-l10n-fr calligra-l10n-gl \

+      calligra-l10n-hu calligra-l10n-it calligra-l10n-ja calligra-l10n-kk \

+      calligra-l10n-nb calligra-l10n-nl calligra-l10n-pl calligra-l10n-pt \

+      calligra-l10n-pt_BR calligra-l10n-ru calligra-l10n-sk calligra-l10n-sv \

+      calligra-l10n-tr calligra-l10n-uk calligra-l10n-zh_CN \

+      calligra-l10n-zh_TW cargo cgmanager compositeproto damageproto db42 \

+      db44 dirmngr dmxproto dri2proto dri3proto eigen2 eject evieext \

+      fixesproto fontcacheproto fontsproto gcc-java getty-ps glade3 \

+      glibc-solibs glproto gnome-themes-standard gnu-cobol gst-plugins-base0 \

+      gst-plugins-good0 gstreamer0 gtk-xfce-engine herqq idnkit ilmbase \

+      imapd inputproto intel-gpu-tools js185 kaccessible kajongg \

+      kaudiocreator kbproto kde-base-artwork kde-baseapps kde-l10n-ar \

+      kde-l10n-bg kde-l10n-bs kde-l10n-ca kde-l10n-ca@valencia kde-l10n-cs \

+      kde-l10n-da kde-l10n-de kde-l10n-el kde-l10n-en_GB kde-l10n-es \

+      kde-l10n-et kde-l10n-eu kde-l10n-fa kde-l10n-fi kde-l10n-fr \

+      kde-l10n-ga kde-l10n-gl kde-l10n-he kde-l10n-hi kde-l10n-hr \

+      kde-l10n-hu kde-l10n-ia kde-l10n-id kde-l10n-is kde-l10n-it \

+      kde-l10n-ja kde-l10n-kk kde-l10n-km kde-l10n-ko kde-l10n-lt \

+      kde-l10n-lv kde-l10n-mr kde-l10n-nb kde-l10n-nds kde-l10n-nl \

+      kde-l10n-nn kde-l10n-pa kde-l10n-pl kde-l10n-pt kde-l10n-pt_BR \

+      kde-l10n-ro kde-l10n-ru kde-l10n-sk kde-l10n-sl kde-l10n-sr \

+      kde-l10n-sv kde-l10n-tr kde-l10n-ug kde-l10n-uk kde-l10n-wa \

+      kde-l10n-zh_CN kde-l10n-zh_TW kde-runtime kde-wallpapers kde-workspace \

+      kdeartwork kdegraphics-strigi-analyzer kdelibs \

+      kdenetwork-strigi-analyzers kdepim kdepim-apps-libs kdepimlibs \

+      kdesdk-strigi-analyzers kdevelop-php kdevelop-php-docs kdevplatform \

+      kdewebdev keybinder kgamma kio-mtp klettres korundum kplayer kppp \

+      kremotecontrol ksaneplugin ksnapshot ksysguard ktuberling ktux \

+      kuser kwebkitpart lha libXfont libart_lgpl libbluedevil libcroco \

+      libkdeedu libkgeomap liblastfm libmcs libmm-qt libmowgli libmsn \

+      libnm-qt libtermcap libva-intel-driver libwmf-docs mailx man \

+      mkfontdir mozjs52 mozjs60 mozjs68 mplayerthumbs nepomuk-core \

+      nepomuk-widgets notify-python openldap-client openssl10 \

+      openssl10-solibs orage oxygen-icons pairs perlkde perlqt \

+      phonon-gstreamer pm-utils presentproto printproto pth pykde4 pyrex \

+      python python-enum34 qca-qt5 qimageblitz qjson qt qt-gstreamer qtruby \

+      qtscriptgenerator randrproto raptor2 rasqal recordproto redland \

+      renderproto resourceproto rfkill rxvt scim scim-anthy scim-hangul \

+      scim-input-pad scim-m17n scim-pinyin scim-tables scrnsaverproto \

+      seamonkey-solibs sendmail sendmail-cf slocate smokegen smokekde \

+      smokeqt soprano strigi superkaramba tetex tetex-doc transfig trn \

+      urwid videoproto virtuoso-ose wicd-kde wireless-tools workbone \

+      xcmiscproto xextproto xf86-video-xgi xf86-video-xgixp xf86bigfontproto \

+      xf86dgaproto xf86driproto xf86miscproto xf86vidmodeproto xfractint \

+      xineramaproto xproto xv

+

+

+5.  Fix your config files. Some of the config files in /etc are going to 

+    need your attention. You'll find the new incoming config files on 

+    your system with the ".new" extension. You may need to fill these in 

     with information from your old config files and then move them over.

 

-    Feel brave?  You can use this little script to install most of the

-    .new config files in /etc.  If you've made any local changes you'll

-    need to add them to the newly installed files.  Your old config files

-    will be copied to *.bak.  Anyway, it might be an easier starting

-    point.  Here it is:

+    Feel brave? You can use this little script to install most of the

+    .new config files in /etc. If you've made any local changes you'll

+    need to add them to the newly installed files. Your old config files

+    will be copied to *.bak. Anyway, it might be an easier starting

+    point. Here it is:

 

      #!/bin/sh

      cd /etc

@@ -118,51 +152,32 @@ is that you know where the slackware packages directory is.  We'll use
     /usr/share/vim/vimrc.new

 

 

-6.  If you use a non-en_US language pack for KDE and you already have it

-    installed, then you may upgrade it by moving into the slackware/kdei

-    directory and using this command:

-

-    upgradepkg --install-new *-<your KDE locale>-*t?z

-

-    If your language has been added to KDE since Slackware 14.1, you'll

-    need to install it using installpkg, or upgradepkg --install-new.

-   

-    Typically you'll need to make sure that you have installed the

-    slackware/kdei packages for kde and calligra (if you use those).

-

-

-7.  IMPORTANT!  *Before* attempting to reboot your system, you will need

+6.  IMPORTANT! *Before* attempting to reboot your system, you will need

     to make sure that the bootloader has been updated for the new kernel!

-    First, be sure your initrd is up to date (if you use one).  You can

-    build a new initrd automatically by running the

-    mkinitrd_command_generator.sh script.

-

-    If you're running the 64-bit kernel, or the 32-bit single processor

-    kernel, this is the command to use:

-

-    /usr/share/mkinitrd/mkinitrd_command_generator.sh -k 4.4.14 | bash

+    First, be sure your initrd is up to date (if you use one). You can

+    build a new initrd automatically by running the geninitrd script:

 

-    If you're using the 32-bit SMP kernel, use this command:

-

-    /usr/share/mkinitrd/mkinitrd_command_generator.sh -k 4.4.14-smp | bash

+    # geninitrd

 

     If you use LILO, make sure the paths in /etc/lilo.conf point to a valid

-    kernel and then type 'lilo' to reinstall LILO.  If you use a USB memory

+    kernel and then type 'lilo' to reinstall LILO. If you use a USB memory

     stick to boot, copy the new kernel to it in place of the old one.

 

+    If you are using elilo on a machine with UEFI BIOS, run the eliloconfig

+    command to install the new kernel and initrd to the EFI System Partition.

+

 

-8.  Return to multi-user mode:

+7.  Return to multi-user mode:

     telinit 3

 

 

-9.  Reboot to start using the new kernel.

+8.  Reboot to start using the new kernel.

 

 

-At this point you should be running Slackware 14.2.  :-)

+At this point you should be running Slackware 15.0.  :-)

 

 I wish everyone good luck with this!

 

 ---

 Patrick Volkerding

 volkerdi@slackware.com

-