From 4e955dc4b6fff43956d47c0286bb698e03f14b11 Mon Sep 17 00:00:00 2001
From: Patrick J Volkerding <volkerdi@slackware.com>
Date: Fri, 31 Jan 2020 20:46:25 +0000
Subject: Fri Jan 31 20:46:25 UTC 2020

a/util-linux-2.35.1-x86_64-1.txz:  Upgraded.
a/zerofree-1.1.1-x86_64-1.txz:  Added.
  Also queued up for the next installer build. Thanks to bifferos.
ap/sudo-1.8.31-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  In Sudo before 1.8.31, if pwfeedback is enabled in /etc/sudoers, users can
  trigger a stack-based buffer overflow in the privileged sudo process.
  (pwfeedback is a default setting in some Linux distributions; however, it
  is not the default for upstream or in Slackware, and would exist only if
  enabled by an administrator.) The attacker needs to deliver a long string
  to the stdin of getln() in tgetpass.c.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18634
  (* Security fix *)
n/NetworkManager-1.22.6-x86_64-1.txz:  Upgraded.
n/openldap-client-2.4.49-x86_64-1.txz:  Upgraded.
xfce/Thunar-1.8.11-x86_64-1.txz:  Removed.
xfce/thunar-1.8.12-x86_64-1.txz:  Added.
  Changed package name from "Thunar" to "thunar" to follow upstream's naming.
---
 ChangeLog.rss | 33 +++++++++++++++++++++++++++++++--
 1 file changed, 31 insertions(+), 2 deletions(-)

(limited to 'ChangeLog.rss')

diff --git a/ChangeLog.rss b/ChangeLog.rss
index 969840e48..06e570489 100644
--- a/ChangeLog.rss
+++ b/ChangeLog.rss
@@ -11,9 +11,38 @@
       <description>Tracking Slackware development in git.</description>
       <language>en-us</language>
       <id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
-      <pubDate>Fri, 31 Jan 2020 03:36:03 GMT</pubDate>
-      <lastBuildDate>Fri, 31 Jan 2020 07:59:41 GMT</lastBuildDate>
+      <pubDate>Fri, 31 Jan 2020 20:46:25 GMT</pubDate>
+      <lastBuildDate>Sat,  1 Feb 2020 07:59:45 GMT</lastBuildDate>
       <generator>maintain_current_git.sh v 1.11</generator>
+      <item>
+         <title>Fri, 31 Jan 2020 20:46:25 GMT</title>
+         <pubDate>Fri, 31 Jan 2020 20:46:25 GMT</pubDate>
+         <link>https://git.slackware.nl/current/tag/?h=20200131204625</link>
+         <guid isPermaLink="false">20200131204625</guid>
+         <description>
+           <![CDATA[<pre>
+a/util-linux-2.35.1-x86_64-1.txz:  Upgraded.
+a/zerofree-1.1.1-x86_64-1.txz:  Added.
+  Also queued up for the next installer build. Thanks to bifferos.
+ap/sudo-1.8.31-x86_64-1.txz:  Upgraded.
+  This update fixes a security issue:
+  In Sudo before 1.8.31, if pwfeedback is enabled in /etc/sudoers, users can
+  trigger a stack-based buffer overflow in the privileged sudo process.
+  (pwfeedback is a default setting in some Linux distributions; however, it
+  is not the default for upstream or in Slackware, and would exist only if
+  enabled by an administrator.) The attacker needs to deliver a long string
+  to the stdin of getln() in tgetpass.c.
+  For more information, see:
+    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18634
+  (* Security fix *)
+n/NetworkManager-1.22.6-x86_64-1.txz:  Upgraded.
+n/openldap-client-2.4.49-x86_64-1.txz:  Upgraded.
+xfce/Thunar-1.8.11-x86_64-1.txz:  Removed.
+xfce/thunar-1.8.12-x86_64-1.txz:  Added.
+  Changed package name from "Thunar" to "thunar" to follow upstream's naming.
+           </pre>]]>
+         </description>
+      </item>
       <item>
          <title>Fri, 31 Jan 2020 03:36:03 GMT</title>
          <pubDate>Fri, 31 Jan 2020 03:36:03 GMT</pubDate>
-- 
cgit v1.2.3-65-gdbad