diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2018-12-06 04:38:11 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2018-12-06 17:59:30 +0100 |
| commit | 37eaf40ce515cbb15e1b86fe5351a8e53efc0ede (patch) | |
| tree | 199d4b6d44ea50f05a7bddeff5d2789da22a185d /ChangeLog.rss | |
| parent | 03a61ce0245413a8759dd3391ca37dc25794f565 (diff) | |
| download | current-37eaf40ce515cbb15e1b86fe5351a8e53efc0ede.tar.gz current-37eaf40ce515cbb15e1b86fe5351a8e53efc0ede.tar.xz | |
Thu Dec 6 04:38:11 UTC 201820181206043811
a/kernel-generic-4.19.7-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.7-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.7-x86_64-1.txz: Upgraded.
d/kernel-headers-4.19.7-x86-1.txz: Upgraded.
k/kernel-source-4.19.7-noarch-1.txz: Upgraded.
n/gnutls-3.6.5-x86_64-1.txz: Upgraded.
This update fixes a security issue:
Bleichenbacher-like side channel leakage in PKCS#1 1.5 verification and
padding oracle verification.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16868
(* Security fix *)
n/nettle-3.4.1-x86_64-1.txz: Upgraded.
This update fixes a security issue:
A Bleichenbacher type side-channel based padding oracle attack was found
in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5
data. An attacker who is able to run a process on the same physical core
as the victim process, could use this flaw to extract plaintext or in some
cases downgrade any TLS connections to a vulnerable server.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16869
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
Diffstat (limited to 'ChangeLog.rss')
| -rw-r--r-- | ChangeLog.rss | 39 |
1 files changed, 37 insertions, 2 deletions
diff --git a/ChangeLog.rss b/ChangeLog.rss index 4ce51b1bc..66879090b 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,10 +11,45 @@ <description>Tracking Slackware development in git.</description> <language>en-us</language> <id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id> - <pubDate>Mon, 3 Dec 2018 20:59:30 GMT</pubDate> - <lastBuildDate>Tue, 4 Dec 2018 07:59:42 GMT</lastBuildDate> + <pubDate>Thu, 6 Dec 2018 04:38:11 GMT</pubDate> + <lastBuildDate>Thu, 6 Dec 2018 16:59:27 GMT</lastBuildDate> <generator>maintain_current_git.sh v 1.10</generator> <item> + <title>Thu, 6 Dec 2018 04:38:11 GMT</title> + <pubDate>Thu, 6 Dec 2018 04:38:11 GMT</pubDate> + <link>https://git.slackware.nl/current/tag/?h=20181206043811</link> + <guid isPermaLink="false">20181206043811</guid> + <description> + <![CDATA[<pre> +a/kernel-generic-4.19.7-x86_64-1.txz: Upgraded. +a/kernel-huge-4.19.7-x86_64-1.txz: Upgraded. +a/kernel-modules-4.19.7-x86_64-1.txz: Upgraded. +d/kernel-headers-4.19.7-x86-1.txz: Upgraded. +k/kernel-source-4.19.7-noarch-1.txz: Upgraded. +n/gnutls-3.6.5-x86_64-1.txz: Upgraded. + This update fixes a security issue: + Bleichenbacher-like side channel leakage in PKCS#1 1.5 verification and + padding oracle verification. + For more information, see: + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16868 + (* Security fix *) +n/nettle-3.4.1-x86_64-1.txz: Upgraded. + This update fixes a security issue: + A Bleichenbacher type side-channel based padding oracle attack was found + in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 + data. An attacker who is able to run a process on the same physical core + as the victim process, could use this flaw to extract plaintext or in some + cases downgrade any TLS connections to a vulnerable server. + For more information, see: + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16869 + (* Security fix *) +isolinux/initrd.img: Rebuilt. +kernels/*: Upgraded. +usb-and-pxe-installers/usbboot.img: Rebuilt. + </pre>]]> + </description> + </item> + <item> <title>Mon, 3 Dec 2018 20:59:30 GMT</title> <pubDate>Mon, 3 Dec 2018 20:59:30 GMT</pubDate> <link>https://git.slackware.nl/current/tag/?h=20181203205930</link> |