summaryrefslogtreecommitdiffstats
path: root/ChangeLog.rss
diff options
context:
space:
mode:
author Patrick J Volkerding <volkerdi@slackware.com>2018-12-06 04:38:11 +0000
committer Eric Hameleers <alien@slackware.com>2018-12-06 17:59:30 +0100
commit37eaf40ce515cbb15e1b86fe5351a8e53efc0ede (patch)
tree199d4b6d44ea50f05a7bddeff5d2789da22a185d /ChangeLog.rss
parent03a61ce0245413a8759dd3391ca37dc25794f565 (diff)
downloadcurrent-37eaf40ce515cbb15e1b86fe5351a8e53efc0ede.tar.gz
current-37eaf40ce515cbb15e1b86fe5351a8e53efc0ede.tar.xz
Thu Dec 6 04:38:11 UTC 201820181206043811
a/kernel-generic-4.19.7-x86_64-1.txz: Upgraded. a/kernel-huge-4.19.7-x86_64-1.txz: Upgraded. a/kernel-modules-4.19.7-x86_64-1.txz: Upgraded. d/kernel-headers-4.19.7-x86-1.txz: Upgraded. k/kernel-source-4.19.7-noarch-1.txz: Upgraded. n/gnutls-3.6.5-x86_64-1.txz: Upgraded. This update fixes a security issue: Bleichenbacher-like side channel leakage in PKCS#1 1.5 verification and padding oracle verification. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16868 (* Security fix *) n/nettle-3.4.1-x86_64-1.txz: Upgraded. This update fixes a security issue: A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16869 (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.
Diffstat (limited to 'ChangeLog.rss')
-rw-r--r--ChangeLog.rss39
1 files changed, 37 insertions, 2 deletions
diff --git a/ChangeLog.rss b/ChangeLog.rss
index 4ce51b1bc..66879090b 100644
--- a/ChangeLog.rss
+++ b/ChangeLog.rss
@@ -11,10 +11,45 @@
<description>Tracking Slackware development in git.</description>
<language>en-us</language>
<id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
- <pubDate>Mon, 3 Dec 2018 20:59:30 GMT</pubDate>
- <lastBuildDate>Tue, 4 Dec 2018 07:59:42 GMT</lastBuildDate>
+ <pubDate>Thu, 6 Dec 2018 04:38:11 GMT</pubDate>
+ <lastBuildDate>Thu, 6 Dec 2018 16:59:27 GMT</lastBuildDate>
<generator>maintain_current_git.sh v 1.10</generator>
<item>
+ <title>Thu, 6 Dec 2018 04:38:11 GMT</title>
+ <pubDate>Thu, 6 Dec 2018 04:38:11 GMT</pubDate>
+ <link>https://git.slackware.nl/current/tag/?h=20181206043811</link>
+ <guid isPermaLink="false">20181206043811</guid>
+ <description>
+ <![CDATA[<pre>
+a/kernel-generic-4.19.7-x86_64-1.txz: Upgraded.
+a/kernel-huge-4.19.7-x86_64-1.txz: Upgraded.
+a/kernel-modules-4.19.7-x86_64-1.txz: Upgraded.
+d/kernel-headers-4.19.7-x86-1.txz: Upgraded.
+k/kernel-source-4.19.7-noarch-1.txz: Upgraded.
+n/gnutls-3.6.5-x86_64-1.txz: Upgraded.
+ This update fixes a security issue:
+ Bleichenbacher-like side channel leakage in PKCS#1 1.5 verification and
+ padding oracle verification.
+ For more information, see:
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16868
+ (* Security fix *)
+n/nettle-3.4.1-x86_64-1.txz: Upgraded.
+ This update fixes a security issue:
+ A Bleichenbacher type side-channel based padding oracle attack was found
+ in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5
+ data. An attacker who is able to run a process on the same physical core
+ as the victim process, could use this flaw to extract plaintext or in some
+ cases downgrade any TLS connections to a vulnerable server.
+ For more information, see:
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16869
+ (* Security fix *)
+isolinux/initrd.img: Rebuilt.
+kernels/*: Upgraded.
+usb-and-pxe-installers/usbboot.img: Rebuilt.
+ </pre>]]>
+ </description>
+ </item>
+ <item>
<title>Mon, 3 Dec 2018 20:59:30 GMT</title>
<pubDate>Mon, 3 Dec 2018 20:59:30 GMT</pubDate>
<link>https://git.slackware.nl/current/tag/?h=20181203205930</link>