From 11b00957be9f8661c4248d52bb20cdacdd442615 Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Wed, 13 Jun 2018 21:55:19 +0000 Subject: Wed Jun 13 21:55:19 UTC 2018 a/etc-15.0-x86_64-5.txz: Rebuilt. Don't hardcode passwd/shadow/group additions in doinst.sh - get them from the .new files. a/sysvinit-scripts-2.1-noarch-11.txz: Rebuilt. rc.S: don't start rc.haveged in this script - move it to rc.M. rc.M: start rc.haveged after seeding /dev/urandom in rc.S, and after starting syslogd, klogd, and udev in rc.M. rc.M: start rc.rndg (we don't ship it or rng-tools) after udev. H. Peter Anvin says that it's fine to run both haveged and rndg, and I trust his opinion on that. Thanks to GazL. ap/at-3.1.20-x86_64-4.txz: Rebuilt. Fixed wrong variable in rc.atd. Thanks to upnort. n/libgcrypt-1.8.3-x86_64-1.txz: Upgraded. Use blinding for ECDSA signing to mitigate a novel side-channel attack. For more information, see: https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0495 (* Security fix *) --- ChangeLog.rss | 33 +++++++++++++++++++++++++++++++-- 1 file changed, 31 insertions(+), 2 deletions(-) (limited to 'ChangeLog.rss') diff --git a/ChangeLog.rss b/ChangeLog.rss index 21718c50b..be08b5e24 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,9 +11,38 @@ Tracking Slackware development in git. en-us urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f - Wed, 13 Jun 2018 05:43:00 GMT - Wed, 13 Jun 2018 07:44:16 GMT + Wed, 13 Jun 2018 21:55:19 GMT + Thu, 14 Jun 2018 06:58:05 GMT maintain_current_git.sh v 1.8 + + Wed, 13 Jun 2018 21:55:19 GMT + Wed, 13 Jun 2018 21:55:19 GMT + https://git.slackware.nl/current/tag/?h=20180613215519 + 20180613215519 + + +a/etc-15.0-x86_64-5.txz: Rebuilt. + Don't hardcode passwd/shadow/group additions in doinst.sh - get them from + the .new files. +a/sysvinit-scripts-2.1-noarch-11.txz: Rebuilt. + rc.S: don't start rc.haveged in this script - move it to rc.M. + rc.M: start rc.haveged after seeding /dev/urandom in rc.S, and after + starting syslogd, klogd, and udev in rc.M. + rc.M: start rc.rndg (we don't ship it or rng-tools) after udev. + H. Peter Anvin says that it's fine to run both haveged and rndg, + and I trust his opinion on that. + Thanks to GazL. +ap/at-3.1.20-x86_64-4.txz: Rebuilt. + Fixed wrong variable in rc.atd. Thanks to upnort. +n/libgcrypt-1.8.3-x86_64-1.txz: Upgraded. + Use blinding for ECDSA signing to mitigate a novel side-channel attack. + For more information, see: + https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/ + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0495 + (* Security fix *) + ]]> + + Wed, 13 Jun 2018 05:43:00 GMT Wed, 13 Jun 2018 05:43:00 GMT -- cgit v1.2.3-79-gdb01