From 37eaf40ce515cbb15e1b86fe5351a8e53efc0ede Mon Sep 17 00:00:00 2001
From: Patrick J Volkerding <volkerdi@slackware.com>
Date: Thu, 6 Dec 2018 04:38:11 +0000
Subject: Thu Dec  6 04:38:11 UTC 2018

a/kernel-generic-4.19.7-x86_64-1.txz:  Upgraded.
a/kernel-huge-4.19.7-x86_64-1.txz:  Upgraded.
a/kernel-modules-4.19.7-x86_64-1.txz:  Upgraded.
d/kernel-headers-4.19.7-x86-1.txz:  Upgraded.
k/kernel-source-4.19.7-noarch-1.txz:  Upgraded.
n/gnutls-3.6.5-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  Bleichenbacher-like side channel leakage in PKCS#1 1.5 verification and
  padding oracle verification.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16868
  (* Security fix *)
n/nettle-3.4.1-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  A Bleichenbacher type side-channel based padding oracle attack was found
  in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5
  data. An attacker who is able to run a process on the same physical core
  as the victim process, could use this flaw to extract plaintext or in some
  cases downgrade any TLS connections to a vulnerable server.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16869
  (* Security fix *)
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.
---
 ChangeLog.rss | 39 +++++++++++++++++++++++++++++++++++++--
 1 file changed, 37 insertions(+), 2 deletions(-)

(limited to 'ChangeLog.rss')

diff --git a/ChangeLog.rss b/ChangeLog.rss
index 4ce51b1bc..66879090b 100644
--- a/ChangeLog.rss
+++ b/ChangeLog.rss
@@ -11,9 +11,44 @@
       <description>Tracking Slackware development in git.</description>
       <language>en-us</language>
       <id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
-      <pubDate>Mon,  3 Dec 2018 20:59:30 GMT</pubDate>
-      <lastBuildDate>Tue,  4 Dec 2018 07:59:42 GMT</lastBuildDate>
+      <pubDate>Thu,  6 Dec 2018 04:38:11 GMT</pubDate>
+      <lastBuildDate>Thu,  6 Dec 2018 16:59:27 GMT</lastBuildDate>
       <generator>maintain_current_git.sh v 1.10</generator>
+      <item>
+         <title>Thu,  6 Dec 2018 04:38:11 GMT</title>
+         <pubDate>Thu,  6 Dec 2018 04:38:11 GMT</pubDate>
+         <link>https://git.slackware.nl/current/tag/?h=20181206043811</link>
+         <guid isPermaLink="false">20181206043811</guid>
+         <description>
+           <![CDATA[<pre>
+a/kernel-generic-4.19.7-x86_64-1.txz:  Upgraded.
+a/kernel-huge-4.19.7-x86_64-1.txz:  Upgraded.
+a/kernel-modules-4.19.7-x86_64-1.txz:  Upgraded.
+d/kernel-headers-4.19.7-x86-1.txz:  Upgraded.
+k/kernel-source-4.19.7-noarch-1.txz:  Upgraded.
+n/gnutls-3.6.5-x86_64-1.txz:  Upgraded.
+  This update fixes a security issue:
+  Bleichenbacher-like side channel leakage in PKCS#1 1.5 verification and
+  padding oracle verification.
+  For more information, see:
+    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16868
+  (* Security fix *)
+n/nettle-3.4.1-x86_64-1.txz:  Upgraded.
+  This update fixes a security issue:
+  A Bleichenbacher type side-channel based padding oracle attack was found
+  in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5
+  data. An attacker who is able to run a process on the same physical core
+  as the victim process, could use this flaw to extract plaintext or in some
+  cases downgrade any TLS connections to a vulnerable server.
+  For more information, see:
+    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16869
+  (* Security fix *)
+isolinux/initrd.img:  Rebuilt.
+kernels/*:  Upgraded.
+usb-and-pxe-installers/usbboot.img:  Rebuilt.
+           </pre>]]>
+         </description>
+      </item>
       <item>
          <title>Mon,  3 Dec 2018 20:59:30 GMT</title>
          <pubDate>Mon,  3 Dec 2018 20:59:30 GMT</pubDate>
-- 
cgit v1.2.3