slackware-current/source/n/nettle
Patrick J Volkerding 37eaf40ce5 Thu Dec 6 04:38:11 UTC 2018
a/kernel-generic-4.19.7-x86_64-1.txz:  Upgraded.
a/kernel-huge-4.19.7-x86_64-1.txz:  Upgraded.
a/kernel-modules-4.19.7-x86_64-1.txz:  Upgraded.
d/kernel-headers-4.19.7-x86-1.txz:  Upgraded.
k/kernel-source-4.19.7-noarch-1.txz:  Upgraded.
n/gnutls-3.6.5-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  Bleichenbacher-like side channel leakage in PKCS#1 1.5 verification and
  padding oracle verification.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16868
  (* Security fix *)
n/nettle-3.4.1-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  A Bleichenbacher type side-channel based padding oracle attack was found
  in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5
  data. An attacker who is able to run a process on the same physical core
  as the victim process, could use this flaw to extract plaintext or in some
  cases downgrade any TLS connections to a vulnerable server.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16869
  (* Security fix *)
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.
2018-12-06 17:59:30 +01:00
..
nettle.SlackBuild Thu Dec 6 04:38:11 UTC 2018 2018-12-06 17:59:30 +01:00
slack-desc Fri Nov 30 04:21:06 UTC 2018 2018-11-30 08:59:44 +01:00