[Secure-testing-commits] r14192 - data/CVE

Michael Gilbert gilbert-guest at alioth.debian.org
Fri Mar 5 03:16:42 UTC 2010


Author: gilbert-guest
Date: 2010-03-05 03:16:42 +0000 (Fri, 05 Mar 2010)
New Revision: 14192

Modified:
   data/CVE/list
Log:
new openssl issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-03-05 02:52:03 UTC (rev 14191)
+++ data/CVE/list	2010-03-05 03:16:42 UTC (rev 14192)
@@ -1,3 +1,8 @@
+CVE-2010-XXXX [openssl power supply fluctuation fault-based key disclosure]
+	- openssl <unfixed> (low)
+	NOTE: http://www.eecs.umich.edu/~valeria/research/publications/DATE10RSA.pdf
+	NOTE: somewhat impractical right now, but the openssl developers are working
+	NOTE: on a fix just in case
 CVE-2010-0824
 	RESERVED
 CVE-2010-0823




More information about the Secure-testing-commits mailing list