[Secure-testing-commits] r22193 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Tue May 7 05:30:36 UTC 2013


Author: carnil
Date: 2013-05-07 05:30:36 +0000 (Tue, 07 May 2013)
New Revision: 22193

Modified:
   data/CVE/list
Log:
add a description and severity to low

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-05-07 05:28:34 UTC (rev 22192)
+++ data/CVE/list	2013-05-07 05:30:36 UTC (rev 22193)
@@ -2779,9 +2779,9 @@
 	RESERVED
 CVE-2013-2062
 	RESERVED
-CVE-2013-2061
+CVE-2013-2061 [use of non-constant-time memcmp in HMAC comparison in openvpn_decrypt]
 	RESERVED
-	- openvpn <unfixed>
+	- openvpn <unfixed> (low)
 	NOTE: https://community.openvpn.net/openvpn/wiki/SecurityAnnouncement-f375aa67cc
 CVE-2013-2060
 	RESERVED




More information about the Secure-testing-commits mailing list