[Secure-testing-commits] r22208 - data/CVE
Salvatore Bonaccorso
carnil at alioth.debian.org
Thu May 9 06:02:19 UTC 2013
Author: carnil
Date: 2013-05-09 06:02:19 +0000 (Thu, 09 May 2013)
New Revision: 22208
Modified:
data/CVE/list
Log:
bug filled for openvpn
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2013-05-09 05:44:43 UTC (rev 22207)
+++ data/CVE/list 2013-05-09 06:02:19 UTC (rev 22208)
@@ -3169,8 +3169,7 @@
RESERVED
CVE-2013-2061 [use of non-constant-time memcmp in HMAC comparison in openvpn_decrypt]
RESERVED
- TODO: File bug
- - openvpn <unfixed> (low)
+ - openvpn <unfixed> (low; bug #707329)
[squeeze] - openvpn <no-dsa> (Minor issue)
[wheezy] - openvpn <no-dsa> (Minor issue)
NOTE: https://community.openvpn.net/openvpn/wiki/SecurityAnnouncement-f375aa67cc
More information about the Secure-testing-commits
mailing list