[Secure-testing-commits] r26462 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Tue Apr 8 04:50:33 UTC 2014


Author: jmm
Date: 2014-04-08 04:48:34 +0000 (Tue, 08 Apr 2014)
New Revision: 26462

Modified:
   data/CVE/list
Log:
openssl side channel issue fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-04-07 22:58:36 UTC (rev 26461)
+++ data/CVE/list	2014-04-08 04:48:34 UTC (rev 26462)
@@ -7076,7 +7076,7 @@
 	- linux <unfixed>
 	- linux-2.6 <not-affected> (Vulnerable code not present)
 CVE-2014-0076 (The Montgomery ladder implementation in OpenSSL through 1.0.0l does ...)
-	- openssl <unfixed> (low; bug #742923)
+	- openssl 1.0.1g-1 (low; bug #742923)
 	[wheezy] - openssl <no-dsa> (Minor issue, local attack)
 	NOTE: http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=f9b6c0ba4c02497782f801e3c45688f3efaac55c
 CVE-2014-0075




More information about the Secure-testing-commits mailing list