Hello community,

here is the log from the commit of package patchinfo.3911 for 
openSUSE:13.1:Update checked in at 2015-07-20 18:02:07
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:13.1:Update/patchinfo.3911 (Old)
 and      /work/SRC/openSUSE:13.1:Update/.patchinfo.3911.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "patchinfo.3911"

Changes:
--------
New Changes file:

NO CHANGES FILE!!!

New:
----
  _patchinfo

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ _patchinfo ++++++
<patchinfo incident="3911">
  <issue id="936435" tracker="bnc">VUL-0: CVE-2015-2141: libcryptopp: 
libcrypto++ -- security update</issue>
  <issue id="CVE-2015-2141" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>bmwiedemann</packager>
  <description>libcryptopp was updated to fix one security issue.

This security issue was fixed:
- CVE-2015-2141: The InvertibleRWFunction::CalculateInverse function in rw.cpp 
in libcrypt++ 5.6.2 did not properly blind private key operations for the 
Rabin-Williams digital signature algorithm, which allowed remote attackers to 
obtain private keys via a timing attack (bsc#936435).
  </description>
  <summary>Security update for libcryptopp</summary>
</patchinfo>

Reply via email to