Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dafda15c by Salvatore Bonaccorso at 2018-08-22T06:20:26Z
Add CVE-2018-10844/gnutls
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -12182,8 +12182,12 @@ CVE-2018-10845 [HMAC-SHA-384 vulnerable to Lucky
thirteen attack due to use of w
- gnutls26 <removed>
NOTE: https://gitlab.com/gnutls/gnutls/merge_requests/657
NOTE: https://eprint.iacr.org/2018/747
-CVE-2018-10844
+CVE-2018-10844 [HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
enough dummy function calls]
RESERVED
+ - gnutls28 <unfixed>
+ - gnutls26 <removed>
+ NOTE: https://gitlab.com/gnutls/gnutls/merge_requests/657
+ NOTE: https://eprint.iacr.org/2018/747
CVE-2018-10843 (source-to-image component of Openshift Container Platform
before ...)
NOT-FOR-US: source-to-image in OpenShift
CVE-2018-10842 (It was found that an authenticated user could manipulate user
session ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/dafda15ced3995aa0928b5964f3fcf07e956bd5b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/dafda15ced3995aa0928b5964f3fcf07e956bd5b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
