https://bugzilla.redhat.com/show_bug.cgi?id=1025581



--- Comment #8 from Stewart Smith <[email protected]> ---
(In reply to Murray McAllister from comment #7)
> If you have not already seen, 2.1.6 was released
> (https://bugzilla.novell.com/show_bug.cgi?id=852224) and fixes a possible
> security issue:
> 
> ""
> A fixed initialization vector (constant string) was used while encrypting
> the data. This opened the encrypted stream/data to plaintext attacks among
> others. Bug fixed #1185343.
> ""

I'm aware, I'll update shortly.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/package-review

Reply via email to