Author: carnil
Date: 2016-01-06 15:56:06 +0000 (Wed, 06 Jan 2016)
New Revision: 38732
Modified:
data/CVE/list
Log:
Update comment for CVE-2016-1494/python-rsa
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-01-06 12:47:18 UTC (rev 38731)
+++ data/CVE/list 2016-01-06 15:56:06 UTC (rev 38732)
@@ -434,7 +434,8 @@
CVE-2016-1494 [signature forgery]
RESERVED
- python-rsa <unfixed>
- NOTE: Fix:
https://bitbucket.org/sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff
+ NOTE: proposed fix:
https://bitbucket.org/sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff
+ NOTE: proposed fix not yet merged
NOTE:
https://blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/
TODO: check
CVE-2015-8604 [SQL Injection in graphs_new.php]
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
