Merge #68: add CVE-2019-6486

NOKEYCHECK=True
PiperOrigin-RevId: 285855046
GitOrigin-RevId: 6c855f0510d4208fdaf2e0fd176d9fabc20a0b9c
This commit is contained in:
thaidn
2019-12-16 14:46:39 -08:00
committed by Tink Team
parent 12b6761676
commit 26eaf6f79c
+3 -2
View File
@@ -52,10 +52,11 @@ See [list of issues](issues.md) for details.
| Accepts embedded HMAC key | Quan Nguyen | N/A | | To be released |
## Package Go crypto
| Summary | Credits | CVE | Upstream Acknowledgement | Tests |
|:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------:
| GCM wrapped around counter | Quan Nguyen | N/A | goo.gl/OdhZcY |
| P-384 and P-521 ScalarMult DoS | Daniel Bleichenbacher | CVE-2019-6486 | [golang/go#29903](https://github.com/golang/go/issues/29903) | To be released
| P-384 and P-521 ScalarMult DoS | Harris Baskaran | CVE-2019-6486 | [golang/go#29903](https://github.com/golang/go/issues/29903) | ecdh_secp384r1_test.json, ecdh_secp521r1_test.json |
## Package Nimbus JOSE+JWT (https://connect2id.com/products/nimbus-jose-jwt)
| Summary | Credits | CVE | Upstream Acknowledgement | Tests |
@@ -72,4 +73,4 @@ See [list of issues](issues.md) for details.
## Package LibreSSL
| Summary | Credits | CVE | Upstream Acknowledgement | Tests |
|:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------:
| Overly lax RSA PKCS1v1.5 parsing | Alex Gaynor and Paul Kehrer | N/A | https://github.com/openbsd/src/commit/4698a0ba0d5547fce37134cb00f204c68f429885#diff-8c6377c3026df41da690063739326043 |
| Overly lax RSA PKCS1v1.5 parsing | Alex Gaynor and Paul Kehrer | N/A | [link](https://github.com/openbsd/src/commit/4698a0ba0d5547fce37134cb00f204c68f429885#diff-8c6377c3026df41da690063739326043) |