Merge #68: add CVE-2019-6486
NOKEYCHECK=True PiperOrigin-RevId: 285855046 GitOrigin-RevId: 6c855f0510d4208fdaf2e0fd176d9fabc20a0b9c
This commit is contained in:
+3
-2
@@ -52,10 +52,11 @@ See [list of issues](issues.md) for details.
|
||||
| Accepts embedded HMAC key | Quan Nguyen | N/A | | To be released |
|
||||
|
||||
## Package Go crypto
|
||||
|
||||
| Summary | Credits | CVE | Upstream Acknowledgement | Tests |
|
||||
|:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------:
|
||||
| GCM wrapped around counter | Quan Nguyen | N/A | goo.gl/OdhZcY |
|
||||
| P-384 and P-521 ScalarMult DoS | Daniel Bleichenbacher | CVE-2019-6486 | [golang/go#29903](https://github.com/golang/go/issues/29903) | To be released
|
||||
| P-384 and P-521 ScalarMult DoS | Harris Baskaran | CVE-2019-6486 | [golang/go#29903](https://github.com/golang/go/issues/29903) | ecdh_secp384r1_test.json, ecdh_secp521r1_test.json |
|
||||
|
||||
## Package Nimbus JOSE+JWT (https://connect2id.com/products/nimbus-jose-jwt)
|
||||
| Summary | Credits | CVE | Upstream Acknowledgement | Tests |
|
||||
@@ -72,4 +73,4 @@ See [list of issues](issues.md) for details.
|
||||
## Package LibreSSL
|
||||
| Summary | Credits | CVE | Upstream Acknowledgement | Tests |
|
||||
|:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------:
|
||||
| Overly lax RSA PKCS1v1.5 parsing | Alex Gaynor and Paul Kehrer | N/A | https://github.com/openbsd/src/commit/4698a0ba0d5547fce37134cb00f204c68f429885#diff-8c6377c3026df41da690063739326043 |
|
||||
| Overly lax RSA PKCS1v1.5 parsing | Alex Gaynor and Paul Kehrer | N/A | [link](https://github.com/openbsd/src/commit/4698a0ba0d5547fce37134cb00f204c68f429885#diff-8c6377c3026df41da690063739326043) |
|
||||
|
||||
Reference in New Issue
Block a user