From 26eaf6f79c6db42ceb84871a3107ee4a3b1b90b3 Mon Sep 17 00:00:00 2001 From: thaidn Date: Mon, 16 Dec 2019 14:46:39 -0800 Subject: [PATCH] Merge #68: add CVE-2019-6486 NOKEYCHECK=True PiperOrigin-RevId: 285855046 GitOrigin-RevId: 6c855f0510d4208fdaf2e0fd176d9fabc20a0b9c --- doc/bugs.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/doc/bugs.md b/doc/bugs.md index 27d636d..a576e02 100644 --- a/doc/bugs.md +++ b/doc/bugs.md @@ -52,10 +52,11 @@ See [list of issues](issues.md) for details. | Accepts embedded HMAC key | Quan Nguyen | N/A | | To be released | ## Package Go crypto + | Summary | Credits | CVE | Upstream Acknowledgement | Tests | |:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------: | GCM wrapped around counter | Quan Nguyen | N/A | goo.gl/OdhZcY | -| P-384 and P-521 ScalarMult DoS | Daniel Bleichenbacher | CVE-2019-6486 | [golang/go#29903](https://github.com/golang/go/issues/29903) | To be released +| P-384 and P-521 ScalarMult DoS | Harris Baskaran | CVE-2019-6486 | [golang/go#29903](https://github.com/golang/go/issues/29903) | ecdh_secp384r1_test.json, ecdh_secp521r1_test.json | ## Package Nimbus JOSE+JWT (https://connect2id.com/products/nimbus-jose-jwt) | Summary | Credits | CVE | Upstream Acknowledgement | Tests | @@ -72,4 +73,4 @@ See [list of issues](issues.md) for details. ## Package LibreSSL | Summary | Credits | CVE | Upstream Acknowledgement | Tests | |:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------: -| Overly lax RSA PKCS1v1.5 parsing | Alex Gaynor and Paul Kehrer | N/A | https://github.com/openbsd/src/commit/4698a0ba0d5547fce37134cb00f204c68f429885#diff-8c6377c3026df41da690063739326043 | +| Overly lax RSA PKCS1v1.5 parsing | Alex Gaynor and Paul Kehrer | N/A | [link](https://github.com/openbsd/src/commit/4698a0ba0d5547fce37134cb00f204c68f429885#diff-8c6377c3026df41da690063739326043) |