From c313761979d74b0417230eddd0f87d0cfab2b46b Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Thu, 20 Sep 2018 20:31:11 -0400 Subject: [PATCH] Added two additional findings (#63) --- doc/bugs.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/doc/bugs.md b/doc/bugs.md index 6d9e2c8..1416b6e 100644 --- a/doc/bugs.md +++ b/doc/bugs.md @@ -62,4 +62,12 @@ See [list of issues](issues.md) for details. | CBC-HMAC is vulnerable to padding oracle attack | Quan Nguyen | N/A | https://goo.gl/ACZQeI | To be released | CBC-HMAC integer overflow, HMAC bypass | Quan Nguyen | N/A | https://goo.gl/ACZQeI | To be released +## Package OpenSSL +| Summary | Credits | CVE | Upstream Acknowledgement | Tests | +|:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------: +| X25519 incorrect carry handling | Alex Gaynor and Paul Kehrer | N/A | https://github.com/openssl/openssl/issues/6687 | +## Package LibreSSL +| Summary | Credits | CVE | Upstream Acknowledgement | Tests | +|:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------: +| Overly lax RSA PKCS1v1.5 parsing | Alex Gaynor and Paul Kehrer | N/A | https://github.com/openbsd/src/commit/4698a0ba0d5547fce37134cb00f204c68f429885#diff-8c6377c3026df41da690063739326043 |