From d0a0cfe66456206476c01e7a7c24430a69a6649f Mon Sep 17 00:00:00 2001 From: Paul Kehrer Date: Sat, 14 Dec 2019 09:49:37 +0800 Subject: [PATCH] new bug found by wycheproof (#65) --- doc/bugs.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/doc/bugs.md b/doc/bugs.md index 6d9e2c8..b59677e 100644 --- a/doc/bugs.md +++ b/doc/bugs.md @@ -62,4 +62,8 @@ See [list of issues](issues.md) for details. | CBC-HMAC is vulnerable to padding oracle attack | Quan Nguyen | N/A | https://goo.gl/ACZQeI | To be released | CBC-HMAC integer overflow, HMAC bypass | Quan Nguyen | N/A | https://goo.gl/ACZQeI | To be released - +## Package OpenSSL +| Summary | Credits | CVE | Upstream Acknowledgement | Tests | +|:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------: +| X25519 incorrect carry handling | Alex Gaynor and Paul Kehrer | N/A | https://github.com/openssl/openssl/issues/6687 | +| Ed25519 malleable signatures | Paul Kehrer and Alex Gaynor | N/A | https://github.com/openssl/openssl/issues/7693 |