oss-security - CVE request: polarssl

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 16 May 2011 15:59:00 -0600
From: Vincent Danen <vdanen@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE request: polarssl

Could a CVE be assigned to this issue?

http://polarssl.org/trac/wiki/SecurityAdvisory201101
https://bugzilla.redhat.com/show_bug.cgi?id=705187

Possible man-in-the-middle in Diffie Hellman key exchange, fixed in
0.14.2.

Thanks.

-- 
Vincent Danen / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.