kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Note that the fix for gnupg -- OpenPGP symmetric encryption

Browse source 
vulnerability in gnupg is not complete (see entry for details).

Discussed with:	nectar
Approved by:	portmgr (blanket, VuXML)
This commit is contained in:
Simon L. B. Nielsen 2005-08-03 16:54:47 +00:00
parent e9079de32f
commit fa7419cac1
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=140756
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
security/vuxml/vuln.xml
View file

@ -150,6 +150,15 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
response to the submitter, then this does not affect you
at all.</p>
</blockquote>
<p>Note that the <q>fix</q> in GnuPG does note completely
eliminate the potential problem:</p>
<blockquote cite="http://lists.gnupg.org/pipermail/gnupg-announce/2005q1/000191.html">
<p>These patches disable a portion of the OpenPGP protocol
that the attack is exploiting. This change should not be
user visible. With the patch in place, this attack will
not work using a public-key encrypted message. It will
still work using a passphrase-encrypted message.</p>
</blockquote>
</body>
</description>
<references>