Date: Wed, 3 Aug 2005 17:17:07 +0200 From: "Simon L. Nielsen" <simon@FreeBSD.org> To: Jacques Vidrine <nectar@FreeBSD.org> Cc: cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org, ports-committers@FreeBSD.org Subject: Re: cvs commit: ports/security/vuxml vuln.xml Message-ID: <20050803151706.GG851@zaphod.nitro.dk> In-Reply-To: <BAE20AF8-4824-441D-AA3F-EA7EC8F79563@FreeBSD.org> References: <200507311323.j6VDNoTB070910@repoman.freebsd.org> <0FD8500C-E0DE-4CB2-B7EF-DDCF5A7B754F@vidrine.us> <20050803115540.GF851@zaphod.nitro.dk> <BAE20AF8-4824-441D-AA3F-EA7EC8F79563@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--aM3YZ0Iwxop3KEKx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2005.08.03 07:07:05 -0500, Jacques Vidrine wrote: > On Aug 3, 2005, at 6:55 AM, Simon L. Nielsen wrote: > >On 2005.07.31 10:34:00 -0500, Jacques Vidrine wrote: > >>On Jul 31, 2005, at 8:23 AM, Simon L. Nielsen wrote: > >>> Document gnupg -- OpenPGP symmetric encryption vulnerability. > >>> [...] > >Doh, I had for some reason not thought of that. It seems like there > >is p5-Crypt-OpenPGP, security/pgpin, security/pgp, and security/pgp6 > >which are not just frontends. > > > >From a quick check of the pgp 2.6.3 docs it seems to also support CFB > >so I would think it is also vulnerable. >=20 > Hmm. The flaw is in the /OpenPGP variant/ of CFB. So I am uncertain =20 > whether PGP 2 is affected... I'm not sure at all either - the quick check was merly to see if it was likely it applied at all. I'm not really sure what to do here... on one hand I want acurate information for this entry, on the other hand I think it's a bit of a waste of time (which could be spent better...) to look to much into it... Google doesn't really turn anything up about it. --=20 Simon L. Nielsen --aM3YZ0Iwxop3KEKx Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (FreeBSD) iD8DBQFC8N/yh9pcDSc1mlERAhN7AJ4nFPdzylDLPpyjlBLitbbXijy/KQCfbWxn d2Wcrnaf5Wm5tykQkaCxbWM= =JPtE -----END PGP SIGNATURE----- --aM3YZ0Iwxop3KEKx--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050803151706.GG851>