[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20140620060232.GA19214@lorien.valinor.li>
Date: Fri, 20 Jun 2014 08:02:32 +0200
From: Salvatore Bonaccorso <carnil@...ian.org>
To: oss-security@...ts.openwall.com
Cc: 752092@...s.debian.org
Subject: Re: CVE request: softhsm, softhsm-keyconv tool
creates world-readable files
Hello Murray,
(keeping the Cc on the bureport to answer this also there):
On Fri, Jun 20, 2014 at 03:46:30PM +1000, Murray McAllister wrote:
[...]
> The Debian bug also notes a similar issue was fixed in ldns - I've
> asked for more details about that in the bug).
This should be CVE-2014-3209 (dns-keygen generates keys with world
readable permissions ).
Regards,
Salvatore
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
