Re: Wheezy update of polarssl?

[Ola Lundqvist <ola@inguza.com>]

Hi James

Thank you very much for this information.

Best regards

// Ola

On 22 March 2017 at 20:45, James Cowgill <jcowgill@debian.org> wrote:

Hi,

On 22/03/17 19:05, Ola Lundqvist wrote:
> Hello dear maintainer(s),
>
> the Debian LTS team would like to fix the security issues which are
> currently open in the Wheezy version of polarssl:
> https://security-tracker.debian.org/tracker/CVE-2017-2784

I don't think this bug affects wheezy because polarssl 1.2 does not have
any support for elliptic curve crypto. The bug does affect jessie however.

James

--

 --- Inguza Technology AB --- MSc in Information Technology ----

/  ola@inguza.com                    Folkebogatan 26            \

|  opal@debian.org                   654 68 KARLSTAD            |

|  http://inguza.com/                Mobile: +46 (0)70-332 1551 |

\  gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9  /

 ---------------------------------------------------------------