[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Opencryptoki fixes for CVE-2024-0914



Hi,

After a few hours I get the impression that fixing  CVE-2024-0914 even for bookworm will be extremly hard (lack of constant time operation, massive code change...)

I suppose the best way is to a full bakport of unstable way to buster and for ELTS to stretch/jessie

What it your point of view about this ?

Bastien

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: