[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#720426: pu: package openssl/1.0.1e-2



Control: tag -1 moreinfo

Kurt Roeckx <kurt@roeckx.be> (2013-09-23):
> I actually consider the arm assembler and nistp curves to be
> important, even if the bugs might only be filed at severity
> level wishlist.  The nistp curves are even security related
> since they are then implemented with constant time removing
> a side channel attack.

Then the BTS should know, and/or you should have mentioned it in your
pu request. You also didn't attach the source debdiff we should be
considering, and a manual debdiff between -2 and -3 shows unrelated
things.

Mraw,
KiBi.

Attachment: signature.asc
Description: Digital signature


Reply to: