Bug#720426: pu: package openssl/1.0.1e-2
On Mon, Sep 30, 2013 at 07:06:33PM +0200, Kurt Roeckx wrote:
> On Mon, Sep 30, 2013 at 01:46:41AM +0200, Cyril Brulebois wrote:
> > Control: tag -1 moreinfo
> >
> > Kurt Roeckx <kurt@roeckx.be> (2013-09-23):
> > > I actually consider the arm assembler and nistp curves to be
> > > important, even if the bugs might only be filed at severity
> > > level wishlist. The nistp curves are even security related
> > > since they are then implemented with constant time removing
> > > a side channel attack.
> >
> > Then the BTS should know, and/or you should have mentioned it in your
> > pu request.
>
> I wouldn't bother trying to get those to stable if I didn't think
> they were important.
So can someone please do something about this request?
Kurt
Reply to: