Bug#720426: pu: package openssl/1.0.1e-2
On Thu, Nov 21, 2013 at 09:35:20PM +0100, Kurt Roeckx wrote:
> On Mon, Sep 30, 2013 at 07:06:33PM +0200, Kurt Roeckx wrote:
> > On Mon, Sep 30, 2013 at 01:46:41AM +0200, Cyril Brulebois wrote:
> > > Control: tag -1 moreinfo
> > >
> > > Kurt Roeckx <kurt@roeckx.be> (2013-09-23):
> > > > I actually consider the arm assembler and nistp curves to be
> > > > important, even if the bugs might only be filed at severity
> > > > level wishlist. The nistp curves are even security related
> > > > since they are then implemented with constant time removing
> > > > a side channel attack.
> > >
> > > Then the BTS should know, and/or you should have mentioned it in your
> > > pu request.
> >
> > I wouldn't bother trying to get those to stable if I didn't think
> > they were important.
>
> So can someone please do something about this request?
Ping?
Kurt
Reply to: