Public bug reported:

Hello,

I'd like to point out that there are two fixes missing from the
upstream, is there any chance to get them incorporated?

https://github.com/openssl/openssl/pull/13888
https://github.com/openssl/openssl/pull/13889

There was no CVE assigned, it was fixed between 1.1.1i and 1.1.1j.

Best regards

** Affects: openssl (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1915906

Title:
  Ensure SRP BN_mod_exp follows the constant time path

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1915906/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to