[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <201308070012.r770BrJ0014578@linus.mitre.org>
Date: Tue, 6 Aug 2013 20:11:53 -0400 (EDT)
From: cve-assign@...re.org
To: kseifried@...hat.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: SSL BREACH
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
>I assume this will get handled like CVE-2009-3555?
>
>http://threatpost.com/breach-compression-attack-steals-https-secrets-in-under-30-seconds/101579
>
>http://it.slashdot.org/story/13/08/05/233216
>
>https://www.djangoproject.com/weblog/2013/aug/06/breach-and-django/
MITRE has looked at this in some depth but has not yet decided whether
this can be treated as a vulnerability in a protocol, with one CVE
shared across every product. We do realize that
http://www.kb.cert.org/vuls/id/987798 currently contains one CVE ID.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (SunOS)
iQEcBAEBAgAGBQJSAY/9AAoJEGvefgSNfHMd2k0IAKtQ4ZLWL5JfnOF0VW3qJroT
kzQjFCI+MNWkw6TcyXpyq36ZKJSZ9C1ANudGPPnaPT2XbMRgd4T5yQUKextCYf01
getOOJZkY1vp5A52ujG7pcYNB2a+DP1O/LinPQvdp3TGrbWdOuRixzQ/AMKcbKrp
AXTajRsLJmMbtjJ95n9XF3ie+fT1QdW02YyzDMmT5UiRJtDJQV9RbFAW+9J+iuw9
OP43uxwXtf50zFsU6OffNSlQNHoGQqD9NB17YFxjZvL4swg1P1YyQn6IIsOXzze3
gPNmL/PT27x4d/zr001idedzZtAsfpN60WudPZggQRvmzZyTC2E2Nct5Fy4P6Xg=
=yr5Z
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
