Status message

The page you requested does not exist. A search for debian openssl bug predictable random number generator resulted in this page.

Debian Openssl bug - predictable random number generator

Submitted by gionn on 21/05/2008 20:54

Category:

Tags:

Bug simpatici come questo non se ne vedono tanti.

Ai posteri lascio il changelog della patch incriminata, qualche vignetta satirica e la collezione completa delle chiavi generabili con il pacchetto buggato: 262144.

openssl (0.9.8b-1) unstable; urgency=low
...
* Don't add uninitialised data to the random number generator. This stop
valgrind from giving error messages in unrelated code.
(Closes: #363516)
...
-- Kurt Roeckx Thu, 4 May 2006 20:40:03 +0200

openssl (0.9.8c-1) unstable; urgency=low
...
* Move the modified rand/md_rand.c file to the right place,
really fixing #363516.
...
-- Kurt Roeckx Sun, 17 Sep 2006 14:47:59 +0000

openssl (0.9.8g-9) unstable; urgency=high
...
[ Kurt Roeckx ]
* ssleay_rand_add() really needs to call MD_Update() for buf.
-- Kurt Roeckx Wed, 07 May 2008 20:32:12 +0200

dilbert9

random4

xkcd_security_holes

E scusate il tempismo :D

Add new comment

Via Twitter

  • Fing - Network scanner for Android https://t.co/ukIdHHqK — 1 day 5 hours ago
  • @manuelmazzuola io stavo per provare redis, ma ho un sonno che schianto e vo a letto :P lunedì si prova — 1 day 21 hours ago
  • Symfony CMF as a CMS replacement for developers #phpday http://t.co/RsUTvcR3 — 2 days 3 hours ago
  • @rosamammoli tutti entusiasti, è un peccato fermarsi qui solo per oggi #phpday — 2 days 4 hours ago
  • The room is full on track 3 for continuous deployment security on http://t.co/MOAyi4U9 #phpday — 2 days 4 hours ago
more

Blog written by Giovanni Toraldo and licensed under CC-BY-SA

This blog is anonymously available via:
tor and tor2web.

Powered by Drupal
ipv6 test
WORLD IPV6 LAUNCH is 6 June 2012 – The Future is Forever