Date: Wed, 25 Mar 2015 13:13:58 +0000 (UTC) From: Dan Langille <dvl@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r382214 - head/security/vuxml Message-ID: <201503251313.t2PDDw5j069773@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: dvl Date: Wed Mar 25 13:13:57 2015 New Revision: 382214 URL: https://svnweb.freebsd.org/changeset/ports/382214 QAT: https://qat.redports.org/buildarchive/r382214/ Log: Revert my previous commit. Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Wed Mar 25 13:11:42 2015 (r382213) +++ head/security/vuxml/vuln.xml Wed Mar 25 13:13:57 2015 (r382214) @@ -504,8 +504,8 @@ Notes: <body xmlns="http://www.w3.org/1999/xhtml">; <p>The Mono project reports:</p> <blockquote cite="http://www.mono-project.com/docs/about-mono/vulnerabilities/#tls-bugs">; - <p>Mono's implementation of the SSL/TLS stack failed to check the order of the handshake messages. Which would allow various attacks on the protocol to succeed. Details of this vulnerability are discussed in <a href="https://www.smacktls.com/#skip">SKIP-TLS post</a>.</p> - <p>Mono's implementation of SSL/TLS also contained support for the weak EXPORT cyphers and was susceptible to the <a href="https://www.smacktls.com/#freak">FREAK</a>; attack.</p> + <p>Mono’s implementation of the SSL/TLS stack failed to check the order of the handshake messages. Which would allow various attacks on the protocol to succeed. Details of this vulnerability are discussed in <a href="https://www.smacktls.com/#skip">SKIP-TLS post</a>.</p> + <p>Mono’s implementation of SSL/TLS also contained support for the weak EXPORT cyphers and was susceptible to the <a href="https://www.smacktls.com/#freak">FREAK</a>; attack.</p> </blockquote> </body> </description>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201503251313.t2PDDw5j069773>