oss-sec mailing list archives

Re: CVE-2018-12356 Breaking signature verification in pass (Simple Password Store)


From: Marcus Brinkmann <marcus.brinkmann () ruhr-uni-bochum de>
Date: Sat, 16 Jun 2018 12:42:37 +0200

Hi,

On 06/15/2018 07:28 PM, Jakub Wilk wrote:
Thanks for doing this. I didn't mean to imply that you were not diligent> enough.

I didn't take it that way!

You reporting these?

I was hoping somebody else would take care of this.

Hehe, everybody does. Luckily, we found some hackers in Mauritius taking
care of it!

First results:

bitcoin:
https://github.com/bitcoin/bitcoin/commit/9e2e5626dabb7208dafedcc9904940b666be1c3b

litecoin: https://github.com/litecoin-project/litecoin/pull/503

Thx,
Marcus


Current thread: