Re: CVE for Kali Linux

[Alexander Cherepanov <ch3root () openwall com>]

On 2015-03-23 13:38, Marcus Meissner wrote:
> > There are some attacks even if you verify signatures, e.g. serving
> > old, known-vulnerable versions. HTTPS can help here (until
> > signatures start to be widely accompanied by expiring timestamps or
> > something).
>
> SUSE has added an expiry tag in the YUM metadata for such cases.

It's nice to see progress in this area. Does SUSE guard against other 
attacks from [1] too?

[1] https://isis.poly.edu/~jcappos/papers/cappos_pmsec_tr08-02.pdf

--
Alexander Cherepanov