Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

eID-belgium: improper certificate check

Package(s):

dhcp, ntp/xntp, squid, wireshark, libpng, pam_mount, enscript, eID-belgium, gstreamer-0_10-plugins-good

CVE #(s):

CVE-2009-0049

Created:

March 2, 2009

Updated:

December 7, 2009

Description:

From the SUSE advisory:

eID-belgium didn't properly check the return value of the openssl function EVP_VerifyFinal (CVE-2009-0049).

Alerts:

Debian	DSA-1946-1	2009-12-04
SuSE	SUSE-SR:2009:005	2009-03-02

(Log in to post comments)