X-Git-Url: https://www.tinc-vpn.org/git/browse?a=blobdiff_plain;f=security.mdwn;h=7aae06aaf22651b1c61b49321847ae34a404e585;hb=4a8ff30c03c43d74b2870a9a4b8c832768f994e1;hp=04a940e12265b2ca0e7710bd8ce07dd250057a24;hpb=5edda89f2436166e66bc53d33e04b0c9aaa3b76b;p=wiki diff --git a/security.mdwn b/security.mdwn index 04a940e..7aae06a 100644 --- a/security.mdwn +++ b/security.mdwn @@ -3,8 +3,8 @@ The following list contains advisories for security issues in tinc in old versions: - [CVE-2013-1428](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1428), - [DSA-2663](http://www.debian.org/security/2013/dsa-2663), - [sitsec advisory](http://sitsec.net/blog/2013/04/22/stack-based-buffer-overflow-in-the-vpn-software-tinc-for-authenticated-peers): + [DSA-2663](https://www.debian.org/security/2013/dsa-2663), + [Sitsec advisory](http://sitsec.net/blog/2013/04/22/stack-based-buffer-overflow-in-the-vpn-software-tinc-for-authenticated-peers): stack based buffer overflow - [CVE-2002-1755](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1755): @@ -18,7 +18,7 @@ The following list contains advisories for security issues in tinc in old versio For those who run tinc on Debian or Debian-based distributions like Ubuntu and Knoppix, be advised that the following security issue affects tinc as well: -[http://www.debian.org/security/2008/dsa-1571](http://www.debian.org/security/2008/dsa-1571) +[https://www.debian.org/security/2008/dsa-1571](https://www.debian.org/security/2008/dsa-1571) In short, if you generated public/private keypairs for tinc between 2006 and May 7th, 2008 on a machine running Debian or a derivative, they may have been generated without a properly seeded random