| Server IP : 82.208.35.60 / Your IP : 216.73.217.33 Web Server : Apache/2.4.55 (FreeBSD) OpenSSL/1.1.1q-freebsd PHP/7.3.31 System : FreeBSD server7.d2m.cz 12.4-RELEASE-p9 FreeBSD 12.4-RELEASE-p9 GENERIC amd64 User : studiokobylisy_cz ( 1008) PHP Version : 7.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /usr/ports/security/p5-Crypt-OpenPGP/files/ |
Upload File : |
Patch for CVE-2005-0366: plaintext recovery using checksum failure oracle.
https://nvd.nist.gov/vuln/detail/CVE-2005-0366
--- lib/Crypt/OpenPGP/Ciphertext.pm.orig 2009-12-11 00:05:35 UTC
+++ lib/Crypt/OpenPGP/Ciphertext.pm
@@ -85,8 +85,8 @@ sub decrypt {
my $padlen = $cipher->blocksize + 2;
my $pt = $enc->{prefix} =
$cipher->decrypt(substr $enc->{ciphertext}, 0, $padlen);
- return $enc->error("Bad checksum")
- unless substr($pt, -4, 2) eq substr($pt, -2, 2);
+ # return $enc->error("Bad checksum")
+ # unless substr($pt, -4, 2) eq substr($pt, -2, 2);
$cipher->sync unless $enc->{is_mdc};
$pt = $cipher->decrypt(substr $enc->{ciphertext}, $padlen);
if ($enc->{is_mdc}) {