-
Committer:
Bazaar Package Importer
-
Author(s):
Jamie Strandboge
-
Date:
2009-12-07 14:15:58 UTC
-
mfrom:
(50.1.1 karmic-proposed)
-
Revision ID:
james.westby@ubuntu.com-20091207141558-o2ajsqnpcalrxl8r
Tags: 1.97~beta4-1ubuntu4.1
* SECURITY UPDATE: fix password validation when using password-based
authentication
- debian/patches/970_security_fix_password_validation.diff: update
grub_auth_strcmp() to use grub_strcmp() and add a small added delay.
Also update grub_auth_check_authentication() to add a delay if
authentication does not succeed.
- CVE-2009-4128