diff --git a/cure53-Security-Audit-2015.md b/cure53-Security-Audit-2015.md index 2227082..93718d1 100644 --- a/cure53-Security-Audit-2015.md +++ b/cure53-Security-Audit-2015.md @@ -1,6 +1,6 @@ The Security Audit can be downloaded at https://cure53.de/pentest-report_openkeychain.pdf -All identified vulnerabilities has been discussed with cure53 and fixed in OpenKeychain 3.6. Only OKC-01-006 has not been fixed because it is not in our threat model. We will work on two "Miscellaneous Issues" (not vulnerabilities) for a future version of OpenKeychain. +All identified vulnerabilities has been discussed with cure53 and fixed in OpenKeychain 3.6. OKC-01-006 has been fixed in 4.2. We will work on two "Miscellaneous Issues" (not vulnerabilities) for a future version of OpenKeychain. ## Identified Vulnerabilities ### OKC-01-001 Private Keys can be imported from Keyserver (Medium)