Date: Thu, 2 Oct 2003 16:37:11 +0200 From: gaml@buz.ch To: questions@freebsd.org Subject: Re[2]: openssl ASN bug? Message-ID: <12973598421.20031002163711@buz.ch> In-Reply-To: <44he2rso7b.fsf@be-well.ilk.org> References: <9272442000.20031002161755@buz.ch> <44he2rso7b.fsf@be-well.ilk.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello Lowell, Thursday, October 2, 2003, 4:34:32 PM, you wrote: > Gabriel Ambuehl <gaml@buz.ch> writes: >> There was a security advisory about openssl <0.9.7b having a bug in >> the ASN encoding code on 30th Sept 03 and now I'm wondering what to do >> about it? Install the port? Wait some more and do another cvsup >> (currently, nothing shows up in UPDATING)? > The security officer announced (on the 30th) that he was going to > import 0.9.7c "over the next few days". That's complete, but there > hasn't been an announcement or FreeBSD SA release. So I can cvsup as of today and be safe, right? Best regards, Gabriel
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?12973598421.20031002163711>