From owner-freebsd-security@FreeBSD.ORG Fri Jan 15 01:52:31 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 32226106566B for ; Fri, 15 Jan 2010 01:52:31 +0000 (UTC) (envelope-from kenyon@kenyonralph.com) Received: from cdptpa-omtalb.mail.rr.com (cdptpa-omtalb.mail.rr.com [75.180.132.120]) by mx1.freebsd.org (Postfix) with ESMTP id DABA78FC17 for ; Fri, 15 Jan 2010 01:52:30 +0000 (UTC) Received: from cdptpa-omtalb.mail.rr.com ([10.127.143.51]) by cdptpa-qmta01.mail.rr.com with ESMTP id <20100115003219128.WKRL16905@cdptpa-qmta01.mail.rr.com> for ; Fri, 15 Jan 2010 00:32:19 +0000 X-Authority-Analysis: v=1.0 c=0 wl=env:27 X-Cloudmark-Score: 0 X-Originating-IP: 76.176.200.148 Received: from [76.176.200.148] ([76.176.200.148:60043] helo=voodoo.kenyonralph.com) by cdptpa-oedge01.mail.rr.com (envelope-from ) (ecelerity 2.2.2.39 r()) with ESMTP id 08/1C-19578-457BF4B4; Fri, 15 Jan 2010 00:31:16 +0000 Received: from voodoo.kenyonralph.com (localhost [127.0.0.1]) by voodoo.kenyonralph.com (Postfix) with ESMTP id 66169181C18 for ; Thu, 14 Jan 2010 16:31:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=kenyonralph.com; h=date :from:to:subject:message-id:references:mime-version:content-type :in-reply-to; s=postfix; bh=HlkPzhWoL8Uv9tFGMPDzdCd7RkBZQFQ2gC2T bvjJhE8=; b=g2T9yaW06bSLu5e3dtRoARByD+wuxLa/DgWYWMiq+1cCMGygXLr3 fqM+vv1h6xujGX/0z+KnU6WTcIcy+RJvij1upLjyLTEUh6Zd3J9wmLZwDOku4syn YY2Oec67783WTjcTxthgckcLisdrIDIvr7vXR6lReUDy/sd50n5tPD8= Received: by voodoo.kenyonralph.com (Postfix, from userid 1000) id 32E72181C1C; Thu, 14 Jan 2010 16:31:15 -0800 (PST) Date: Thu, 14 Jan 2010 16:31:15 -0800 From: Kenyon Ralph To: freebsd-security@freebsd.org Message-ID: <20100115003115.GC32381@kenyonralph.com> Mail-Followup-To: freebsd-security@freebsd.org References: <4B4FA898.3090007@nlcc.us> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="9l24NVCWtSuIVIod" Content-Disposition: inline In-Reply-To: <4B4FA898.3090007@nlcc.us> X-Operating-System: Ubuntu 9.10 Linux 2.6.31-18-generic on i686 User-Agent: Mutt/1.5.20 (2009-06-14) Subject: Re: OpenSSL marked deprecated? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jan 2010 01:52:31 -0000 --9l24NVCWtSuIVIod Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2010-01-14T17:28:24-0600, Billy Newsom wrote: > Why is the OpenSSL port marked deprecated? No security issue, but > the port builds... no fallback to a safe alternative, no known fix? > Does the security team know? [...] > Where have there been coredumps? Says who? Where? Why? How? When? > Which version? Which OS? There is a thread about this on freebsd-ports, but I don't know if it answers all of your questions (yet): http://lists.freebsd.org/pipermail/freebsd-ports/2010-January/thread.html#5= 8899 --=20 Kenyon Ralph --9l24NVCWtSuIVIod Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iQIcBAEBCgAGBQJLT7dRAAoJEJj/PvnJuRLVjjEP/0ZWHRpLrhPzHvvwZ7ZhbXQh CYyirOtQPKm08FE4HVos3RggR5Q9PvesAIqk9EijnSgwxLUBLvfqtEWq02kBCxBg c+Z2Zar9v2F++UtuDHLPaZ/tC1gIio9FKOuhZWVTrzhLOVmZKsnVjXt2efH1KDq7 iQo5bjDdhRoS4oIV5SdQpuG2o9HGKE+K2xY/oF8PcQblxYiAe/sI/qyE5izAzyMN pU4wwHWVU0HJwgneuKntoq8BwvxFgK1OBhv04HKzGzQh2cfYPUafkt2p/xN4UZLC u5PKQMGrgF9mSi+2P+CLL3B1tBR//frpLGY9C3b5TvN0JOiwsvWTv1UKZsUxLBWz KdwGacsu3yacwqZUmwY9BrZ/ClraQyRmtcDAIAHRBOY0htQxJcav+2PNw7QI6snX T1n7Nn3c40A+JDc7F2uqS9k76bDuR6mA7voAkx/qgnytqq15CjugVErBbt72dB3P Xk01rFag2rPm3MEX5FBLwsuSEzRe+aRqx8BvgYRudSeExOPwe2SZ+9ob8F/EsN3U MtzyWDy3djt/vfkyUbNlPlTLm/U1b97WNnBIE7WlUzJyc00A13luIERR83SgqKTt qKaPn5mRiqEajY0IOj0CkXDx22wkD2FJgMV0klexq780klzEV7Nw9NbXKKHB7J5W CSzyd5GKfZcqV+wIqU6d =CM2i -----END PGP SIGNATURE----- --9l24NVCWtSuIVIod--