Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Mar 2003 12:27:08 +0200
From:      Peter Pentchev <roam@ringlet.net>
To:        Tim Baur <tbaur@panaso.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Patch for OpenSSL and freebsd 4.4
Message-ID:  <20030321102707.GG13251@straylight.oblivion.bg>
In-Reply-To: <0303210148040.31535@neobe.cnanfb.pbz>
References:  <3E7ADFAE.3000509@imc.nl> <0303210148040.31535@neobe.cnanfb.pbz>

next in thread | previous in thread | raw e-mail | index | archive | help

--XWOWbaMNXpFDWE00
Content-Type: text/plain; charset=windows-1251
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Mar 21, 2003 at 01:57:55AM -0800, Tim Baur wrote:
> On Fri, 21 Mar 2003, Roelf Schreurs wrote:
>=20
> > I was wondering if there will be a patch release for the 2 new OpenSSl
> > vulnerabilities found this week?
>=20
> RELENG_4_4 is no longer supported by the security officer. Please review:
>=20
> 	http://www.ca.freebsd.org/security/index.html#adv

jedgar@ committed fixes to a couple of files 13 hours ago, which
seem to address at least one of those vulnerabilities.  I believe
there are FreeBSD developers who are actively committed to keeping
the 4.4 security branch alive, so my advice would be to wait a bit
more, the fixes will probably be MFC'd there, too.

G'luck,
Peter

--=20
Peter Pentchev	roam@ringlet.net    roam@sbnd.net    roam@FreeBSD.org
PGP key:	http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint	FDBA FD79 C26F 3C51 C95E  DF9E ED18 B68D 1619 4553
If you think this sentence is confusing, then change one pig.

--XWOWbaMNXpFDWE00
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+euj77Ri2jRYZRVMRAkdZAJ9goXG4/A0D5IvsqbSMS1wd7vOoPgCfdC7c
ibSZY+qGWie+vu/Iuv07AaQ=
=HEoA
-----END PGP SIGNATURE-----

--XWOWbaMNXpFDWE00--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030321102707.GG13251>