From owner-freebsd-questions@FreeBSD.ORG  Thu Oct  2 07:16:45 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5355616A4B3
	for <questions@freebsd.org>; Thu,  2 Oct 2003 07:16:45 -0700 (PDT)
Received: from iota.root-servers.ch (iota.root-servers.ch [193.41.193.195])
	by mx1.FreeBSD.org (Postfix) with SMTP id 1ADD743FD7
	for <questions@freebsd.org>; Thu,  2 Oct 2003 07:16:40 -0700 (PDT)
	(envelope-from gaml@buz.ch)
Received: (qmail 98966 invoked from network); 2 Oct 2003 14:16:36 -0000
Received: from dclient217-162-130-157.hispeed.ch (HELO ga) (217.162.130.157)
  by 0 with SMTP; 2 Oct 2003 14:16:36 -0000
Date: Thu, 2 Oct 2003 16:17:55 +0200
From: Gabriel Ambuehl <gaml@buz.ch>
X-Mailer: The Bat! (v2.00.6) UNREG / CD5BF9353B3B7091
X-Priority: 3 (Normal)
Message-ID: <9272442000.20031002161755@buz.ch>
To: questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: openssl ASN bug?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Gabriel Ambuehl <gabriel_ambuehl@buz.ch>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Oct 2003 14:16:45 -0000
X-List-Received-Date: Thu, 02 Oct 2003 14:16:45 -0000

There was a security advisory about openssl <0.9.7b having a bug in
the ASN encoding code on 30th Sept 03 and now I'm wondering what to do
about it? Install the port? Wait some more and do another cvsup
(currently, nothing shows up in UPDATING)?