From owner-freebsd-questions@FreeBSD.ORG  Thu Oct  2 07:36:03 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C599416A4B3
	for <questions@freebsd.org>; Thu,  2 Oct 2003 07:36:03 -0700 (PDT)
Received: from iota.root-servers.ch (iota.root-servers.ch [193.41.193.195])
	by mx1.FreeBSD.org (Postfix) with SMTP id 4287B43FFB
	for <questions@freebsd.org>; Thu,  2 Oct 2003 07:36:02 -0700 (PDT)
	(envelope-from gaml@buz.ch)
Received: (qmail 469 invoked from network); 2 Oct 2003 14:35:56 -0000
Received: from dclient217-162-130-157.hispeed.ch (HELO ga) (217.162.130.157)
  by 0 with SMTP; 2 Oct 2003 14:35:56 -0000
Date: Thu, 2 Oct 2003 16:37:11 +0200
From: gaml@buz.ch
X-Mailer: The Bat! (v2.00.6) UNREG / CD5BF9353B3B7091
Organization: BUZ Internet Services
X-Priority: 3 (Normal)
Message-ID: <12973598421.20031002163711@buz.ch>
To: questions@freebsd.org
In-Reply-To: <44he2rso7b.fsf@be-well.ilk.org>
References: <9272442000.20031002161755@buz.ch>
	<44he2rso7b.fsf@be-well.ilk.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Re[2]: openssl ASN bug?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: gabriel_ambuehl@buz.ch
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Oct 2003 14:36:03 -0000

Hello Lowell,

Thursday, October 2, 2003, 4:34:32 PM, you wrote:

> Gabriel Ambuehl <gaml@buz.ch> writes:

>> There was a security advisory about openssl <0.9.7b having a bug in
>> the ASN encoding code on 30th Sept 03 and now I'm wondering what to do
>> about it? Install the port? Wait some more and do another cvsup
>> (currently, nothing shows up in UPDATING)?

> The security officer announced (on the 30th) that he was going to
> import 0.9.7c "over the next few days".  That's complete, but there
> hasn't been an announcement or FreeBSD SA release.

So I can cvsup as of today and be safe, right?


Best regards,
 Gabriel