From owner-freebsd-security Tue Jul 30 15:26:34 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E8F2937B400 for ; Tue, 30 Jul 2002 15:26:32 -0700 (PDT) Received: from mail.npubs.com (npubs.com [207.111.208.224]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9166443E31 for ; Tue, 30 Jul 2002 15:26:32 -0700 (PDT) (envelope-from nielsen@memberwebs.com) From: "Nielsen" To: "Michael Nottebrock" Cc: References: <121122473609.20020730210032@buz.ch> <3D46E7ED.1040006@gmx.net> Subject: Re: OpenSSH not using libssl? MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-Id: <20020730222715.80CCA43C361@mail.npubs.com> Date: Tue, 30 Jul 2002 22:27:15 +0000 (GMT) Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I think libcrypto has the ASN.1 bug. Nate ----- Original Message ----- > It uses libcrypto, but it shouldn't be vulnerable. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message