From owner-freebsd-security Tue Jul 30 16:10:16 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E6CA937B400 for ; Tue, 30 Jul 2002 16:10:12 -0700 (PDT) Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by mx1.FreeBSD.org (Postfix) with SMTP id C65E443E5E for ; Tue, 30 Jul 2002 16:10:11 -0700 (PDT) (envelope-from michaelnottebrock@gmx.net) Received: (qmail 8290 invoked by uid 0); 30 Jul 2002 23:10:10 -0000 Received: from pd9003286.dip.t-dialin.net (HELO gmx.net) (217.0.50.134) by mail.gmx.net (mp006-rz3) with SMTP; 30 Jul 2002 23:10:10 -0000 Message-ID: <3D471CD4.2010607@gmx.net> Date: Wed, 31 Jul 2002 01:10:12 +0200 From: Michael Nottebrock User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US; rv:1.0rc2) Gecko/20020513 Netscape/7.0b1 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Nielsen Cc: freebsd-security@FreeBSD.ORG Subject: Re: OpenSSH not using libssl? References: <121122473609.20020730210032@buz.ch> <3D46E7ED.1040006@gmx.net> <20020730222715.80CCA43C361@mail.npubs.com> X-Enigmail-Version: 0.61.1.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig94B1047890529B542E71C0E8" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org The following is an OpenPGP/MIME signed message created by Enigmail/Mozilla, following RFC 2440 and RFC 2015 --------------enig94B1047890529B542E71C0E8 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Nielsen wrote: > I think libcrypto has the ASN.1 bug. > > Nate > > ----- Original Message ----- > >>It uses libcrypto, but it shouldn't be vulnerable. I meant that openssh isn't vulnerable (since, afair, it doesn't use the ASN.1 parser). Regards, -- Michael Nottebrock "The circumstance ends uglily in the cruel result." - Babelfish --------------enig94B1047890529B542E71C0E8 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD4DBQE9RxzUXhc68WspdLARAuO4AJjGUIGKZWeMkuTX9Lg9cMeQbC3oAJ0dVlN3 QKPwTBUbAqoOU71LY8NEVQ== =Am1T -----END PGP SIGNATURE----- --------------enig94B1047890529B542E71C0E8-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message