From owner-freebsd-questions@FreeBSD.ORG  Thu Oct  2 07:34:33 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E4F0A16A4B3
	for <questions@freebsd.org>; Thu,  2 Oct 2003 07:34:33 -0700 (PDT)
Received: from be-well.ilk.org (lowellg.ne.client2.attbi.com [66.30.200.37])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4C18943F3F
	for <questions@freebsd.org>; Thu,  2 Oct 2003 07:34:33 -0700 (PDT)
	(envelope-from freebsd-questions-local@be-well.ilk.org)
Received: by be-well.ilk.org (Postfix, from userid 1147)
	id D0CCD3AF4; Thu,  2 Oct 2003 10:34:32 -0400 (EDT)
Sender: lowell@be-well.ilk.org
To: Gabriel Ambuehl <gabriel_ambuehl@buz.ch>
References: <9272442000.20031002161755@buz.ch>
From: Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
In-Reply-To: <9272442000.20031002161755@buz.ch>
Message-ID: <44he2rso7b.fsf@be-well.ilk.org>
Lines: 10
User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: questions@freebsd.org
Subject: Re: openssl ASN bug?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: questions@freebsd.org
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
Date: Thu, 02 Oct 2003 14:34:34 -0000
X-Original-Date: 02 Oct 2003 10:34:32 -0400
X-List-Received-Date: Thu, 02 Oct 2003 14:34:34 -0000

Gabriel Ambuehl <gaml@buz.ch> writes:

> There was a security advisory about openssl <0.9.7b having a bug in
> the ASN encoding code on 30th Sept 03 and now I'm wondering what to do
> about it? Install the port? Wait some more and do another cvsup
> (currently, nothing shows up in UPDATING)?

The security officer announced (on the 30th) that he was going to
import 0.9.7c "over the next few days".  That's complete, but there
hasn't been an announcement or FreeBSD SA release.