From owner-freebsd-security@FreeBSD.ORG  Wed Mar 17 10:02:22 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A459116A4CF
	for <freebsd-security@freebsd.org>;
	Wed, 17 Mar 2004 10:02:22 -0800 (PST)
Received: from probsd.org (rrcs-midsouth-24-199-182-230.biz.rr.com
	[24.199.182.230])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4E5B443D41
	for <freebsd-security@freebsd.org>;
	Wed, 17 Mar 2004 10:02:22 -0800 (PST)
	(envelope-from dana@coastal-law.org)
Received: from probsd.org (probsd.org [192.168.1.4])
	by probsd.org (Postfix) with SMTP id A4E8B4648B
	for <freebsd-security@freebsd.org>;
	Wed, 17 Mar 2004 13:02:49 -0500 (EST)
Received: from 192.168.1.1
        (SquirrelMail authenticated user dgolden)
        by probsd.org with HTTP;
        Wed, 17 Mar 2004 13:02:49 -0500 (EST)
Message-ID: <1700.192.168.1.1.1079546569.squirrel@probsd.org>
Date: Wed, 17 Mar 2004 13:02:49 -0500 (EST)
From: "D Golden" <dana@coastal-law.org>
To: freebsd-security@freebsd.org
User-Agent: SquirrelMail/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
Subject: FreeBSD Security Advisories  ( openssl )
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Mar 2004 18:02:22 -0000

Am I correct in assuming that if I do a:

make OPENSSL_OVERWRITE_BASE=yes install clean

in /usr/ports/security/openssl ( after updating my ports tree ) that the
port will overwrite the base openssl, thus not requiring the subsequent
patch and recompile of the OS to patch this Vulnerability?

Dana