From owner-freebsd-security@FreeBSD.ORG  Thu Mar 19 22:19:52 2015
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id E407DF11
 for <freebsd-security@freebsd.org>; Thu, 19 Mar 2015 22:19:52 +0000 (UTC)
Received: from anubis.delphij.net (anubis.delphij.net
 [IPv6:2001:470:1:117::25])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "anubis.delphij.net",
 Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified))
 by mx1.freebsd.org (Postfix) with ESMTPS id C9B6ACE
 for <freebsd-security@freebsd.org>; Thu, 19 Mar 2015 22:19:52 +0000 (UTC)
Received: from zeta.ixsystems.com (unknown [12.229.62.2])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by anubis.delphij.net (Postfix) with ESMTPSA id 41D7A11F55;
 Thu, 19 Mar 2015 15:19:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delphij.net;
 s=anubis; t=1426803592; x=1426817992;
 bh=VLEAxS98ch+vhRFA2CtRYyF9o+j+rHDp10i4Wv46XLk=;
 h=Date:From:Reply-To:To:Subject:References:In-Reply-To;
 b=PAJnEtLLbI01kW6m5hFWmhfidNllBElK+2NxdUaAKiAcn03l3VlmlabOwMnA5hKMx
 8hoF0ogcsUNX3aaj/bR0KOj8vBVn4sqhbcXCh4U3n2YF8HjwVpFQIPFpDHnOvN/WIC
 iWGqU8zjuGur9AoBl55OztFwh64yrEMNHBhH0CgI=
Message-ID: <550B4B87.1010402@delphij.net>
Date: Thu, 19 Mar 2015 15:19:51 -0700
From: Xin Li <delphij@delphij.net>
Reply-To: d@delphij.net
Organization: The FreeBSD Project
MIME-Version: 1.0
To: freebsd-security@freebsd.org
Subject: Re: Security Advisory FreeBSD-SA-15:06.openssl
References: <201503191755.t2JHtdfl042593@freefall.freebsd.org>
 <20150319221817.GB807@lena.kiev>
In-Reply-To: <20150319221817.GB807@lena.kiev>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Mar 2015 22:19:53 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 03/19/15 15:18, Lena@lena.kiev.ua wrote:
>> No workaround is available.
> 
> Isn't using OpenSSL from ports a workaround?

Not really as that does not solve problem for applications shipped
with base system.

Cheers,
- -- 
Xin LI <delphij@delphij.net>    https://www.delphij.net/
FreeBSD - The Power to Serve!           Live free or die
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.1.2 (FreeBSD)
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=aqdY
-----END PGP SIGNATURE-----