From owner-freebsd-security@FreeBSD.ORG  Fri Jun 12 16:14:04 2015
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@hub.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id D43E282D
 for <freebsd-security@hub.freebsd.org>; Fri, 12 Jun 2015 16:14:04 +0000 (UTC)
 (envelope-from mike@sentex.net)
Received: from smarthost1.sentex.ca (smarthost1.sentex.ca
 [IPv6:2607:f3e0:0:1::12])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (Client CN "smarthost.sentex.ca", Issuer "smarthost.sentex.ca" (not verified))
 by mx1.freebsd.org (Postfix) with ESMTPS id 992EC948
 for <freebsd-security@freebsd.org>; Fri, 12 Jun 2015 16:14:04 +0000 (UTC)
 (envelope-from mike@sentex.net)
Received: from [IPv6:2607:f3e0:0:4:f025:8813:7603:7e4a] (saphire3.sentex.ca
 [IPv6:2607:f3e0:0:4:f025:8813:7603:7e4a])
 by smarthost1.sentex.ca (8.14.9/8.14.9) with ESMTP id t5CGDIqm085978;
 Fri, 12 Jun 2015 12:13:19 -0400 (EDT) (envelope-from mike@sentex.net)
Message-ID: <557B051F.5070806@sentex.net>
Date: Fri, 12 Jun 2015 12:13:19 -0400
From: Mike Tancsa <mike@sentex.net>
Organization: Sentex Communications
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:31.0) Gecko/20100101 Thunderbird/31.7.0
MIME-Version: 1.0
To: Dirk Meyer <dirk.meyer@dinoex.sub.org>, freebsd-security@freebsd.org
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-15:10.openssl
References: <201506120743.t5C7hUdu035884@freefall.freebsd.org>
 <p/D9xXLLph@dmeyer.dinoex.sub.org>
In-Reply-To: <p/D9xXLLph@dmeyer.dinoex.sub.org>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.75
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Jun 2015 16:14:04 -0000

On 6/12/2015 7:06 AM, Dirk Meyer wrote:
> FreeBSD Security Advisories schrieb:,
> 
>> Topic:          Multiple OpenSSL vulnerabilities
>> Module:         openssl
>> Announced:      2015-06-12
>> CVE Name:       CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791
>>                 CVE-2015-1792, CVE-2015-4000
> 
> I see a regression in the port for OpenSSL 1.0.2b:

There is also an ssh issue it seems ?

http://marc.info/?l=openssh-unix-dev&m=143412504002151&w=2


	---Mike





-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike@sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/