From owner-freebsd-security@FreeBSD.ORG  Thu Mar 18 12:17:32 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9A86116A4CE
	for <freebsd-security@freebsd.org>;
	Thu, 18 Mar 2004 12:17:32 -0800 (PST)
Received: from mail.dgap.mipt.ru (dgap-gw.mipt.ru [194.85.81.130])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E054443D2D
	for <freebsd-security@freebsd.org>;
	Thu, 18 Mar 2004 12:17:31 -0800 (PST)
	(envelope-from andrew@nas.dgap.mipt.ru)
Received: (qmail 30555 invoked from network); 18 Mar 2004 20:17:27 -0000
Received: from unknown (HELO nas.dgap.mipt.ru) ([194.85.81.203])
          (envelope-sender <andrew@nas.dgap.mipt.ru>)
          by dgap-gw.mipt.ru (qmail-ldap-1.03) with AES256-SHA encrypted SMTP
          for <freebsd-security@freebsd.org>; 18 Mar 2004 20:17:27 -0000
Received: from nas.dgap.mipt.ru (localhost [127.0.0.1])
	by nas.dgap.mipt.ru (8.12.8p2/8.12.8) with ESMTP id i2IKHREf014861
	for <freebsd-security@freebsd.org>;
	Thu, 18 Mar 2004 23:17:27 +0300 (MSK)
	(envelope-from andrew@nas.dgap.mipt.ru)
Received: (from andrew@localhost)
	by nas.dgap.mipt.ru (8.12.8p2/8.12.8/Submit) id i2IKHRPW014860
	for freebsd-security@freebsd.org;
	Thu, 18 Mar 2004 23:17:27 +0300 (MSK)
Date: Thu, 18 Mar 2004 23:17:27 +0300
From: "Andrew L. Neporada" <andr@dgap.mipt.ru>
To: freebsd-security@freebsd.org
Message-ID: <20040318201727.GA14840@nas.dgap.mipt.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4i
Subject: latest openssl vulnerability
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Mar 2004 20:17:32 -0000

Is it true that (dynamic) binaries are vulnerable if and only if they are
linked with libssl.so.3, not with libcrypt or libcrypto?

Thanks for your help.

					Andrew.