OpenSSL heads-up

From: Jacques A. Vidrine (nectar_at_FreeBSD.org)
Date: 09/30/03

  • Next message: Dragos Ruiu: "Re: OpenSSL heads-up"
    Date: Tue, 30 Sep 2003 15:31:50 -0500
    To: freebsd-security@FreeBSD.org
    
    

    Hello Everyone,

    You may have seen the recent announcement regarding new OpenSSL
    vulnerabilities. <URL: http://www.openssl.org/news/secadv_20030930.txt >

    Just thought I'd drop a line to head off the usual questions. :-)

      Don't panic. The vulnerability is denial-of-service.

      OpenSSL 0.9.7c will be imported into -CURRENT and -STABLE over the
      next couple of days, and included in 4.9-RELEASE.

      Fixes for the security branches will be backported and incorporated
      over the next week.

      Don't expect to see a security advisory until most or all of the
      commits have been made.

    Cheers,

    -- 
    Jacques Vidrine   . NTT/Verio SME      . FreeBSD UNIX       . Heimdal
    nectar@celabo.org . jvidrine@verio.net . nectar@freebsd.org . nectar@kth.se
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
    

  • Next message: Dragos Ruiu: "Re: OpenSSL heads-up"