Thanks Steve for your help. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Dr. Stephen Henson Sent: Friday, August 28, 2009 4:44 PM To: [email protected] Subject: Re: Regarding CVE-2009-0789
On Fri, Aug 28, 2009, Prathima Dandapani -X (pdandapa - HCL at Cisco) wrote: > Hello users, > > CVE-2009-0789 seems to be applicable to openssl 0.9.7l based on the > affected versions mentioned. We are using Apache 1.3.34 + openssl > 0.9.7l.The solution given is to upgrade to 0.9.8k,but Apache 1.3x with > openssl 0.9.8 is not working together. We thought of merging the code > changes done as part of this vulnerability to openssl 0.9.7l source > code, but not able to see code changes anywhere. > Any place where we can see the code changes for this vulnerability? > Please suggest. > You can check the dates and then analyse commits to CVS. In this case the change is: http://cvs.openssl.org/chngview?cn=17909 Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
