Re: OpenSSL and Potato a request for clarificiation

2002-09-16 Thread John Winters
Sorry - I think what I just wrote about updates was complete balls. John -- The Linux Emporium - the source for Linux CDs in the UK See http://www.linuxemporium.co.uk/ Evolution is now exciting.

Re: OpenSSL and Potato a request for clarificiation

2002-09-16 Thread Peter Cordes
On Mon, Sep 16, 2002 at 10:34:08AM +0100, John Winters wrote: Sorry - I think what I just wrote about updates was complete balls. Yup. security.d.o is outside the US, so it has the updates for non-US mixed in with everything else. Moreover, security.d.o _is_ non-us.d.o: llama]~$ host

OpenSSL and Potato a request for clarificiation

2002-09-15 Thread John Winters
In the light of the recent reports of an exploit in OpenSSL I've been reviewing my servers. Some of them are still running Potato and the status of the updates to Potato seem unclear. The announcement on Debian Security Announce dated 30th July says that no fix for Potato is available. The

Re: OpenSSL and Potato a request for clarificiation

2002-09-15 Thread Siggy Brentrup
On Sun, Sep 15, 2002 at 12:42:04PM +0100, John Winters wrote: [...] Can anyone clarify this please? Have the relevant fixes from openssl 0.9.6e been back-ported into openssl-0.9.6c-0.potato.2? Did you look into the doc/openssl/changelog(.Debian)?.gz? HTH Siggy

Re: OpenSSL and Potato a request for clarificiation

2002-09-15 Thread Noah L. Meyerhans
On Sun, Sep 15, 2002 at 12:42:04PM +0100, John Winters wrote: Can anyone clarify this please? Have the relevant fixes from openssl 0.9.6e been back-ported into openssl-0.9.6c-0.potato.2? The problem is that potato has more than one version of openssl. The security team had to package OpenSSL