Re: openssl ASN bug?

2003-10-19 Thread Lowell Gilbert
Gabriel Ambuehl <[EMAIL PROTECTED]> writes: > There was a security advisory about openssl <0.9.7b having a bug in > the ASN encoding code on 30th Sept 03 and now I'm wondering what to do > about it? Install the port? Wait some more and do another cvsup > (currently, nothing shows up in UPDATING)?

Re[2]: openssl ASN bug?

2003-10-02 Thread Mike Tancsa
At 10:37 AM 02/10/2003, [EMAIL PROTECTED] wrote: > The security officer announced (on the 30th) that he was going to > import 0.9.7c "over the next few days". That's complete, but there > hasn't been an announcement or FreeBSD SA release. So I can cvsup as of today and be safe, right? No, not yet.

Re: Re[2]: openssl ASN bug?

2003-10-02 Thread Lowell Gilbert
[EMAIL PROTECTED] writes: > Hello Lowell, > > Thursday, October 2, 2003, 4:34:32 PM, you wrote: > > > Gabriel Ambuehl <[EMAIL PROTECTED]> writes: > > >> There was a security advisory about openssl <0.9.7b having a bug in > >> the ASN encoding code on 30th Sept 03 and now I'm wondering what to d

Re[2]: openssl ASN bug?

2003-10-02 Thread gaml
Hello Lowell, Thursday, October 2, 2003, 4:34:32 PM, you wrote: > Gabriel Ambuehl <[EMAIL PROTECTED]> writes: >> There was a security advisory about openssl <0.9.7b having a bug in >> the ASN encoding code on 30th Sept 03 and now I'm wondering what to do >> about it? Install the port? Wait some

openssl ASN bug?

2003-10-02 Thread Gabriel Ambuehl
There was a security advisory about openssl <0.9.7b having a bug in the ASN encoding code on 30th Sept 03 and now I'm wondering what to do about it? Install the port? Wait some more and do another cvsup (currently, nothing shows up in UPDATING)? ___ [EMA