Re: [openssl-users] OpenSSL 1.0.2: CVE-2018-0735

2018-11-22 Thread Kurt Roeckx
On Tue, Nov 06, 2018 at 04:19:36PM -0600, Misaki Miyashita wrote: > Hi, > > According to the vulnerabilities website[1], OpenSSL 1.1.i and earlier and > 1.1.1 are affected by CVE-2018-0735. > Is it safe to assume that OpenSSL 1.0.2 is not affected by the CVE? My understanding is that the code was

[openssl-users] OpenSSL 1.0.2: CVE-2018-0735

2018-11-06 Thread Misaki Miyashita
Hi, According to the vulnerabilities website[1], OpenSSL 1.1.i and earlier and 1.1.1 are affected by CVE-2018-0735. Is it safe to assume that OpenSSL 1.0.2 is not affected by the CVE? Thank you, -- misaki [1] https://www.openssl.org/news/vulnerabilities.html CVE-2018-0735 (OpenSSL advisory)