CVE-2016-0800 status for openssl 0.9.8o

To: "debian-devel@lists.debian.org" <debian-devel@lists.debian.org>
Subject: CVE-2016-0800 status for openssl 0.9.8o
From: Mike LI <mli321@yahoo.com>
Date: Wed, 23 Mar 2016 15:09:19 +0000 (UTC)
Message-id: <[🔎] 64040090.4071150.1458745759496.JavaMail.yahoo@mail.yahoo.com>
Reply-to: Mike LI <mli321@yahoo.com>
References: <64040090.4071150.1458745759496.JavaMail.yahoo.ref@mail.yahoo.com>

Dear Debian developers:

We still use 0.9.8 with Debian squeeze (lts) dist in production systems.

As shown below,

https://security-tracker.debian.org/tracker/CVE-2016-0800

openssl (PTS)squeeze, squeeze (security)0.9.8o-4squeeze14vulnerable

squeeze (lts)0.9.8o-4squeeze23 vulnerable

Do you have plan/schedule when it will be fixed?

Thanks a lot for your support!

-Mike

Reply to:

Follow-Ups:
- Re: CVE-2016-0800 status for openssl 0.9.8o
  - From: Julien Cristau <jcristau@debian.org>

Prev by Date: Re: a poll for Dgit workflows
Next by Date: Bug#819086: ITP: r-cran-httr -- GNU R tools for working with URLs and HTTP
Previous by thread: Bug#819070: ITP: r-cran-htmltools -- r-cran-htmltools
Next by thread: Re: CVE-2016-0800 status for openssl 0.9.8o
Index(es):
- Date
- Thread