Re: DSA-1571-1

[Roman Cheplyaka <roma@ro-che.info>]

* Stanislav Maslovski <stanislav.maslovski@gmail.com> [2008-05-13 22:07:05+0400]
> Вооот тебе бабушка...
> http://www.debian.org/security/2008/dsa-1571

Мне вот что интересно:

For the unstable distribution (sid) and the testing distribution
(lenny), these problems have been fixed in version 0.9.8g-9.

А в /usr/share/doc/openssl/changelog.Debian.gz об уязвимости ни слова:

openssl (0.9.8g-10) unstable; urgency=low

  * undefine HZ so that the code falls back to sysconf(_SC_CLK_TCK)
    to fix a build failure on alpha.

 -- Kurt Roeckx <kurt@roeckx.be>  Thu, 08 May 2008 17:56:13 +0000

openssl (0.9.8g-9) unstable; urgency=high

  [ Christoph Martin ]
  * Include updated debconf translations (closes: #473477, #461597,
    #461880, #462011, #465517, #475439)

  [ Kurt Roeckx ]
  * ssleay_rand_add() really needs to call MD_Update() for buf.

 -- Kurt Roeckx <kurt@roeckx.be>  Wed, 07 May 2008 20:32:12 +0200


-- 
Roman I. Cheplyaka :: http://ro-che.info/
...being in love is totally punk rock...