Thanks to Debian OpenSSL developers
Hi list,
I want to say: Thank you!
Why? The Debian developers seems the only developers, who investigated
the openssl code and not just used it. They found a strange thing in
the OpenSSL Code, asked the OpenSSL people and after all, they removed
the potentielly dangerous code peace.
OK, this time, it was a mistake, but who but them have not just used he
code for theire packages?
In Germany we say: "Wer nichts macht, macht auch nichts verkehrt".
The bug is hard, in particular hard to fix the problems in big
enviroments. But the Debian developers have done the job, unfortunately
this time, it was a mistake.
Anyway, thanks to the Debian openssl developers, to think about things
and not just copy them!
Heads up!
Regards, Guido
Reply to: