[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: CVE-2009-3555 not addressed in OpenSSL



On Wed, 29 Sep 2010, Marsh Ray wrote:
> These five bytes will mean the world to some server admin somewhere,
> who's boss is questioning his judgment for installing Debian
> everywhere and now users are starting to report strange warnings in
> their browsers.

Very well.  Do we have something from OpenSSL upstream, stating that the
patch is safe to apply to the OpenSSL version in Debian stable?

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh


Reply to: