Re: CVE-2009-3555 not addressed in OpenSSL
On Wed, 29 Sep 2010, Marsh Ray wrote:
> These five bytes will mean the world to some server admin somewhere,
> who's boss is questioning his judgment for installing Debian
> everywhere and now users are starting to report strange warnings in
> their browsers.
Very well. Do we have something from OpenSSL upstream, stating that the
patch is safe to apply to the OpenSSL version in Debian stable?
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh
Reply to: