[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: openssl-0.9.6c-2.woody.0 not vulnerable, right?



* Alan Su (alsu@cs.ucsd.edu) [020914 13:12]:
> i just want to check on something here.  when i first upgraded to
> woody, i read <http://www.debian.org/security/2002/dsa-136>.  this
> advisory seems to indicate that the 0.9.6c version of openssl that is
> in woody has been patched to eliminate the widely-discussed
> vulnerability in openssl versions before 0.9.6e.  in other words, i

See a recent thread on debian-security, in particular
archive/latest/8908 .

According to that discussion, it would seem that 0.9.6c-2.woody.0 is
safe from this.

good times,
Vineet
-- 
http://www.doorstop.net/
-- 
http://www.aclu.org/		It's all about Freedom.

Attachment: pgpL99zhEcMbr.pgp
Description: PGP signature


Reply to: