Skip to Content.
Sympa Menu

sm-discuss - [SM-Discuss] openssl vulnerabilities

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Ladislav Hagara <hgr AT vabo.cz>
  • To: SM-Discuss AT lists.ibiblio.org
  • Subject: [SM-Discuss] openssl vulnerabilities
  • Date: Tue, 25 Mar 2003 18:53:38 +0100

Howdy,

according to http://www.openssl.org there are two vulnerabilities in our
openssl.
I modified openssl spell in devel grimoire, added two patches and
applied them from BUILD file.
I do not update UPDATED field, vulnerabilities look like only
"theoretical" vulnerabilities.
>From http://www.openssl.org/news/secadv_20030319.txt:
"Their attack requires the attacker to open MILIONS of ssl/tls
connections to the server under attack ...".

If you want to aply these patches and use devel grimoire just "cast -c
openssl".
If "Security Team" think it is real vulnerability please update UPDATE
field.

- lace -







Archive powered by MHonArc 2.6.24.

Top of Page