Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] openssl vulnerabilities

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: "M.L." <mlubrano AT sourcemage.org>
  • To: Ladislav Hagara <hgr AT vabo.cz>, SM-Discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] openssl vulnerabilities
  • Date: Tue, 25 Mar 2003 19:10:59 +0100

Hi lace,

thanks, I've opened a bug about it
http://bugs.sourcemage.org/show_bug.cgi?id=2916.

I thinks the security team would use it.

Bye,
Mat.

On Mardi 25 Mars 2003 18:53, Ladislav Hagara wrote:
> Howdy,
>
> according to http://www.openssl.org there are two vulnerabilities in our
> openssl.
> I modified openssl spell in devel grimoire, added two patches and
> applied them from BUILD file.
> I do not update UPDATED field, vulnerabilities look like only
> "theoretical" vulnerabilities.
> From http://www.openssl.org/news/secadv_20030319.txt:
> "Their attack requires the attacker to open MILIONS of ssl/tls
> connections to the server under attack ...".
>
> If you want to aply these patches and use devel grimoire just "cast -c
> openssl".
> If "Security Team" think it is real vulnerability please update UPDATE
> field.
>
> - lace -
>
>
>
>
> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss

--
//
// M.L. Grimoire Guru (mail & news)
// SourceMage GNU/Linux http://www.sourcemage.org
// ICQ #23832402 Linux User #36502
//




Archive powered by MHonArc 2.6.24.

Top of Page