sm-discuss AT lists.ibiblio.org
Subject: Public SourceMage Discussion List
List archive
- From: Ladislav Hagara <hgr AT vabo.cz>
- To: SM-Discuss AT lists.ibiblio.org
- Subject: [SM-Discuss] openssl vulnerabilities
- Date: Tue, 25 Mar 2003 18:53:38 +0100
Howdy,
according to http://www.openssl.org there are two vulnerabilities in our
openssl.
I modified openssl spell in devel grimoire, added two patches and
applied them from BUILD file.
I do not update UPDATED field, vulnerabilities look like only
"theoretical" vulnerabilities.
>From http://www.openssl.org/news/secadv_20030319.txt:
"Their attack requires the attacker to open MILIONS of ssl/tls
connections to the server under attack ...".
If you want to aply these patches and use devel grimoire just "cast -c
openssl".
If "Security Team" think it is real vulnerability please update UPDATE
field.
- lace -
-
[SM-Discuss] openssl vulnerabilities,
Ladislav Hagara, 03/25/2003
- Re: [SM-Discuss] openssl vulnerabilities, M.L., 03/25/2003
Archive powered by MHonArc 2.6.24.