Re: Patches for CVE-2007-3108

2007-08-27 Thread Andy Polyakov
Hi, Anyway, looking at this, there seems to be confusion about what is needed to fix this. I'll write here what I think is the situation. Someone please correct me if I'm wrong. For HEAD the fixes are: http://cvs.openssl.org/chngview?cn=16275 http://cvs.openssl.org/chngview?cn=16282

Re: Patches for CVE-2007-3108

2007-08-20 Thread Ben Sandee
On 8/15/07, Kurt Roeckx [EMAIL PROTECTED] wrote: Hi, I've just been informed that there has been a CVE published about openssl. You can see some of it at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3108 http://www.securityfocus.com/bid/25163/solution

Patches for CVE-2007-3108

2007-08-15 Thread Kurt Roeckx
Hi, I've just been informed that there has been a CVE published about openssl. You can see some of it at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3108 http://www.securityfocus.com/bid/25163/solution http://openssl.org/news/patch-CVE-2007-3108.txt But I haven't seen an