Hi, Thanks for the update.
Do you have an email address for the OpenSSH developers? On 14th November I sent a similar email to [EMAIL PROTECTED] <[EMAIL PROTECTED]> but haven't recieved a reply. Thanks, Adrian ----- Original Message ----- From: Richard Levitte via RT <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, November 26, 2002 4:05 PM Subject: [openssl.org #343] Fw: When scrubbing secrets in memory doesn't work > > [levitte - Thu Nov 21 23:09:40 2002]: > > > Hmm... I think I'm gonna call this a showstopper. It's way too > late > > tonight to fix it in a panic and do a panic release. That's just > not > > the right way. > > > > So, if noone else does it, I'm fixing this problem within the next > few > > days, and releasing 0.9.6h during next week. Sorry about that. > > Just a short note: I'm on this, using the CRYPTO_cleanse() that > Geoff Thorpe proposed, plus a few extras that he suggested to me > privately. > > To be committed tomorrow (or perhaps this evening if I can find the > time). > > -- > Richard Levitte > ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
