On Sat, Jun 21, 2014 at 06:15:28PM +0100, Ben Laurie wrote: > On 12 June 2014 23:15, Matt Caswell <m...@openssl.org> wrote: > > > > > > On 12/06/14 22:43, Otto Moerbeek wrote: > >> On Thu, Jun 12, 2014 at 10:26:56PM +0200, Matt Caswell via RT wrote: > >> > >>> Patch applied: > >>> https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=abfb989fe0b749ad61f1aa4cdb0ea4f952fc13e0 > >>> > >>> Many thanks for your contribution. > >>> > >>> Matt > >> > >> http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libssl/src/ssl/ssl_ciph.c.diff?r1=1.38;r2=1.39 > >> > >> Again no attribution in problem report and commit. Claiming > >> independent discovery is not going to be credible. > > > > The commit *is* attributed. The author is listed as Kurt Cancemi - this > > is as it is attributed in the patch supplied in the problem report. > > I presume he meant in the OpenBSD repo... > > Kurt does not appear to be attributed there: > http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libssl/src/ssl/ssl_ciph.c?rev=1.39. > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > Development Mailing List openssl-dev@openssl.org > Automated List Manager majord...@openssl.org
You care confusing the matter. Kurt already expained he got the fix from OpenBSD. After that explanation, the OpenSSL repo was fixed to contain the attribution. -Otto ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org