At 12:44 01.08.2002 -0400, Vince Nigro wrote:

>>I don�t think so. Something in the SSL-Communication goes terrible wrong and Eudora 
>does a "QUIT" after "USER". It seems as Eudora can't read the "+OK" response properly.
>>
>>I'm trying a workaround currently by applying the patch
>>http://www.openssl.org/news/patch_20020730_0_9_6d.txt
>>to openssl-0.9.6c. It fails in the CHANGES File, but who cares;-)
>
>You state that you applied this  patch to openssl-0.9.6c, do you mean openssl-0.9.6e?
>openssl-0.9.6c and earlier does not exhibit the problem, and for security reasons you 
>would only want to run openssl-0.9.6e at this point.

As I already answered to Vince personally:

The patch above is for openssl-0.9.6d -> 0.9.6e.

Since releases "e" and "d" are not working properly with qpopper I tried to apply the 
fixes from the "e" release to the older "c" release by using the above patch on 
openssl-0.9.6c.

So some minor fixes between "c" and "d" are missing (and the one not working with 
qpopper), but the securityfixes from the advisory are applied!

Regards,
Wolfgang

-- 
 /     recursive, adj.; see recursive.  -- Unknown      \ 
( Wolfgang Breyha <[EMAIL PROTECTED]> - http://mash.nwy.at )
 \   System Engineering UTA/netway - Vienna - Austria   /

Reply via email to