[openssl.org #3207] CVE-2013-6449

2014-01-04 Thread Daniel Shaul via RT
Hello OpenSSl team,

Do you know when a fix for CVE-2013-6449 is going to be released? Also, do you 
know if the OpenSSL FIPS package is affected?

Thanks,
--
Daniel Shaul
Fidelis Cybersecurity Solutions - Support
Associate Support Engineer
Support: 1.800.652.4020 option 3

__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org


Re: [openssl.org #3207] CVE-2013-6449

2014-01-04 Thread Dr. Stephen Henson
On Sat, Jan 04, 2014, Daniel Shaul via RT wrote:

 Hello OpenSSl team,
 
 Do you know when a fix for CVE-2013-6449 is going to be released? Also, do 
 you know if the OpenSSL FIPS package is affected?
 

Please don't use the RT address for general queries.

To answer your questions. A release is planned in the next few days and FIPS is
not affected.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org