Re: openssl ASN bug?

2003-10-19 Thread Lowell Gilbert
Gabriel Ambuehl [EMAIL PROTECTED] writes: There was a security advisory about openssl 0.9.7b having a bug in the ASN encoding code on 30th Sept 03 and now I'm wondering what to do about it? Install the port? Wait some more and do another cvsup (currently, nothing shows up in UPDATING)? The

openssl ASN bug?

2003-10-02 Thread Gabriel Ambuehl
There was a security advisory about openssl 0.9.7b having a bug in the ASN encoding code on 30th Sept 03 and now I'm wondering what to do about it? Install the port? Wait some more and do another cvsup (currently, nothing shows up in UPDATING)? ___

Re[2]: openssl ASN bug?

2003-10-02 Thread gaml
Hello Lowell, Thursday, October 2, 2003, 4:34:32 PM, you wrote: Gabriel Ambuehl [EMAIL PROTECTED] writes: There was a security advisory about openssl 0.9.7b having a bug in the ASN encoding code on 30th Sept 03 and now I'm wondering what to do about it? Install the port? Wait some more and

Re: Re[2]: openssl ASN bug?

2003-10-02 Thread Lowell Gilbert
[EMAIL PROTECTED] writes: Hello Lowell, Thursday, October 2, 2003, 4:34:32 PM, you wrote: Gabriel Ambuehl [EMAIL PROTECTED] writes: There was a security advisory about openssl 0.9.7b having a bug in the ASN encoding code on 30th Sept 03 and now I'm wondering what to do about it?

Re[2]: openssl ASN bug?

2003-10-02 Thread Mike Tancsa
At 10:37 AM 02/10/2003, [EMAIL PROTECTED] wrote: The security officer announced (on the 30th) that he was going to import 0.9.7c over the next few days. That's complete, but there hasn't been an announcement or FreeBSD SA release. So I can cvsup as of today and be safe, right? No, not yet.