Re: CVE-2013-1900 an OpenSSL flaw?

2013-04-16 Thread Tomas Mraz
On Tue, 2013-04-16 at 11:11 -0400, manc...@hush.com wrote: > Hello. > > I came across a thread that discusses a recent PostgreSQL security > fix (for CVE-2013-1900). The discussion raises the possibility the > problem lies in OpenSSL's fork protection code. > > Full thread here: http://marc.info

CVE-2013-1900 an OpenSSL flaw?

2013-04-16 Thread mancha1
Hello. I came across a thread that discusses a recent PostgreSQL security fix (for CVE-2013-1900). The discussion raises the possibility the problem lies in OpenSSL's fork protection code. Full thread here: http://marc.info/?t=13657942101&r=1&w=2 Thoughts? --mancha