An idiosyncratic port of OpenSSL 1.1.1d to OS/400 ILE

2019-09-19 Thread Dan Fulger
This port is for ILE (native OS/400) not PASE (PASE is almost like Unix, and already comes with openssl).   The idiosynchrasies are explained in the README.as400 file in AS400patch.tar.gz.   AS400patch.tar.gz (large patch for OpenSSL and other files):

Re: Doubts in the fix of CVE-2019-1559

2019-09-19 Thread Matt Caswell
On 19/09/2019 07:47, Manish Patidar wrote: > Hi > This vulnerability is fixed based on pid of process. Currently we are geting > pid > only  where pthread is enabled,  does it mean that this vulnerability does not > impact to other environment like Windows etc.? CVE-2019-1559 has nothing to

Doubts in the fix of CVE-2019-1559

2019-09-19 Thread Manish Patidar
Hi This vulnerability is fixed based on pid of process. Currently we are geting pid only where pthread is enabled, does it mean that this vulnerability does not impact to other environment like Windows etc.? Regards Manish