freebsd security - Feb 2013 - new OpenSSL security issues

Three of them it seems

http://www.openssl.org/news/secadv_20130205.txt


-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike at sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi, Mike,

On 02/07/13 05:33, Mike Tancsa wrote:
> Three of them it seems
> 
> http://www.openssl.org/news/secadv_20130205.txt
Thanks, we are aware of this.  Jung-uk already have a patchset that is
pending review.

Note that it seems that the new OpenSSL version have introduced a
regression, by the way:

	http://www.mail-archive.com/openssl-dev at openssl.org/msg32009.html

Cheers,
- -- 
Xin LI <delphij at delphij.net>    https://www.delphij.net/
FreeBSD - The Power to Serve!           Live free or die
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCgAGBQJRE/F5AAoJEG80Jeu8UPuzATkH/jojEHZID2IUDTpk45XFxmEJ
+yxkY6fKKGyGZWnJlEzlVloP+UHbOe64qj1JbV/izvN4Kz0bhMd1IbDf8FNm0wym
Ta94yc5gM2YLCcp6kbbvJci4b+YjRKCEj45hpbJVdY/KiBIfXe01/YFoANGuDDNs
0jgQOXNKnpV5ESv09o1yWeYy9hOThSAMyPMWg0/Eq+Li0t/lmQqJottrkkdkP5jM
CXEfHwyW0LrXLC+/tMEaQ54tbozfK2HLw2kI/5p9HXzJtYBV6UVM3YKaSXZSGu/r
p6b82tdnyaZb1lBdWEgy74AJ0fye50tHohusqeg6QBznyCAnppyiU5goJfT1oso=BQiP
-----END PGP SIGNATURE-----

On 2/7/2013 1:24 PM, Xin Li wrote:
> 
> Note that it seems that the new OpenSSL version have introduced a 
> regression, by the way:
> 
> http://www.mail-archive.com/openssl-dev at openssl.org/msg32009.html
Hi Xin,
	Looks like a new version just got released today that supposedly
fixes this regression issue.

http://www.openssl.org/source/exp/CHANGES

	---Mike


-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike at sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/