From owner-freebsd-security@FreeBSD.ORG Fri Sep 28 22:12:57 2007 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A622516A419 for ; Fri, 28 Sep 2007 22:12:57 +0000 (UTC) (envelope-from se@FreeBSD.org) Received: from spacemail2-out.mgmt.space.net (spacemail2-out.mgmt.Space.Net [194.97.149.148]) by mx1.freebsd.org (Postfix) with ESMTP id 319D413C4A3 for ; Fri, 28 Sep 2007 22:12:56 +0000 (UTC) (envelope-from se@FreeBSD.org) X-SpaceNet-SBRS: None X-IronPort-AV: E=Sophos;i="4.21,211,1188770400"; d="scan'208";a="57949193" Received: from mail.atsec.com ([195.30.252.105]) by spacemail2-out.mgmt.space.net with ESMTP; 28 Sep 2007 23:43:53 +0200 Received: from [192.168.0.12] (p50875910.dip.t-dialin.net [80.135.89.16]) (Authenticated sender: se@atsec.com) by mail.atsec.com (Postfix) with ESMTP id B546A720907; Fri, 28 Sep 2007 23:43:52 +0200 (CEST) Message-ID: <46FD7595.8090506@FreeBSD.org> Date: Fri, 28 Sep 2007 23:43:49 +0200 From: Stefan Esser User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: freebsd-security@freebsd.org X-Enigmail-Version: 0.95.3 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit X-Mailman-Approved-At: Fri, 28 Sep 2007 22:29:02 +0000 Subject: OpenSSL bufffer overflow X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Sep 2007 22:12:57 -0000 I did not see any commits to the OpenSSL code, recently; is anybody going to commit the fix? See http://www.securityfocus.com/archive/1/480855/30/0 for details ... Regards, STefan From owner-freebsd-security@FreeBSD.ORG Sat Sep 29 20:00:08 2007 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B345C16A418 for ; Sat, 29 Sep 2007 20:00:06 +0000 (UTC) (envelope-from remko@FreeBSD.org) Received: from galain.elvandar.org (redqueen.elvandar.org [217.148.169.55]) by mx1.freebsd.org (Postfix) with ESMTP id D8F3613C46A for ; Sat, 29 Sep 2007 20:00:05 +0000 (UTC) (envelope-from remko@FreeBSD.org) Received: from 47-145-ftth.onsnetnuenen.nl ([88.159.145.47] helo=elvandar.local) by galain.elvandar.org with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.67) (envelope-from ) id 1IbiDg-0003j9-0G; Sat, 29 Sep 2007 21:43:20 +0200 Message-ID: <46FEAB10.2090804@FreeBSD.org> Date: Sat, 29 Sep 2007 21:44:16 +0200 From: Remko Lodder User-Agent: Thunderbird 2.0.0.6 (Macintosh/20070728) MIME-Version: 1.0 To: Stefan Esser References: <46FD7595.8090506@FreeBSD.org> In-Reply-To: <46FD7595.8090506@FreeBSD.org> Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit X-Mailman-Approved-At: Sat, 29 Sep 2007 21:52:48 +0000 Cc: freebsd-security@freebsd.org, FreeBSD Security Team Subject: Re: OpenSSL bufffer overflow X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 29 Sep 2007 20:00:08 -0000 Stefan Esser wrote: > I did not see any commits to the OpenSSL code, recently; is anybody > going to commit the fix? > > See http://www.securityfocus.com/archive/1/480855/30/0 for details ... > > Regards, STefan Hello Stefan, We are aware of the situation and have this on our todo list. Thanks, Remko -- Kind regards, Remko Lodder ** remko@elvandar.org FreeBSD ** remko@FreeBSD.org /* Quis custodiet ipsos custodes */