From owner-freebsd-security  Tue Dec 14 20: 5:11 1999
Delivered-To: freebsd-security@freebsd.org
Received: from alecto.physics.uiuc.edu (alecto.physics.uiuc.edu [130.126.8.20])
	by hub.freebsd.org (Postfix) with ESMTP id F0D2C14F9E
	for <freebsd-security@freebsd.org>; Tue, 14 Dec 1999 20:05:03 -0800 (PST)
	(envelope-from igor@alecto.physics.uiuc.edu)
Received: (from igor@localhost)
	by alecto.physics.uiuc.edu (8.9.0/8.9.0) id WAA28271;
	Tue, 14 Dec 1999 22:04:57 -0600 (CST)
From: Igor Roshchin <igor@physics.uiuc.edu>
Message-Id: <199912150404.WAA28271@alecto.physics.uiuc.edu>
Subject: Re: CERT released RSAREF bulletin
In-Reply-To: <199912142340.QAA56342@harmony.village.org> from "Warner Losh" at "Dec 14, 1999  4:40:53 pm"
To: imp@village.org (Warner Losh)
Date: Tue, 14 Dec 1999 22:04:57 -0600 (CST)
Cc: freebsd-security@freebsd.org
X-Mailer: ELM [version 2.4ME+ PL43 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> In message <4.2.2.19991214112940.01c3d5b8@mail.myable.com> Marc
> Bejarano writes:
> : i guess the rsaref port needs updating?
> 
> Satoshi-san has updated the port.
> 
> Warner
> 
> 

I've noticed that the patch just changed from its Dec.2 version.
Does it mean that the rsaref2 (and therefore the software based on it)
as of Dec.2-Dec.13 is/was still vulnerable,
or this is more of a aesthetic change for the sake of the patch elegancy ?

Thanks,

Igor


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message