confusion over RSAref vul w/OpenSS[HL]

Chris Saia csaia at wtower.com
Sun Dec 5 11:53:23 EST 1999


Niels Provos <provos at citi.umich.edu> writes:

> You need to update OpenSSL if you use it with RSAREF2.  I just sent 
> the following email to Bugtraq:

**wonderful message snipped**

That message is nice and detailed, except it lacks an actual patch.
The link points to OpenBSD library fixes, but they're not terribly
useful if you don't run OpenBSD.  :)

-- 
===============================================================================
   csaia at wtower.com, WTnet IRC Administrator - http://www.wtower.com/~csaia/
    GNU Privacy Guard Public Key information is available at the above URL.
===============================================================================





More information about the openssh-unix-dev mailing list