confusion over RSAref vul w/OpenSS[HL]

[Niels Provos]

In message <m3903a2oos.fsf at yakko.wtower.com>, Chris Saia writes:
>That message is nice and detailed, except it lacks an actual patch.
>The link points to OpenBSD library fixes, but they're not terribly
>useful if you don't run OpenBSD.  :)
The Bugtraq posting contained the relevant patches, have a look
at http://www.securityfocus.com/templates/advisory.html?id=1892.
The patches are only against RSAREF2, nothing else needs fixing.

Niels.