Re[2]: openssl updates

Denis Solovyov <[email protected]> Sat, 2 Dec 2006 19:10:37 +0800

Newsgroups	gmane.linux.trustix.general
Message-ID	<[email protected]>

>> CAN-2002-0659, CAN-2006-4339, CVE-2006-2937 and
>> CVE-2006-2940.                                   
>> # grep openssl /var/log/rpmpkgs
>> openssl-0.9.7e-8tr.i586.rpm
>> Is this warning worth considering? Are there plans of updating openssl?
KAL> blame the stupid checks in bind configure script - there's no need to bump
KAL> version numbers for packages, just apply fix patches for old one.

Have the mentioned issues been already fixed in openssl-0.9.7e-8tr?

I believe I shouldn't fix anything in the standard package, TSL
team should...

Anyway, AFAIR it is the first time I ever saw direct security-related
warning doing something in 100% upgraded Trustix _Secure_ Linix. :)

Best regards,
Denis Solovyov