Re: Security fixes for tmda-ofmipd now available

Kevin Goodsell <[email protected]> Sat, 9 Apr 2011 15:08:05 -0700
Newsgroups gmane.mail.spam.tmda.devel,gmane.mail.spam.tmda.user
Message-ID <[email protected]>
On Sat, Apr 9, 2011 at 2:57 PM, Kevin Goodsell
<[email protected]> wrote:
> I've pushed two commits out to the Subversion repository as well as my
> GitHub fork. On GitHub I've also tagged a new release (tag name
> tmda-1.1.12-kg3 or debian-tmda-1.1.12-kg3-1 for the branch that
> includes Debian packaging) and uploaded new .deb packages:
>
> https://github.com/KevinGoodsell/tmda-fork
>
> As indicated in the subject line, these changes are to address issues
> that I consider security problems for tmda-ofmipd. Two separate issues
> are addressed with these changes:
>

One thing I forgot to make clear in my message: these issues are
specific to the OpenSSL version of tmda-ofmipd that has been available
on the GitHub fork previously. The code was incorporated into the
Subversion repository recently, but no official releases have ever
included it. I have no particular reason to think that the TLSLite
version has either of these problems (though I can't say I trust its
security).

-Kevin

------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
_______________________________________________
tmda-workers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tmda-workers