[Pkg-openssl-devel] Bug#444435: Bug#444435: Bug#444435: openssl: [CVE-2007-5135] Off-by-one error in the SSL_get_shared_ciphers()

Noah Meyerhans noahm at debian.org
Fri Sep 28 20:23:37 UTC 2007


On Fri, Sep 28, 2007 at 10:19:11PM +0200, Kurt Roeckx wrote:
> > Thanks.  Is there any chance of fixing this for oldstable?
> 
> The security team wasn't interested in doing updates for
> oldstable-security before.

Eh?  I must have missed that.  We claim to support oldstable for 1 year,
which means we've still got, what, 7 months left of support for it?

> 
> I can prepare a packages fixing all of them if you want.

That would be amazingly helpful and very much appreciated!

noah

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-openssl-devel/attachments/20070928/9e237676/attachment.pgp 


More information about the Pkg-openssl-devel mailing list