[Pkg-openssl-devel] Plans to deploy openssl-blacklist in Debian? (was: Re: ssh-vulnkey and authorized_keys)

[Kees Cook]

Hi,

On Wed, May 21, 2008 at 01:31:43PM +0200, Alberto Gonzalez Iniesta wrote:
> On Wed, May 21, 2008 at 04:26:32AM -0700, Kees Cook wrote:
> > On Wed, May 21, 2008 at 12:33:48PM +0200, Alberto Gonzalez Iniesta wrote:
> > > Great, thanks Jamie. Kees, can you ping us when the packages hit NEW so
> > > I can warn Joerg and upload OpenVPN?
> > 
> > Okay, openssl-blacklist has been uploaded, tweaked for
> > multi-maintainership with Christoph, etc.
> 
> Ok, thanks Kees. Any news on openvpn-blacklist? Need that too for
> openvpn. Also, we'll need both packages for stable-security, in order to
> update openvpn there too (already reviewed by the Sec. Team).

And now openvpn-blacklist has been uploaded as well.  :)

I'll need to get myself educated about uploading to stable-security.  Is
that something I should do directly, or is it handled by the
stable-security team?

Thanks,

-Kees

-- 
Kees Cook