[Pkg-openssl-devel] Bug#603709: Bug#603709: openssl: CVE-2010-3864

Ivan Zahariev famzah at icdsoft.com
Fri Nov 19 10:15:45 UTC 2010


Hi Kurt,

On "16 Nov 2010 18:57:45 +0100" you wrote that you uploaded 
"openssl-0.9.8g-15+lenny9" to the security archive, but this package 
version is still not available online:

http://security.debian.org/debian-security/pool/updates/main/o/openssl/

Furthermore, as expected, "apt-get upgrade" does not install the 
"lenny9" version of OpenSSL, and all stable Debian installations are 
still vulnerable.

Please advise. Thank you.
--Ivan





More information about the Pkg-openssl-devel mailing list