[nsp-sec] Debian to disclose critical bug on Tuesday

Florian Weimer fweimer at bfk.de
Mon May 12 09:59:32 EDT 2008


* Jose Nazario:

> florian
>
> you keep mentioning that this affects debian-specific things, but you
> open by saying this is an openssl issue.

Oops, the bug is in Debian's openssl package, and is caused by
Debian-specific patch.  Only Debian and its downstream distributions
are affected (Unbutu beginning with feisty, Ubuntu hardy and Debian
sarge are too old to be affected).

Sorry for being unclear, and thanks for asking for clarification.

-- 
Florian Weimer                <fweimer at bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99



More information about the nsp-security mailing list