perl-Net-SSLeay vulnerability

[Jason L Tibbitts III]

The maintainer of perl-Net-SSLeay, Jose Pedro Oliveira
<jpo(a)lsd.di.uminho.pt&gt; just contacted me about the procedure for
getting a security review; it seems the version in FC3 and FC4 has a
vulnerability but he would like some additional review of the
backport.  I asked him to contact this list, but I'm not sure it's
open to nonmembers.

 - J<

[Dennis Gilmore]

On Wednesday 10 May 2006 7:45 pm, Jason L Tibbitts III wrote:
>  The maintainer of perl-Net-SSLeay, Jose Pedro Oliveira
>  <jpo(a)lsd.di.uminho.pt&gt; just contacted me about the procedure for
>  getting a security review; it seems the version in FC3 and FC4 has a
>  vulnerability but he would like some additional review of the
>  backport.  I asked him to contact this list, but I'm not sure it's
>  open to nonmembers. 
The list is open to anyone who wants to subscribe to the list.  FC3 security 
issues  are ones that effect me the most.  between extras for Aurora and my 
FC3 servers. So  I will do what i can to help him.

Dennis

[Josh Bressers]

>  The maintainer of perl-Net-SSLeay, Jose Pedro Oliveira
>  <jpo(a)lsd.di.uminho.pt&gt; just contacted me about the procedure for
>  getting a security review; it seems the version in FC3 and FC4 has a
>  vulnerability but he would like some additional review of the
>  backport.  I asked him to contact this list, but I'm not sure it's
>  open to nonmembers. 
Anyone may post to this list (non subscriber posts are moderated, so it
won't show up right away).  One of the goals of this list is to allow third
parties to send us mails without having to subscribe to the list.  It's the
reason I don't have a list reply-to.  If an outsider mails the list, they
should stay on the Cc list.

-- 
    JB