Serious OpenSSL vulnerability

Neal Becker ndbecker2 at gmail.com
Tue Apr 8 13:56:44 UTC 2014


Joachim Backes wrote:

> On 04/08/2014 02:01 PM, Martín Marqués wrote:
>> 2014-04-08 8:34 GMT-03:00 Patrick O'Callaghan <pocallaghan at gmail.com>:
>>> On Tue, 2014-04-08 at 08:28 -0300, Martín Marqués wrote:
>>>>
>>>> I'm a bit disappointed, and think these issues should be addressed ASAP.
>>>
>>> It's been on Koji since yesterday, but I guess it needs karma or
>>> something.
>> 
>> Hmmm, normally, the easiest way to give karma is using
>> fedora-easy-karma, but the package isn't in testing yet.
>> 
>> Very annoying.
>> 
> 
> Karma value is 6
> 
(https://admin.fedoraproject.org/updates/openssl-1.0.1e-37.fc20.1?_csrf_token=552ca0a3be9fd9ab7342dced2b15f9b18d4ed7f9,
> 
> Tue Apr  8 14:46:18 CEST 2014)
> 
> 
> Joachim Backes
> 

I wonder if systems that have various buffer overrun protections might be 
resistant to this attack?



More information about the users mailing list