NetBSD Problem Report #40439

From khorben@defora.org  Tue Jan 20 10:49:42 2009
Return-Path: <khorben@defora.org>
Received: from mail.netbsd.org (mail.netbsd.org [204.152.190.11])
	by narn.NetBSD.org (Postfix) with ESMTP id C2C1563BFBB
	for <gnats-bugs@gnats.NetBSD.org>; Tue, 20 Jan 2009 10:49:42 +0000 (UTC)
Message-Id: <20090120104922.E568CFDEA@exxh.defora.lan>
Date: Tue, 20 Jan 2009 11:49:22 +0100 (CET)
From: Pierre Pronchery <khorben@defora.org>
Reply-To:
To: gnats-bugs@gnats.NetBSD.org
Subject: OpenSSL Security Advisory [07-Jan-2009]
X-Send-Pr-Version: 3.95

>Number:         40439
>Category:       security
>Synopsis:       A security update of OpenSSL is available
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    security-officer
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Jan 20 10:50:00 +0000 2009
>Closed-Date:    Fri Jul 10 05:31:32 +0000 2009
>Last-Modified:  Fri Jul 10 05:31:32 +0000 2009
>Originator:     Pierre Pronchery <khorben@defora.org>
>Release:        NetBSD 4.99.63
>Organization:

>Environment:
System: NetBSD exxh.defora.lan 4.99.63 NetBSD 4.99.63 (GENERIC.MP) #0: Wed May 21 20:10:41 CEST 2008 khorben@exxh.defora.lan:/usr/obj/sys/arch/sparc64/compile/GENERIC.MP sparc64
Architecture: sparc64
Machine: sparc64
>Description:
The OpenSSL project released a security advisory on January 7th:
http://openssl.org/news/secadv_20090107.txt

The newer 0.9.8j version is available, fixing important bugs.

It is already available in pkgsrc, but to my knowledge -current and netbsd-5 do not include the fixes.

>How-To-Repeat:

n/a

>Fix:

Update to OpenSSL 0.9.8j.

>Release-Note:

>Audit-Trail:

State-Changed-From-To: open->closed
State-Changed-By: tonnerre@NetBSD.org
State-Changed-When: Fri, 10 Jul 2009 05:31:32 +0000
State-Changed-Why:
OpenSSL upgrades have been applied; see NetBSD-SA2009-008 and NetBSD-SA2009-009.


>Unformatted:

Home	PR Database Search