OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________
________________
Server: cvs.openssl.org Name: Mark J.
Cox
Root: /v/openssl/cvs Email: mark openssl.org
Module: openssl-web Date:
28-Feb-2008 14:28:31
Branch: HEAD Handle:
2008022813283000
Modified files:
openssl-web/news secadv_20071012.txt
Log:
Ryo Okumura noted that the fix for CVE-2007-5135 was
committed after 0.9.7m
and therefore the advisory was incorrect. Fixed
advisory.
Summary:
Revision Changes Path
1.2 +4 -2
openssl-web/news/secadv_20071012.txt
____________________________________________________________
________________
patch -p0 <<' .'
Index: openssl-web/news/secadv_20071012.txt
============================================================
================
$ cvs diff -u -r1.1 -r1.2 secadv_20071012.txt
--- openssl-web/news/secadv_20071012.txt 12 Oct 2007
10:53:42 -0000 1.1
+++ openssl-web/news/secadv_20071012.txt 28 Feb 2008
13:28:30 -0000 1.2
 -48,8 +48,10 
Versions Affected
-----------------
-All releases of 0.9.8 prior to 0.9.8f. All releases of
0.9.7 prior to
-0.9.7m.
+All releases of 0.9.8 prior to 0.9.8f. All releases of
0.9.7 up to and
+including 0.9.7m. (Note this advisory used to state
"prior to 0.9.7m"
+but this is incorrect as the fix was not committed until
after 0.9.7m
+was released)
(Note that versions prior to 0.9.8d and 0.9.7l actually
had a worse
problem in the same function).
 .
____________________________________________________________
__________
OpenSSL Project http://www.openssl.org
CVS Repository Commit List
openssl-cvs openssl.org
Automated List Manager
majordomo openssl.org
|