[arch-dev-public] Fw: OpenSSL 0.9.8e has serious bug

[Tom K]

Tom K wrote:
> Dale Blount wrote:
>>>> See: http://cvs.openssl.org/chngview?cn=15978
>>> Is there anything we, as developers, should be doing about this?
>> Someone should rebuild openssl with the patch from CVS, I'd suppose.  As
>> well as a frontpage/ML/BBS post.
>>
>> Dale
>>
> 
> I've built a patched version here, but I don't use EncFS myself. Does 
> anyone else?
> 
> If not, I'll read up on it myself, or I could put it on testing and ask 
> for testers in the community.
> 
> T.
> 

openssl 0.9.8e-3 is now in testing, and related messages are in News, 
ML, and forum.

T.