Re: OpenSSL vulnerabilities coming on the 19th

2015-03-17 Thread Bob Beck
And while I will reiterate, stop mailing us privately and asking, I can confirm that the situation has changed, and core LibreSSL developers have now had disclosure from OpenSSL. We will be keeping discusssion of all details strictly to that group until such time as OpenSSL releases publicly. -B

OpenSSL vulnerabilities coming on the 19th

2015-03-16 Thread Theo de Raadt
Please people stop mailing me privately and asking. (Probably bugging other people in the group as well). The OpenSSL group do not tell the LibreSSL group about vulnerabilities that they are fixing in upcoming releases. Why? Well, they just don't. That's the whole story. Hopefully the LibreSS