Re: [SECURITY] OpenSSL 0.9.8c and 0.9.7k released

2006-09-11 Thread sivabalakrishnan
Hi, I could see the patch for "RSA Signature Forgery" available in the location http://www.openssl.org/news/patch-CVE-2006-4339.txt is been updated with removal of unwanted code lines on september 6.Will these changes be commited to the OpenSSL releases 0.9.7 and 0.9.8. If so, when will be th

Re: [SECURITY] OpenSSL 0.9.8c and 0.9.7k released

2006-09-06 Thread Haridharan
This release fixes an important security vulnerability which could allow RSA Signature Forgery, CVE-2006-4339. Please see http://www.openssl.org/news/secadv_20060905.txt I could see the patch available in the location http://www.openssl.org/news/patch-CVE-2006-4339.txt is been updated wi