Re: question on whether openssl fips is affected with CVE-2014-5139

2014-08-22 Thread Dr. Stephen Henson
On Wed, Aug 20, 2014, Lewis Lo wrote: > > I have a question on whether the following OpenSSL vulnerabilities > described in CVE-2014-5139 affects the OpenSSL 1.0.1e-fips The affected > platforms does not indicate if it affect the fips version. Thanks. > OpenSSL 1.0.1e-fips is not a separa

question on whether openssl fips is affected with CVE-2014-5139

2014-08-21 Thread Lewis Lo
Greetings, I have a question on whether the following OpenSSL vulnerabilities described in CVE-2014-5139 affects the OpenSSL 1.0.1e-fips The affected platforms does not indicate if it affect the fips version. Thanks. - CVE-2014-3508: Information leak in pretty printing functions (CVE-2