Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sourceware DOT cygnus DOT com>
List-Archive: <http://sourceware.cygnus.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sourceware DOT cygnus DOT com>
List-Help: <mailto:cygwin-help AT sourceware DOT cygnus DOT com>, <http://sourceware.cygnus.com/ml/#faqs>
Sender: cygwin-owner AT sourceware DOT cygnus DOT com
Delivered-To: mailing list cygwin AT sourceware DOT cygnus DOT com
Message-ID: <39341092.F9F8E647@vinschen.de>
Date: Tue, 30 May 2000 21:03:46 +0200
From: Corinna Vinschen <corinna AT vinschen DOT de>
X-Mailer: Mozilla 4.73 [en] (X11; I; Linux 2.2.14 i686)
X-Accept-Language: de, en
MIME-Version: 1.0
To: Prentis Brooks <prentis AT aol DOT net>
CC: cygwin <cygwin AT sourceware DOT cygnus DOT com>
Subject: Re: [ANNOUNCEMENT]: patched openSSH-1.2.2 [was Re: No this has a nasty 
 bite]
References: <NEBBLEPLMLJEEFHAGMDMCECMCAAA DOT prentis AT aol DOT net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Prentis Brooks wrote:
> Corinna,
>         your patches work great, one last quick question, then I am done, I hope
> :).  There is apparently an RSAREF patch out there with a buffer overflow
> problem, I am still trying to track down the patch number.  If you happen to
> know of it, did you apply that patch to the OpenSSL code?  If you don't know
> of the one I am talking about, then I guess there is not much we can do
> until I find that patch number ;)

RSAREF isn't used in the openSSL port.

Corinna

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com