Re: FLASH: Internet Storm Center Briefing on Today's OpenSSL Security Patches

2014-06-06 Thread Kevin Fenzi
On Thu, 5 Jun 2014 21:26:21 +0200 Heinz Diehl wrote: > On 05.06.2014, Kevin Fenzi wrote: > > > https://admin.fedoraproject.org/updates/FEDORA-2014-6881/gnutls-3.1.20-5.fc19 > > Is the patch backported to that version? The bug is fixed in 3.1.25, > but not in 3.1.20. Yes. The maintainer decid

Re: FLASH: Internet Storm Center Briefing on Today's OpenSSL Security Patches

2014-06-05 Thread Heinz Diehl
On 05.06.2014, Kevin Fenzi wrote: > https://admin.fedoraproject.org/updates/FEDORA-2014-6881/gnutls-3.1.20-5.fc19 Is the patch backported to that version? The bug is fixed in 3.1.25, but not in 3.1.20. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription o

Re: Fwd: FLASH: Internet Storm Center Briefing on Today's OpenSSL Security Patches

2014-06-05 Thread Paul W. Frields
On Thu, Jun 05, 2014 at 09:00:50PM +0200, Heinz Diehl wrote: > On 05.06.2014, Matthew Miller wrote: > > > Fedora has an update that should be rolling out soon. > > And while we are waiting: > http://tinyurl.com/o3glbta Updates for that issue (CVE-2014-3466) have been available for some time, I

Re: FLASH: Internet Storm Center Briefing on Today's OpenSSL Security Patches

2014-06-05 Thread Kevin Fenzi
On Thu, 5 Jun 2014 21:00:50 +0200 Heinz Diehl wrote: > On 05.06.2014, Matthew Miller wrote: > > > Fedora has an update that should be rolling out soon. > > And while we are waiting: > http://tinyurl.com/o3glbta Thats talking about the gnutls bug a few days ago. That update is already in fed

Re: Fwd: FLASH: Internet Storm Center Briefing on Today's OpenSSL Security Patches

2014-06-05 Thread Heinz Diehl
On 05.06.2014, Matthew Miller wrote: > Fedora has an update that should be rolling out soon. And while we are waiting: http://tinyurl.com/o3glbta -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listin

Re: Fwd: FLASH: Internet Storm Center Briefing on Today's OpenSSL Security Patches

2014-06-05 Thread Matthew Miller
On Thu, Jun 05, 2014 at 09:51:09AM -0500, Steven Stern wrote: > OpenSSL today released an critical update, patching 6 different > vulnerabilities, one of which can lead to remote code execution. After Fedora has an update that should be rolling out soon. -- Matthew Miller Fedora Project Leader

Fwd: FLASH: Internet Storm Center Briefing on Today's OpenSSL Security Patches

2014-06-05 Thread Steven Stern
FYI Original Message Subject: FLASH: Internet Storm Center Briefing on Today's OpenSSL Security Patches Date: Thu, 5 Jun 2014 14:37:10 + From: SANS Institute Reply-To: s...@sans.org FLASH: Internet Storm Center Briefing on Today's OpenSSL Security Patc