Subject: Re: OpenSSL upgrade time?
To: Michael Graff <explorer@flame.org>
From: Lubomir Sedlacik <salo@Xtrmntr.org>
List: current-users
Date: 11/13/2006 23:31:44
--EVcIhgQsEzAXu06J
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Nov 13, 2006 at 02:16:17PM -0600, Michael Graff wrote:
> The reason I ask is because bind9 9.4 (and later, of course) will be
> spamming this at the end of ./configure, on NetBSD-current and older,
> with old openssl libraries:
>=20
> WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING=
=20
> WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING=
=20
> WARNING
> WARNING         Your OpenSSL crypto library may be vulnerable to       =
=20
> WARNING         one or more of the the following known security        =
=20
> WARNING         flaws:                                                 =
=20
> WARNING
> WARNING         CAN-2002-0659, CAN-2006-4339, CVE-2006-2937 and        =
=20
> WARNING         CVE-2006-2940.                                         =
=20
> WARNING
> WARNING         It is recommended that you upgrade to OpenSSL          =
=20
> WARNING         version 0.9.8d/0.9.7l (or greater).                    =
=20
> WARNING
> WARNING         You can disable this warning by specifying:            =
=20
> WARNING
> WARNING               --disable-openssl-version-check                  =
=20
> WARNING
> WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING=
=20
> WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING=
=20

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-023.txt.=
asc

http://mail-index.netbsd.org/source-changes/2006/09/05/0016.html
http://mail-index.netbsd.org/source-changes/2006/09/06/0049.html
http://mail-index.netbsd.org/source-changes/2006/09/08/0010.html
http://mail-index.netbsd.org/source-changes/2006/09/08/0011.html
http://mail-index.netbsd.org/source-changes/2006/09/08/0034.html
http://mail-index.netbsd.org/source-changes/2006/09/08/0035.html
http://mail-index.netbsd.org/source-changes/2006/09/08/0037.html
http://mail-index.netbsd.org/source-changes/2006/09/08/0038.html
http://mail-index.netbsd.org/source-changes/2006/09/08/0039.html
http://mail-index.netbsd.org/source-changes/2006/09/08/0040.html
http://mail-index.netbsd.org/source-changes/2006/09/08/0043.html
http://mail-index.netbsd.org/source-changes/2006/09/08/0045.html

http://mail-index.netbsd.org/source-changes/2006/09/29/0034.html
http://mail-index.netbsd.org/source-changes/2006/10/06/0012.html
http://mail-index.netbsd.org/source-changes/2006/10/06/0013.html


regards,

--=20
-- Lubomir Sedlacik <salo@{NetBSD,Xtrmntr,silcnet}.org>   --

--EVcIhgQsEzAXu06J
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (NetBSD)

iD8DBQFFWPJQiwjDDlS8cmMRAsYaAJ9VDFBNTSZOlUXwTYbQmQz/SbHCFwCfX5Xg
usjfG9OBAGCh/1bmQqCs1Ak=
=aDu8
-----END PGP SIGNATURE-----

--EVcIhgQsEzAXu06J--