Subject: Re: OpenSSL CVE-2007-4995 in netbsd-3
To: None <tech-security@netbsd.org>
From: Brian A. Seklecki <lavalamp@spiritual-machines.org>
List: tech-security
Date: 12/02/2007 13:45:35
On Tue, 27 Nov 2007, Brian A. Seklecki wrote:

> I don't see a pullup in the changelog for -rnetbsd-3:
>
> http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/openssl/ssl/ssl_lib.c

All:

I've tested applying the releng-4 pullup on releng-3 on production systems 
for about 5 days.

Can someone please request the pullup to pullup-3@netbsd.org ?

~BAS