monotone-devel
[Top][All Lists]
Advanced
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Monotone-devel] [Fwd: [SECURITY] [DSA 1571-1] New openssl packages

From: Brian May
Subject: Re: [Monotone-devel] [Fwd: [SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator]
Date: Thu, 15 May 2008 12:54:49 +1000
User-agent: Icedove 1.5.0.14eol (X11/20080509) 
Zack Weinberg wrote:

Monotone does not use openssl at all, and so cannot be affected by this bug.

Oops. My mistake. I thought it did.

I'm not aware of any flaws in our cryptography library (Botan)'s
random number generation, and I trust the library's author to have
gotten this right.
Yes. This security issue here is very specific to openssl running on Debian/Ubuntu. 

Brian May
reply via email to
[Prev in Thread] Current Thread [Next in Thread]