Dear openssl users, I have a question regarding the vulnerability CVE-2015-1788. At http://openssl.org/news/secadv_20150611.txt, I would like to get the clarification on the follwing statement. This issue affects OpenSSL versions: 1.0.2 and 1.0.1. Recent 1.0.0 and 0.9.8 versions are not affected. 1.0.0d and 0.9.8r and below are affected. I would like to know in which version of 0.9.8, this vulnerability is fixed. I do not find the code changes related to this in 0.9.8zg that are committed for 1.0.1n( https://github.com/openssl/openssl/commit/4924b37ee01f71ae19c94a8934b80eeb2f677932) for fixing the same. Is the fix different for 0.9.8 and 1.0.1 versions. Please help me. Regards, -Jaya Nageswar. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20150702/f0c41ec7/attachment.html>
