[Pkg-openssl-devel] [SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator

Thijs Kinkhorst thijs at debian.org
Wed May 14 10:08:56 UTC 2008


On Wednesday 14 May 2008 11:16, Gerfried Fuchs wrote:
>  I've asked several times on #debian-security about what to add to
> there, a question to team at security got unanswered so far, too. I would
> be fine to add any informations, I just don't like linking to a wiki
> page[1] for security related informations unless explicitly told that
> that's the only way to go - it just feels wrong. Noone said that
> converting that wiki page to the website would be the right thing to do,
> neither.

That page unfortunately falls through the cracks as we're all very busy with 
preparing the DSA or responding to the various issues coming up or fixing our 
own machines (I am still working on 30 at the moment) . It would be a great 
help if the page could be filled with information as it is currently on the 
wiki. I think the people with current webwml access are trusted enough to use 
their own judgment in making that page.

Alternatively linking to the wiki page is better than nothing, because that 
source is at least much more controlled than people going randomly around 
looking for said information from unknown sources.

If you and/or the people from debian-www have any content to add to the page: 
feel very free to start!


Thijs
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 481 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-openssl-devel/attachments/20080514/b50d9974/attachment.pgp 


More information about the Pkg-openssl-devel mailing list