From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <ldv@altlinux.ru>
Date: Mon, 16 Sep 2002 13:15:45 +0400
From: "Dmitry V. Levin" <ldv@altlinux.org>
To: ALT Linux general discussion list <community@altlinux.ru>
Message-ID: <20020916091545.GA2615@basalt.office.altlinux.ru>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="KsGdsel6WgEHnImy"
Content-Disposition: inline
X-fingerprint: 9658 398D 181B 1200 8FC5  26B8 F6F8 846B C1E2 3429
Subject: [Comm] [ben@algroup.co.uk: OpenSSL worm in the wild]
Sender: community-admin@altlinux.ru
Errors-To: community-admin@altlinux.ru
X-BeenThere: community@altlinux.ru
X-Mailman-Version: 2.0.13
Precedence: bulk
Reply-To: community@altlinux.ru
List-Unsubscribe: <http://www.altlinux.ru/mailman/listinfo/community>,
	<mailto:community-request@altlinux.ru?subject=unsubscribe>
List-Id: <community.altlinux.ru>
List-Post: <mailto:community@altlinux.ru>
List-Help: <mailto:community-request@altlinux.ru?subject=help>
List-Subscribe: <http://www.altlinux.ru/mailman/listinfo/community>,
	<mailto:community-request@altlinux.ru?subject=subscribe>
List-Archive: <http://www.altlinux.ru/pipermail/community/>
Archived-At: <http://lore.altlinux.org/community/20020916091545.GA2615@basalt.office.altlinux.ru/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

--KsGdsel6WgEHnImy
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Надеюсь, что все уже давным-давно обновились из updates.

----- Forwarded message from Ben Laurie <ben@algroup.co.uk> -----

Date: Fri, 13 Sep 2002 18:16:33 +0100
From: Ben Laurie <ben@algroup.co.uk>
To: Bugtraq <BUGTRAQ@SECURITYFOCUS.COM>,
	Cryptography <cryptography@wasabisystems.com>,
	cypherpunks <cypherpunks@einstein.ssz.com>,
	Apache SSL <apache-ssl@lists.aldigital.co.uk>
Subject: OpenSSL worm in the wild
Mailing-List: contact bugtraq-help@securityfocus.com; run by ezmlm
Delivered-To: mailing list bugtraq@securityfocus.com
Delivered-To: moderator for bugtraq@securityfocus.com

I have now seen a worm for the OpenSSL problems I reported a few weeks 
back in the wild. Anyone who has not patched/upgraded to 0.9.6e+ should 
be _seriously worried_.

It appears to be exclusively targeted at Linux systems, but I wouldn't 
count on variants for other systems not existing.

Cheers,

Ben.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

----- End forwarded message -----

--
ldv

--KsGdsel6WgEHnImy
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9haFA9viEa8HiNCkRAmeGAJ9xtrwZXoLqg4zmNzs7JL+D8yRWyACcCTw/
VamRoXt/rNbGvZ0wnZ2HwdM=
=91j1
-----END PGP SIGNATURE-----

--KsGdsel6WgEHnImy--