3 ms·

The relevant commit (fix): https://github.com/openssl/openssl/commit/e408c09bbf7c3057bda4b8d20bec1b3a7771c15b https://github.com/openssl/openssl/commit/e408c09b

by _jomo 10y ago

The relevant commit (fix): https://github.com/openssl/openssl/commit/e408c09bbf7c3057bda4b8d20bec1b3a7771c15b https://github.com/openssl/openssl/commit/e408c09bbf7c3057bd... Edit: This is only the commit for the HIGH severity CVE-2016-6304.

0x0 10y ago
That's just one of many commits related to today's advisory. https://security-tracker.debian.org/tracker/source-package/openssl https://security-tracker.debian.org/tracker/source-package/o... has a good overview of each issue with links to commits etc on each CVE entry.
- tajen 10y ago
  I don't understand your link, it lists this issue under "Open Issues" – Does that mean the fix for Debian isn't published yet?
  - 0x0 10y ago
    That's correct. Knowing Debian, there's probably an update coming in the next few hours.