OT: looking for help remembering name/info about security bug

Jonathan Katz jon at jonworld.com
Tue Jan 11 14:02:44 CST 2022


Heartbleed?


On Tue, 11 Jan 2022 at 20:00, Hauke Fath via cctalk <cctalk at classiccmp.org>
wrote:

> On Mon, 10 Jan 2022 22:04:33 -0800, Stan Sieler via cctalk wrote:
> > It may have been that either the routine wasn't getting called when it
> > should, or that the programmer misinterpreted what the return value
> meant.
>
> The Debian 4 OpenSSL disaster comes to mind, where IIRC a know-it-all
> package manager beautified the source and reduced the effective length
> of any generated keys to 32 bit. But that was more like 15 yrs ago...
>
> Cheerio,
> Hauke
>
> --
> Hauke Fath                        <hauke at Espresso.Rhein-Neckar.DE>
> Linnéweg 7
> 64342 Seeheim-Jugenheim
> Germany
>
-- 
-Jon
+44 7792 149029


More information about the cctalk mailing list