Linux Today: Linux News On Internet Time.

Flaws Found in BSD, Linux Software Updaters

Jul 15, 2008, 21:15 (3 Talkback[s])
(Other stories by Matthew Broersma)

"For example, even though known flaws exist in an older version of OpenSSL for Debian, the list of flawed files is still correctly signed. This means an illicit mirror — a deliberately tainted archive of the files, set up to communicate with package managers — can be created and used for distribution.>

Complete Story

Related Stories: