Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Impact of the Debian OpenSSL vulnerability

Posted May 19, 2008 10:32 UTC (Mon) by dvdeug (subscriber, #10998)
In reply to: Impact of the Debian OpenSSL vulnerability by madscientist
Parent article: Impact of the Debian OpenSSL vulnerability

But I think it a deep question; why is it the closely related group of OpenSSL and OpenSSH
developers who have this problem? Why is it that Debian developers can work hand in hand with
the developers on the X lists, on the GCC lists, on the kernel lists, but have trouble even
finding the OpenSSL list?

(Log in to post comments)

Posted May 19, 2008 20:12 UTC (Mon) by nix (subscriber, #2304) [Link]

*Are* they a closely-related group? I thought the similarity of names was 
coincidence: but the similarity in... insular development styles does seem 
like it's stretching coincidence a bit.

Impact of the Debian OpenSSL vulnerability

Posted May 20, 2008 1:05 UTC (Tue) by dvdeug (subscriber, #10998) [Link]

Oops... bad assumption. Apparently there's no direct connection between OpenSSL and OpenSSH;
Wikipedia states "Because of the prefix Open- on its name, OpenSSL is often associated with
OpenBSD; which distributes several programs using the naming style of Open*, like OpenSSH.
This is however a mistake as OpenSSL is developed completely outside of the scope of OpenBSD
by The OpenSSL Project".