openssl ASN bug?

[Lowell Gilbert]

Gabriel Ambuehl <gaml at buz.ch> writes:

> There was a security advisory about openssl <0.9.7b having a bug in
> the ASN encoding code on 30th Sept 03 and now I'm wondering what to do
> about it? Install the port? Wait some more and do another cvsup
> (currently, nothing shows up in UPDATING)?

The security officer announced (on the 30th) that he was going to
import 0.9.7c "over the next few days".  That's complete, but there
hasn't been an announcement or FreeBSD SA release.