看板FB_security
標 題Re: OpenSSL static analysis, was: De Raadt + FBSD + OpenSSH + hole?
發信站NCTU CS FreeBSD Server (Thu May 1 19:54:24 2014)
轉信站ptt!csnews.cs.nctu!news.cednctu!FreeBSD.cs.nctu!.POSTED!freebsd.org!ow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