All of lore.kernel.org
 help / color / mirror / Atom feed
* meta-fsl-ppc uses Openssl 1.0.1g in master
@ 2014-12-16 13:58 ` Sona Sarmadi
  0 siblings, 0 replies; 15+ messages in thread
From: Sona Sarmadi @ 2014-12-16 13:58 UTC (permalink / raw)
  To: meta-freescale@yoctoproject.org, zhenhua.luo@freescale.com,
	Otavio Salvador
  Cc: Paul Eggleton (paul.eggleton@linux.intel.com),
	yocto@yoctoproject.org


[-- Attachment #1.1: Type: text/plain, Size: 1061 bytes --]

Hi guys,

Is there any specific reason why openssl 1.0.1g is used by default? Yocto is using 1.0.1j in master to address some security issues (SSLv3 protocol vulnerability). If there is a strong reason to stay on 1.0.1g, I suggest we apply sslv3 patches  otherwise we just remove this line.

https://git.yoctoproject.org/cgit/cgit.cgi/meta-fsl-ppc/tree/conf/machine/include/qoriq-default-versions.inc

PREFERRED_VERSION_openssl = "1.0.1g"

Cheers
Sona

Sona Sarmadi
Software Engineer/Security Responsible for Enea Linux
Enea
Jan Stenbecks torg 17,
Box 1033, SE-164 21 Kista, Sweden
Direct: +46 8 5071  4475
Mobile: +46 70 971 4475
sona.sarmadi@enea.com<mailto:sona.sarmadi@enea.com>
www.enea.com<http://www.enea.com/>

 [cid:image002.jpg@01CFDC00.44AA35B0]

This message, including attachments, is CONFIDENTIAL. It may also be privileged or otherwise protected by law. If you received this email by mistake please let us know by reply and then delete it from your system; you should not copy it or disclose its contents to anyone.




[-- Attachment #1.2: Type: text/html, Size: 2668 bytes --]

[-- Attachment #2: Picture (Device Independent Bitmap) 1.jpg --]
[-- Type: image/jpeg, Size: 1639 bytes --]

^ permalink raw reply	[flat|nested] 15+ messages in thread

end of thread, other threads:[~2014-12-17  2:52 UTC | newest]

Thread overview: 15+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-12-16 13:58 meta-fsl-ppc uses Openssl 1.0.1g in master Sona Sarmadi
2014-12-16 13:58 ` Sona Sarmadi
2014-12-16 14:01 ` Gary Thomas
2014-12-16 14:07 ` Otavio Salvador
2014-12-16 14:07   ` Otavio Salvador
2014-12-16 14:25   ` [meta-freescale] " VIVEK VERMA
2014-12-16 14:25     ` VIVEK VERMA
2014-12-16 15:08   ` Sona Sarmadi
2014-12-16 15:08     ` Sona Sarmadi
2014-12-16 15:21     ` VIVEK VERMA
2014-12-16 15:21       ` VIVEK VERMA
2014-12-16 16:06       ` [meta-freescale] " Fabio Estevam
2014-12-16 16:06         ` Fabio Estevam
2014-12-17  2:51         ` [meta-freescale] " zhenhua.luo
2014-12-17  2:51           ` zhenhua.luo

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.