From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from 93-97-173-237.zone5.bethere.co.uk ([93.97.173.237] helo=tim.rpsys.net) by linuxtogo.org with esmtp (Exim 4.72) (envelope-from ) id 1SAMJQ-0008El-24 for openembedded-core@lists.openembedded.org; Wed, 21 Mar 2012 15:14:52 +0100 Received: from localhost (localhost [127.0.0.1]) by tim.rpsys.net (8.13.6/8.13.8) with ESMTP id q2LE5vM5002462 for ; Wed, 21 Mar 2012 14:05:57 GMT Received: from tim.rpsys.net ([127.0.0.1]) by localhost (tim.rpsys.net [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 02161-05 for ; Wed, 21 Mar 2012 14:05:53 +0000 (GMT) Received: from [192.168.3.10] ([192.168.3.10]) (authenticated bits=0) by tim.rpsys.net (8.13.6/8.13.8) with ESMTP id q2LE5nNS002456 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 21 Mar 2012 14:05:50 GMT Message-ID: <1332338752.9740.156.camel@ted> From: Richard Purdie To: Patches and discussions about the oe-core layer Date: Wed, 21 Mar 2012 14:05:52 +0000 In-Reply-To: References: X-Mailer: Evolution 3.2.2- Mime-Version: 1.0 X-Virus-Scanned: amavisd-new at rpsys.net Subject: Re: [PATCH 0/1] openssl security upgrade X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.11 Precedence: list Reply-To: Patches and discussions about the oe-core layer List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Mar 2012 14:14:52 -0000 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Tue, 2012-03-20 at 11:10 -0700, Scott Garman wrote: > This upgrade to the openssl recipe addresses a security vulnerability, > CVE-2012-0884. I would like to ensure it gets included in our upcoming > 1.2 release. > > This upgrade has been build-tested on all 5 of our qemu architectures, > and I have inspected the image and package output to ensure there were > no significant differences between the output of this recipe upgrade > and the last version of openssl we were using. Merged to master, thanks. Richard