[yocto-security] [oss-security] OpenSSL Sec Adv 20150611

[Sona Sarmadi]

https://www.openssl.org/news/openssl-1.0.1-notes.html

Major changes between OpenSSL 1.0.1n and OpenSSL 1.0.1o [under development]

    Fix HMAC ABI incompatibility

//Sona

> -----Original Message-----
> From: Sona Sarmadi
> Sent: den 12 juni 2015 08:09
> To: yocto-security at yoctoproject.org
> Subject: FW: [oss-security] OpenSSL Sec Adv 20150611
> 
> 
> 
> New OpesSSL versions might break ABI compatibility:
> 
> > On Thu, Jun 11, 2015 at 05:11:13PM +0000, mancha wrote:
> > > FYI, today OpenSSL released new versions (1.0.2b, 1.0.1n, 1.0.0s, and
> > > 0.9.8zg) to address several security issues [1].
> > >
> > > --mancha
> > >
> > > [1] http://openssl.org/news/secadv_20150611.txt
> >
> > Heads up to vendors pushing upgrades; there might be some ABI
> breakage:
> > http://marc.info/?l=openssl-dev&m=143407129721271&w=2.
> 
> //Sona