From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 24643 invoked by alias); 6 Jun 2014 08:13:01 -0000 Mailing-List: contact cygwin-announce-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-announce-owner@cygwin.com Reply-To: The Cygwin Mailing List Mail-Followup-To: cygwin-announce@cygwin.com Received: (qmail 24402 invoked by uid 89); 6 Jun 2014 08:12:25 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=1.7 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS,UNSUBSCRIBE_BODY autolearn=no version=3.3.2 X-HELO: mail-ie0-f180.google.com X-Received: by 10.50.43.225 with SMTP id z1mr3066162igl.24.1402042341458; Fri, 06 Jun 2014 01:12:21 -0700 (PDT) Message-ID: <539177E6.10903@cygwin.com> Date: Fri, 06 Jun 2014 08:13:00 -0000 From: Yaakov Selkowitz User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: cygwin-announce@cygwin.com Subject: [SECURITY] Updated: openssl-1.0.1h-1, libopenssl098-0.9.8za-1 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-SW-Source: 2014-06/txt/msg00018.txt.bz2 The following packages have been updated in the Cygwin distribution: * openssl-1.0.1h-1 * libopenssl098-0.9.8za-1 (x86 only) * libopenssl100-1.0.1h-1 * openssl-devel-1.0.1h-1 The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This release includes fixes for several CVEs, including CVE-2014-0224 (SSL/TLS man-in-the-middle). Full details on these fixes are available here: https://www.openssl.org/news/secadv_20140605.txt The legacy libopenssl098 package has also been updated for the benefit of those packages still dependent thereon. -- Yaakov (on behalf of Corinna) CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ================================ If you want to unsubscribe from the cygwin-announce mailing list, please use the automated form at: http://cygwin.com/lists.html#subscribe-unsubscribe If this does not work, then look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain.com@cygwin.com If you need more information on unsubscribing, start reading here: http://sourceware.org/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL.