From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp-out-so.shaw.ca (smtp-out-so.shaw.ca [64.59.136.139]) by sourceware.org (Postfix) with ESMTPS id DD223384C002 for ; Sun, 30 May 2021 07:06:43 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org DD223384C002 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=SystematicSw.ab.ca Authentication-Results: sourceware.org; spf=none smtp.mailfrom=brian.inglis@systematicsw.ab.ca Received: from [192.168.1.104] ([68.147.0.90]) by shaw.ca with ESMTP id nFWzl5HXu7YjPnFX0lyJVN; Sun, 30 May 2021 01:06:42 -0600 X-Authority-Analysis: v=2.4 cv=fPVaYbWe c=1 sm=1 tr=0 ts=60b33982 a=T+ovY1NZ+FAi/xYICV7Bgg==:117 a=T+ovY1NZ+FAi/xYICV7Bgg==:17 a=IkcTkHD0fZMA:10 a=srm7gmjjAAAA:8 a=w_pzkKWiAAAA:8 a=xMbNVv_N1-6ggxGcofIA:9 a=QEXdDO2ut3YA:10 a=LYwJG3PkshbpebU8YZOc:22 a=sRI3_1zDfAgwuvI8zelB:22 Reply-To: cygwin-apps@cygwin.com To: cygwin-apps@cygwin.com References: <6da35f2f-4d40-58e4-7075-1a867ddbb6e1@SystematicSw.ab.ca> From: Brian Inglis Organization: Systematic Software Subject: Re: openssl needs updated Message-ID: Date: Sun, 30 May 2021 01:06:41 -0600 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.10.2 MIME-Version: 1.0 In-Reply-To: <6da35f2f-4d40-58e4-7075-1a867ddbb6e1@SystematicSw.ab.ca> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-CA Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfGXoFbHNtUGWK+fbWnUMgX+Nx3CRiE7WXEzEqzTpoG3zPphbFnHMPXXD4OMmaGJkDy8XOuu+jMHbzJrIewemPNltJYwe46u2RsvxZarGnBIiHqAHiaqv zH04NsxRBygopim5wEykWnYbsxCaaGVfO+PYxBDYufiYB/4kFCz5FNz/kepruM4qTHhrI4e+VUcRn2/O8yi4v14EHGPyWlJmMmY= X-Spam-Status: No, score=-3488.3 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS, KAM_LAZY_DOMAIN_SECURITY, NICE_REPLY_A, RCVD_IN_BARRACUDACENTRAL, RCVD_IN_DNSWL_LOW, SPF_HELO_NONE, SPF_NONE, TXREP autolearn=no autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: cygwin-apps@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Cygwin package maintainer discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 May 2021 07:06:46 -0000 On 2021-05-28 11:13, Brian Inglis wrote: > openssl/libssl has not been updated since 1.1.f two years ago and now > has four high sev CVEs outstanding in upstream 1.1.1k: two last year, > two this year. > > If maintainer is short of time, I may be able to co-maintain? Successful builds and tests of 1.1.1k x86/_64 with selected patches from Fedora main and minimal changes from current 1.1.1f and my last 1.1.1h: https://ci.appveyor.com/project/cygwin/scallywag/builds/39377213 pushed to playground with locally rebased patch for sha256 default instead of sha1: https://cygwin.com/git-cygwin-packages/?p=git/cygwin-packages/openssl.git;hb=refs/heads/playground;f=openssl.cygport -- Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada This email may be disturbing to some readers as it contains too much technical detail. Reader discretion is advised. [Data in binary units and prefixes, physical quantities in SI.]