From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 35552 invoked by alias); 4 May 2016 18:02:38 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 35468 invoked by uid 89); 4 May 2016 18:02:38 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-HELO: localhost.localdomain Received: from localhost (HELO localhost.localdomain) (127.0.0.1) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Wed, 04 May 2016 18:02:38 +0000 Reply-To: cygwin@cygwin.com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-0.9 required=5.0 tests=BAYES_00,KAM_LAZY_DOMAIN_SECURITY,SPF_HELO_PASS autolearn=no version=3.3.2 spammy=drown, H*m:prod, H*F:U*yselkowitz, H*MI:int Message-Id: From: Yaakov Selkowitz To: cygwin@cygwin.com Date: Wed, 04 May 2016 18:02:00 -0000 Subject: [ANNOUNCEMENT] openssl 1.0.2h-1 X-IsSubscribed: yes X-SW-Source: 2016-05/txt/msg00050.txt.bz2 The following packages have been uploaded to the Cygwin distribution: * openssl-1.0.2h-1 * openssl-devel-1.0.2h-1 * openssl-perl-1.0.2h-1 * libopenssl100-1.0.2h-1 * mingw64-i686-openssl-1.0.2h-1 * mingw64-x86_64-openssl-1.0.2h-1 The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This is an update to the latest upstream release, which includes fixes for CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, and CVE-2016-2176: https://www.openssl.org/news/secadv/20160503.txt Support for the SSLv2 protocol, which is vulnerable to DROWN, has been completely removed in this release, while maintaining ABI compatibility (which was not possible OOTB with 1.0.2g). -- Yaakov -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple