From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 25158 invoked by alias); 6 Jun 2014 08:13:05 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 25055 invoked by uid 89); 6 Jun 2014 08:13:04 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-HELO: localhost.localdomain Received: from localhost (HELO localhost.localdomain) (127.0.0.1) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Fri, 06 Jun 2014 08:13:04 +0000 Reply-To: cygwin@cygwin.com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=1.7 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS,UNSUBSCRIBE_BODY autolearn=no version=3.3.2 X-Received: by 10.50.43.225 with SMTP id z1mr3066162igl.24.1402042341458; Fri, 06 Jun 2014 01:12:21 -0700 (PDT) Message-Id: Date: Fri, 06 Jun 2014 08:13:00 -0000 From: Yaakov Selkowitz User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: cygwin@cygwin.com Subject: [ANNOUNCEMENT] [SECURITY] Updated: openssl-1.0.1h-1, libopenssl098-0.9.8za-1 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-SW-Source: 2014-06/txt/msg00103.txt.bz2 The following packages have been updated in the Cygwin distribution: * openssl-1.0.1h-1 * libopenssl098-0.9.8za-1 (x86 only) * libopenssl100-1.0.1h-1 * openssl-devel-1.0.1h-1 The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This release includes fixes for several CVEs, including CVE-2014-0224 (SSL/TLS man-in-the-middle). Full details on these fixes are available here: https://www.openssl.org/news/secadv_20140605.txt The legacy libopenssl098 package has also been updated for the benefit of those packages still dependent thereon. -- Yaakov (on behalf of Corinna) CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ================================ If you want to unsubscribe from the cygwin-announce mailing list, please use the automated form at: http://cygwin.com/lists.html#subscribe-unsubscribe If this does not work, then look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain.com@cygwin.com If you need more information on unsubscribing, start reading here: http://sourceware.org/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple