Re: [arch-dev-public] [signoff] openssl 1.0.0.c-1

On 12/02/2010 10:02 PM, Pierre Schmitz wrote:

Hi all,

here is an openssl security update which fixes CVE-2010-4180. It might be possible for a client to downgrade the used cipher to a weaker one. For more details see http://openssl.org/news/secadv_20101202.txt

Please sign off, so we can move this to core soon.

Greetings,

Pierre

signoff x86_64 -- Ionuț