[arch-dev-public] [signoff] openssl 1.0.0.d-1

Allan McRae allan at archlinux.org
Tue Feb 8 23:19:24 EST 2011


On 09/02/11 13:06, Jan Steffens wrote:
> On Tue, Feb 8, 2011 at 9:46 PM, Pierre Schmitz<pierre at archlinux.de>  wrote:
>> Hi,
>>
>> this is a security update of openssl; please sign off.
>>
>>   Changes between 1.0.0c and 1.0.0d [8 Feb 2011]
>>
>>   *) Fix parsing of OCSP stapling ClientHello extension. CVE-2011-0014
>>      [Neel Mehta, Adam Langley, Bodo Moeller (Google)]
>>
>>   *) Fix bug in string printing code: if *any* escaping is enabled we
>> must
>>      escape the escape character (backslash) or the resulting string is
>>      ambiguous.
>>      [Steve Henson]
>>
>> Greetings,
>>
>> Pierre
>>
>> --
>> Pierre Schmitz, https://users.archlinux.de/~pierre
>>
>
> Signoff both.
>

Signoff i686,
Allan



More information about the arch-dev-public mailing list