This is the mail archive of the
cygwin@cygwin.com
mailing list for the Cygwin project.
Re: [ANNOUNCEMENT] Updated: openssl-0.9.6e-1
On Wed, Jul 31, 2002 at 09:47:55AM -0500, Kim Scarborough wrote:
> > > Shouldn't openssh, lynx, wget, etc. be recompiled against the new openssl
> > > libs?
> >
> > According to the security announcement, yes.
> >
> > This should only apply to apps which are linked statically against
> > OpenSSL, though.
>
> Well, that would be all of those, I believe.
>
> > Other than that, it's the responsibility of the maintainer of these
> > packages to do that.
>
> Are they aware that this needs to be done? This is a fairly serious security
> hole, especially in the case of openssh.
I'm the maintainer of openssh...
Other than that I *assume* that our maintainers read the announcement
of their fellow maintainers.
Corinna
--
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Developer mailto:cygwin@cygwin.com
Red Hat, Inc.
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Bug reporting: http://cygwin.com/bugs.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/