[arch-dev-public] [signoff] openssl 1.0.0.d-1
Jan Steffens
jan.steffens at gmail.com
Tue Feb 8 22:06:03 EST 2011
On Tue, Feb 8, 2011 at 9:46 PM, Pierre Schmitz <pierre at archlinux.de> wrote:
> Hi,
>
> this is a security update of openssl; please sign off.
>
> Changes between 1.0.0c and 1.0.0d [8 Feb 2011]
>
> *) Fix parsing of OCSP stapling ClientHello extension. CVE-2011-0014
> [Neel Mehta, Adam Langley, Bodo Moeller (Google)]
>
> *) Fix bug in string printing code: if *any* escaping is enabled we
> must
> escape the escape character (backslash) or the resulting string is
> ambiguous.
> [Steve Henson]
>
> Greetings,
>
> Pierre
>
> --
> Pierre Schmitz, https://users.archlinux.de/~pierre
>
Signoff both.
More information about the arch-dev-public
mailing list