--On Wednesday, May 22, 2013 1:17 PM -0400 Charles Marcus <cmar...@media-brokers.com> wrote:

On 2013-05-22 12:38 PM, Quanah Gibson-Mount <qua...@zimbra.com> wrote:
--On Wednesday, May 22, 2013 12:30 PM -0400 Charles Marcus
<cmar...@media-brokers.com> wrote:

On 2013-05-22 12:19 PM, Viktor Dukhovni <postfix-us...@dukhovni.org>
wrote:
1.0.1c has some known issues, you should use 1.0.1e.

Hmmm... generally, gentoo is very good at keeping up with security or
critical functionality issues. 1.0.1c has been stable for quite some
time. Maybe they have added patches to address whatever concerns you are
talking about...

Both 1.0.1c and 1.0.1d had *serious* problems.  Unless you can
absolutely confirm that Gentoo has applied all of the patches from
both of those releases to their build, I would strongly advise you to
roll your own 1.0.1e release.

--Quanah

Ok, but I'd prefer to check this out first and get gentoo to
update/stabilize 1.0.1e...

Any pointers/links to anything outlining said serious problems?

Thanks for the heads up...

I would read the CHANGES file shipped with OpenSSL. They didn't document the changes between 1.0.1d and 1.0.1e, but you can see the changes between 1.0.1c and 1.0.1d.

--Quanah

--

Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration

Reply via email to