Re: Plan for OpenSSL in stable/10?

2017-01-12 Thread Benjamin Kaduk
On Thu, Jan 12, 2017 at 10:57:20PM +0100, Dimitry Andric wrote: > On 12 Jan 2017, at 19:02, Eric van Gyzen wrote: > > > > Has anyone had time to discuss and form a plan for OpenSSL in stable/10, > > now that 1.0.1 is end-of-life? I don't recall seeing any public > > discussion or announcement; f

Re: Plan for OpenSSL in stable/10?

2017-01-12 Thread Dimitry Andric
On 12 Jan 2017, at 19:02, Eric van Gyzen wrote: > > Has anyone had time to discuss and form a plan for OpenSSL in stable/10, > now that 1.0.1 is end-of-life? I don't recall seeing any public > discussion or announcement; forgive me if I missed it. Would updating to 1.0.2 change the API and/or A

Plan for OpenSSL in stable/10?

2017-01-12 Thread Eric van Gyzen
Has anyone had time to discuss and form a plan for OpenSSL in stable/10, now that 1.0.1 is end-of-life? I don't recall seeing any public discussion or announcement; forgive me if I missed it. Thanks, Eric ___ freebsd-security@freebsd.org mailing list

VuXML entry for openssh listed twice

2017-01-12 Thread Miroslav Lachman
There are two entries for the same problem. Is it intentional? I think it would be better to update original entry and add FreeBSD SA reference. The newer has wrong CVE name. The original was added 2016-12-25 Database fetched: Wed Jan 11 23:57:12 CET 2017 0 problem(s) in the installed packag