Re: [openssl-announce] Forthcoming OpenSSL releases

Re: [openssl-announce] Forthcoming OpenSSL releases

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1813 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hello,

so as you can see, we can expect a security issue in OpenSSL which will be made
public next Tuesday. The current release branch and next will be affected by
what ever this problem is.

We might (or might not) need to roll out an emergency Core Update before we can
release Core Update 120. So we will wait with uploading that into testing until
we know how to proceed.

Best,
- -Michael

On Tue, 2018-03-20 at 17:18 +0000, Matt Caswell wrote:
> Forthcoming OpenSSL releases
> ============================
> 
> The OpenSSL project team would like to announce the forthcoming release
> of OpenSSL versions 1.1.0h and 1.0.2o.
> 
> These releases will be made available on 27th March 2018 between
> approximately 1300-1700 UTC.
> 
> These are security-fix releases. The highest severity issue fixed in
> these releases is MODERATE.
> 
> Yours
> 
> The OpenSSL Project Team
> 
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE5/rW5l3GGe2ypktxgHnw/2+QCQcFAlqxcecACgkQgHnw/2+Q
CQfiZRAAqRLmjco4V2rxJTjNaYRM7o+YbHG9gvW5xjHdMAJURDyDaxc+DTkMJyoq
woLrf86RDylKT4SdilGDS+3AXtZuy3H/qRsKr+HjNgpgdP9Hh+bzuu9buml4n3F9
wvxOdmOuAhQKWJpwJIifuqAMjJrI6wzUhAsR13ttXX+YHr6B+dcQ0r1zZI5xmolc
YKFVF0BQBtABXnc4mjqeiQcPm1NbbIoHF0kuqD43ljz5I0C5Mc9E3LS/VSeQgQ8M
tw9BvZNyA+ul3GZ3pL98L40ORPcL3UJ6sC0YmCpVkZ6I1F1WHXs+2DKqiKOifi5x
PPBK9Q23K1gbD9fAkdvzlbjeQFOVb3eCglmZ4Jc07oeC398qXA85EOeCFqnu1fhQ
2sRa4HXT4llJS3m0HddvdHKCz4HEpc8YwQ+hGkH9t0eCVqul1u/wNujMtoZSyWqv
9/IQjxaDGVzL5kG+UqrxYIYllQ0qqfcwgx9uDZy/3u3JYdnQ+pVIMFI+fZx29F2T
gSV3McuSHBBtwZvgBBVNHCv/djNbwmhv69RBZQWQuriqxmTCTvgFMRltoDecFv8A
MkTfGwZNWaP5NjdYiV5O8fE4N4gir6ISCZUqDpe3NGoq/tE6ziPKOupJvSNjWq/a
Vt1YOx1O2uqlSStEqjtykTdS2uZ0G58kML26BY/wlDNL+1yDd/A=
=wVcZ
-----END PGP SIGNATURE-----

Re: [openssl-announce] Forthcoming OpenSSL releases

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 2073 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hello,

so since this isn't too bad for us, we are just going to continue with releasing
C120 as scheduled.

Best,
- -Michael

On Tue, 2018-03-20 at 20:41 +0000, Michael Tremer wrote:
> Hello,
> 
> so as you can see, we can expect a security issue in OpenSSL which will be
> made
> public next Tuesday. The current release branch and next will be affected by
> what ever this problem is.
> 
> We might (or might not) need to roll out an emergency Core Update before we
> can
> release Core Update 120. So we will wait with uploading that into testing
> until
> we know how to proceed.
> 
> Best,
> -Michael
> 
> On Tue, 2018-03-20 at 17:18 +0000, Matt Caswell wrote:
> > Forthcoming OpenSSL releases
> > ============================
> > 
> > The OpenSSL project team would like to announce the forthcoming release
> > of OpenSSL versions 1.1.0h and 1.0.2o.
> > 
> > These releases will be made available on 27th March 2018 between
> > approximately 1300-1700 UTC.
> > 
> > These are security-fix releases. The highest severity issue fixed in
> > these releases is MODERATE.
> > 
> > Yours
> > 
> > The OpenSSL Project Team
> > 
-----BEGIN PGP SIGNATURE-----
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=bcU/
-----END PGP SIGNATURE-----