[openssl-dev] 1.0.1r release not committed to git repo

[John Foley]

I just cloned the OpenSSL git repo at 
git://git.openssl.org/openssl.git.  Looking at the OpenSSL_1_0_1-stable 
branch, the fix for CVE-2015-3197 still isn't in the repo.  The most 
recent commit is:

foleyj at hobknob:~/gitsync/ossl/openssl$ git log
commit 126ac21c80967ec00f802d356462c1b83fa0f54c
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Jan 19 20:35:41 2016 +0100

     Fix BSD -rpath parameter

     For BSD systems, Configure adds a shared_ldflags including a reference
     to the Makefile variable LIBRPATH, but since it must be passed down to
     Makefile.shared, care must be taken so the value of LIBRPATH doesn't
     get expanded too early, or it ends up giving an empty string.

     Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
     (cherry picked from commit c64879d3f3cc4c7f1c436a9fe3bd109847a23629)

Did someone forgot to push the commit after generating the 1.0.1r 
release today?


||




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160128/31ad429d/attachment.html>