Forthcoming OpenSSL release
matt at openssl.org
Wed Mar 11 17:44:40 UTC 2020
On 11/03/2020 17:42, Sam Roberts wrote:
> Will it include ONLY the CVE fix, or will it include other fixes, such
> as to the getrandom() call on some archs?
It will include all fixes currently in the 1.1.1-dev branch including
commit eee565ec4 which is the 1.1.1 equivalent of the commit you mention.
> commit 4dcb150ea30f9bbfa7946e6b39c30a86aca5ed02
> Author: Kurt Roeckx <kurt at roeckx.be>
> Date: Sat Sep 28 14:59:32 2019 +0200
> Add defines for __NR_getrandom for all Linux architectures
> Fixes: https://github.com/openssl/openssl/issues/10015
> Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
> GH: https://github.com/openssl/openssl/pull/10044
> See https://github.com/nodejs/node/pull/32002 for background.
> On Wed, Mar 11, 2020 at 8:53 AM Matt Caswell <matt at openssl.org> wrote:
>> The OpenSSL project team would like to announce the forthcoming release
>> of OpenSSL version 1.1.1e.
>> This release will be made available on Tuesday 17th March 2020 between
>> 1300-1700 UTC. This will contain one LOW severity fix for CVE-2019-1551
>> previously announced here:
>> Please see the following page for further details of severity levels:
>> The OpenSSL Project Team
More information about the openssl-users