Re: [arch-dev-public] OpenSSL 1.1.0

2017-02-11 Thread Pierre Schmitz
On 30.01.2017 14:09, Giancarlo Razzolini wrote: Em janeiro 30, 2017 1:05 Allan McRae escreveu: Please cite one example. Every CVE I have seen that is of at least high severity has affected both. There have been some low severity ones only affecting openssl. Even worse, the fix time for

Re: [arch-dev-public] OpenSSL 1.1.0

2017-02-11 Thread Pierre Schmitz
On 29.01.2017 21:49, Pierre Schmitz wrote: Hi, I'd like to propose a migration to OpenSSL 1.1. The update comes with ABI and API changes. Every linked packages needs to be rebuild. There will likely be broken packages. Once the protobuf* rebuild has left the [staging] repo I would like to