Are these changes outside of the "FIPS Object Module" ? We want to upgrade, but need to be running in FIPS mode.
> -----Original Message----- > From: [email protected] [mailto:owner-openssl- > [email protected]] On Behalf Of OpenSSL > Sent: Thursday, December 02, 2010 2:18 PM > To: [email protected]; openssl- > [email protected]; [email protected] > Subject: OpenSSL 0.9.8q released > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > OpenSSL version 0.9.8q released > =============================== > > OpenSSL - The Open Source toolkit for SSL/TLS > http://www.openssl.org/ > > The OpenSSL project team is pleased to announce the release of > version 0.9.8q of our open source toolkit for SSL/TLS. This new > OpenSSL version is a security and bugfix release. For a complete > list of changes, please see > > http://www.openssl.org/source/exp/CHANGES. > > The most significant changes are: > > o Fix for security issue CVE-2010-4180 > o Fix for CVE-2010-4252 > > We consider OpenSSL 0.9.8q to be the best version of OpenSSL > available and we strongly recommend that users of older versions > upgrade as soon as possible. OpenSSL 0.9.8q is available for > download via HTTP and FTP from the following master locations (you > can find the various FTP mirrors under > http://www.openssl.org/source/mirror.html): > > * http://www.openssl.org/source/ > * ftp://ftp.openssl.org/source/ > > The distribution file name is: > > o openssl-0.9.8q.tar.gz > Size: 3773961 > MD5 checksum: 80e67291bec9230f03eefb5cfe858998 > SHA1 checksum: 12b6859698ca299fa0cba594686c25d5c01e410d > > The checksums were calculated using the following commands: > > openssl md5 openssl-0.9.*.tar.gz > openssl sha1 openssl-0.9.*.tar.gz > > Yours, > > The OpenSSL Project Team... > > Mark J. Cox Nils Larsch Ulf Möller > Ralf S. Engelschall Ben Laurie Andy Polyakov > Dr. Stephen Henson Richard Levitte Geoff Thorpe > Lutz Jänicke Bodo Möller > > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.10 (GNU/Linux) > > iQEVAwUBTPfvTKLSm3vylcdZAQLHAwf+JYhEMSrAuzj4Eq+cBk1tF0Hmx42/5c > MC > PlatQwPSOLUKe0pQ1+f06MxRJEjWp/AHtd+YozAIezmjPGPdr+oawSxpb0qS > MFlk > /RYHjndKcroiwoPKdXXBN3U+lMlV4HGwAsndx8fdo40pNKtWZvqIjKGt33Nv+ > uvO > KnXFpObbOeh40GzLCEL756B4aGI652L5q3WmeGOty0R7YlIvK5bBZx6A8jstdAh > w > O04qe2nZECfD+2upEAnDFTBKPTq6WrsI+UwOx9SOYYKdtb97oANhxB3hlxPgT > k4b > 2EEuE4SZK0s4ih7jj05ZlNUbrEd1ZDXXPVFIA+mSW1TDu0Gsma/nSQ== > =751Y > -----END PGP SIGNATURE----- > __________________________________________________________ > ____________ > OpenSSL Project http://www.openssl.org > Development Mailing List [email protected] > Automated List Manager [email protected] :��I"Ϯ��r�m���� (����Z+�7�zZ)���1���x ��h����W^��^��%�� ��&jם.+-1�ځ��j:+v�������h�
