I just cloned the OpenSSL git repo at
git://git.openssl.org/openssl.git. Looking at the OpenSSL_1_0_1-stable
branch, the fix for CVE-2015-3197 still isn't in the repo. The most
recent commit is:
foleyj@hobknob:~/gitsync/ossl/openssl$ git log
commit 126ac21c80967ec00f802d356462c1b83fa0f54c
Author: Richard Levitte <[email protected]>
Date: Tue Jan 19 20:35:41 2016 +0100
Fix BSD -rpath parameter
For BSD systems, Configure adds a shared_ldflags including a reference
to the Makefile variable LIBRPATH, but since it must be passed down to
Makefile.shared, care must be taken so the value of LIBRPATH doesn't
get expanded too early, or it ends up giving an empty string.
Reviewed-by: Viktor Dukhovni <[email protected]>
(cherry picked from commit c64879d3f3cc4c7f1c436a9fe3bd109847a23629)
Did someone forgot to push the commit after generating the 1.0.1r
release today?
||
_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
