On 24.11.14 21:00, Michael Ströder wrote: > Alexander Graf wrote: >> On 20.11.14 18:14, Michael Ströder wrote: >>> HI! >>> >>> Frankly I'm lost in all the ARM-related repo URLs... >>> >>> Currently I'm using on my rasperry pi: >>> >>> http://download.opensuse.org/ports/armv6hl/factory/repo/oss/ >>> >>> Does this repo receive all the openSUSE updates? >> >> That's the latest and greatest Factory repository, so yes, it should >> receive updates. > > On the Rasperry Pi: > > # rpm -q openssl > openssl-1.0.1i-1.1.armv6hl > > on my openSUSE 13.2 x86_64: > > # rpm -q openssl > openssl-1.0.1j-2.10.1.x86_64 > > AFAICS the latter is newer. So the latest OpenSSL updates are not available in > armv6hl/factory. > > These changes are missing in armv6hl/factory (see rpm -q --changelog openssl): > > * Thu Nov 13 2014 [email protected] > - openssl-1.0.1i-noec2m-fix.patch: Fix handshake failures when connecting > to some openssl servers. With no-ec2m, openssl advertises EC curves > it doesn't support, leading to handshake errors with some servers > (bnc#905037). > > * Fri Nov 07 2014 [email protected] > - openSUSE < 11.2 doesn't have accept4() > > * Tue Oct 21 2014 [email protected] > - openSSL 1.0.1j > * Fix SRTP Memory Leak (CVE-2014-3513) > * Session Ticket Memory Leak (CVE-2014-3567) > * Add SSL 3.0 Fallback protection (TLS_FALLBACK_SCSV) > * Build option no-ssl3 is incomplete (CVE-2014-3568)
I don't think this is ARM related - the x86 version is also at 1.0.1i: https://build.opensuse.org/package/binaries/openSUSE:Factory/openssl?repository=standard Alex -- To unsubscribe, e-mail: [email protected] To contact the owner, e-mail: [email protected]
