[openssl-project] Forthcoming OpenSSL Releases
The OpenSSL project team would like to announce the forthcoming release of OpenSSL versions 1.1.1a, 1.1.0j and 1.0.2q. These releases will be made available on 20th November 2018 between approximately 1300-1700 UTC. These are bug-fix releases. They also contain the fixes for three LOW severity security issues CVE-2018-0735, CVE-2018-0734 and CVE-2018-5407 which were previously announced here: https://www.openssl.org/news/secadv/20181029.txt https://www.openssl.org/news/secadv/20181030.txt https://www.openssl.org/news/secadv/20181112.txt CVE-2018-0735 only affects the 1.1.0 branch. CVE-2018-0734 affects the 1.1.1, 1.1.0 and 1.0.2 branches. CVE-2018-5407 affects the 1.0.2 branch. It also affects older 1.1.0 releases before 1.1.0i. Yours The OpenSSL Project Team signature.asc Description: OpenPGP digital signature ___ openssl-project mailing list openssl-project@openssl.org https://mta.openssl.org/mailman/listinfo/openssl-project
Re: [openssl-project] Release scheduling
On Wed, Nov 14, 2018 at 01:27:17PM +, Matt Caswell wrote: > There are now no open PRs/issues with the 1.1.1a milestone so I think we > should > go ahead and do a release. The question is when? I propose next Tuesday > (20th), > with releases of 1.1.0 and 1.0.2 on the same day. It's been a while since they > last had releases so I think its worthwhile doing them at the same time. > > Thoughts? Yes, proceed to release. -- Viktor. ___ openssl-project mailing list openssl-project@openssl.org https://mta.openssl.org/mailman/listinfo/openssl-project
Re: [openssl-project] Release scheduling
+1, in particular for doing a triple release: the 1.0.2 branch has accumulated a lot of substantial bugfixes. (Personally, I am waiting on behalf of my company for Nicola's fix for the crash in FIPS mode https://github.com/openssl/openssl/commit/fff1da43be2236995cdf5ef2f3e2a51be232ba85) Matthias > -Ursprüngliche Nachricht- > Von: openssl-project Im Auftrag von > Richard Levitte > Gesendet: Mittwoch, 14. November 2018 14:43 > An: openssl-project@openssl.org > Betreff: Re: [openssl-project] Release scheduling > > Only one thought: +1 > > Matt Caswell skrev: (14 november 2018 14:27:17 CET) > >There are now no open PRs/issues with the 1.1.1a milestone so I think > >we should > >go ahead and do a release. The question is when? I propose next Tuesday > >(20th), > >with releases of 1.1.0 and 1.0.2 on the same day. It's been a while > >since they > >last had releases so I think its worthwhile doing them at the same > >time. > > > >Thoughts? > > > >Matt > >___ > >openssl-project mailing list > >openssl-project@openssl.org > >https://mta.openssl.org/mailman/listinfo/openssl-project > > -- > Skickat från min Android-enhet med K-9 Mail. Ursäkta min fåordighet. > ___ > openssl-project mailing list > openssl-project@openssl.org > https://mta.openssl.org/mailman/listinfo/openssl-project ___ openssl-project mailing list openssl-project@openssl.org https://mta.openssl.org/mailman/listinfo/openssl-project
Re: [openssl-project] Release scheduling
Only one thought: +1 Matt Caswell skrev: (14 november 2018 14:27:17 CET) >There are now no open PRs/issues with the 1.1.1a milestone so I think >we should >go ahead and do a release. The question is when? I propose next Tuesday >(20th), >with releases of 1.1.0 and 1.0.2 on the same day. It's been a while >since they >last had releases so I think its worthwhile doing them at the same >time. > >Thoughts? > >Matt >___ >openssl-project mailing list >openssl-project@openssl.org >https://mta.openssl.org/mailman/listinfo/openssl-project -- Skickat från min Android-enhet med K-9 Mail. Ursäkta min fåordighet. ___ openssl-project mailing list openssl-project@openssl.org https://mta.openssl.org/mailman/listinfo/openssl-project
[openssl-project] Release scheduling
There are now no open PRs/issues with the 1.1.1a milestone so I think we should go ahead and do a release. The question is when? I propose next Tuesday (20th), with releases of 1.1.0 and 1.0.2 on the same day. It's been a while since they last had releases so I think its worthwhile doing them at the same time. Thoughts? Matt ___ openssl-project mailing list openssl-project@openssl.org https://mta.openssl.org/mailman/listinfo/openssl-project
