Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Date: Wed, 31 Jul 2002 11:42:40 +0200 From: Corinna Vinschen To: cygwin AT cygwin DOT com Subject: Re: [ANNOUNCEMENT] Updated: openssl-0.9.6e-1 Message-ID: <20020731114240.E3921@cygbert.vinschen.de> Reply-To: cygwin AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com References: <20020730160945 DOT EC06B1B5E2 AT redhat DOT com> <01d501c23805$2cdbcef0$23638780 AT uchicago DOT edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <01d501c23805$2cdbcef0$23638780@uchicago.edu> User-Agent: Mutt/1.3.22.1i On Tue, Jul 30, 2002 at 03:10:39PM -0500, Kim Scarborough wrote: > > I've updated the version of OpenSSL to 0.9.6e-1. > > > > This is a official security update. The security advisory has been > > send out today. Note that I'm sending this to keep you informed as > > soon as possible. The new version is probably not immediately available > > on the mirrors. Stay calm. > > Shouldn't openssh, lynx, wget, etc. be recompiled against the new openssl > libs? According to the security announcement, yes. This should only apply to apps which are linked statically against OpenSSL, though. Other than that, it's the responsibility of the maintainer of these packages to do that. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Developer mailto:cygwin AT cygwin DOT com Red Hat, Inc. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/