DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:message-id:date:from:mime-version:to
	:subject:content-type:content-transfer-encoding; q=dns; s=
	default; b=UYjYWbpyq5cXdHHQx6qY7IM871FzsLRVvpzFClber8rcx7c+PscSG
	nIBjTRAdesSQgxZJvXkkdTj1egmJXTZz8VEOhyAMlqzskLj17hYB2+93F/yzTNrH
	rezC2qEfGquXrVaJAr418DPK3upv/AdXzsiROTUXH8DBlbwnzak/+Q=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Reply-To: cygwin AT cygwin DOT com
Message-Id: <announce.539177E6.10903@cygwin.com>
Date: Fri, 06 Jun 2014 03:12:22 -0500
From: Yaakov Selkowitz <yselkowitz AT cygwin DOT com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: [ANNOUNCEMENT] [SECURITY] Updated: openssl-1.0.1h-1, libopenssl098-0.9.8za-1
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

The following packages have been updated in the Cygwin distribution:

* openssl-1.0.1h-1
* libopenssl098-0.9.8za-1 (x86 only)
* libopenssl100-1.0.1h-1
* openssl-devel-1.0.1h-1

The OpenSSL toolkit provides support for secure communications between 
machines. OpenSSL includes a certificate management tool and shared 
libraries which provide various cryptographic algorithms and protocols.

This release includes fixes for several CVEs, including CVE-2014-0224 
(SSL/TLS man-in-the-middle).  Full details on these fixes are available 
here:

https://www.openssl.org/news/secadv_20140605.txt

The legacy libopenssl098 package has also been updated for the benefit 
of those packages still dependent thereon.

-- 

Yaakov
(on behalf of Corinna)


CYGWIN-ANNOUNCE UNSUBSCRIBE INFO
================================

If you want to unsubscribe from the cygwin-announce mailing list, please 
use the automated form at:

http://cygwin.com/lists.html#subscribe-unsubscribe

If this does not work, then look at the "List-Unsubscribe: " tag in the 
email header of this message.  Send email to the address specified 
there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain DOT com AT cygwin DOT com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available 
starting at this URL.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple