From owner-freebsd-ports@FreeBSD.ORG Fri Jun 12 00:48:22 2015 Return-Path: Delivered-To: freebsd-ports@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 7ACF7DA8; Fri, 12 Jun 2015 00:48:22 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from anubis.delphij.net (anubis.delphij.net [64.62.153.212]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "anubis.delphij.net", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 351911FB4; Fri, 12 Jun 2015 00:48:19 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from zeta.ixsystems.com (unknown [12.229.62.2]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by anubis.delphij.net (Postfix) with ESMTPSA id 7867A18B77; Thu, 11 Jun 2015 17:48:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delphij.net; s=anubis; t=1434070092; x=1434084492; bh=UpRl6nDLqyJ99Adau2u5DbSLUepo4+cOAiipnXEpBDU=; h=Date:From:Reply-To:To:CC:Subject:References:In-Reply-To; b=f6S3eeobuXTzEt3xEnJMpnXo6yfZHyPLzmF2dOjubPY81XvsYWpRf+ny5L+jr4yfT KuiNsz+9k8RZDi+CMprVReel+79X05rnoZcyooWwpsaBk9P/5YnIK0iLjU/cmKoBgY 6LakH2lYls1jVW3H95uk1UhTKJKIepPx8BFzgnzY= Message-ID: <557A2C4C.8080006@delphij.net> Date: Thu, 11 Jun 2015 17:48:12 -0700 From: Xin Li Reply-To: d@delphij.net Organization: The FreeBSD Project MIME-Version: 1.0 To: Michelle Sullivan , marquis@roble.com CC: secteam@FreeBSD.org, freebsd-ports@freebsd.org, "freebsd-security@freebsd.org" Subject: Re: OpenSSL Security Advisory [11 Jun 2015] References: <20150611183848.2D328F4C@hub.freebsd.org> <557A1B16.3060606@sorbs.net> In-Reply-To: <557A1B16.3060606@sorbs.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jun 2015 00:48:22 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 06/11/15 16:34, Michelle Sullivan wrote: > Roger Marquis wrote: >> The ports-secteam knows about this but posting here in case >> someone wants to update ahead of the port, from this morning's >> Hackernews: >> >> >> > > *wonders how this will affect 8.x & 9.x* (seems to be no fix for > 0.9.8 which 8.4 and 9.3 has 0.9.8zd in base - i expect 8.4 to get > ignored as it EoLs on Jun 30, 2015, but 9.3 EoLs on Dec 31, 2016) Well, by "supported" we mean supported at least up until the EoL date and they will never be dropped before that date. Actually we are working on the update right now (first round of tests done, patches going to build and writing advisories, etc.) so it would be out sometime today or tomorrow. Additionally we are considering issuing another EN for all supported releases at a later time to do a full upgrade after the current batch of -STABLE OpenSSL upgrades gets enough exposure. Cheers, - -- Xin LI https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.1.4 (FreeBSD) iQIcBAEBCgAGBQJVeixMAAoJEJW2GBstM+nslxIP/jh1wWjo6KSqhjwdkoKIfqix FHR+xT+FduFjMvku84TaOIBI+EgyBetnOIT9Lovg8BhUvFqGQh+bN5KleRiUjpPf vees9pvZ/r0GmpJfDbKX3kbTc+QfumO7W2yu8xaPeL4UJIo7OnzUmmcfjbWHvfLk W7MaLUA3NR1I1H6YBNCydaPOafDqk1SjUuZTN4jrgSWPAeRA8TWKnx0Cd62VN3u/ 0a0pMDFJmEMZodKcfsleZA2TrtSX4SC8xqQVxB8Rg5+YKahb1dOJC3+im1DqN9tM 4xuDvDLzEw/ilWIVIa0EyIxwW+8eIhKFgSr7a6hj+anBxkFYzsMClRdzJc7snQtQ QfscsxXbH4rx2zW1IvT+UrLUUlpdRjp77BR1nSTZ7voKRSQf46bTWduaZfK2SIe9 SUxMazajJtzV6ovgRGQWOhBhAD3hU95Yt4lWAW0HOcf40Wzp/ZKslpA5pP7a00KS 101eQ5AaAax44GcN5sY/dzvbmw9NLtBK4r9w2e6GsDUYiOXEPRLr3G4NExU2J85m Ke2ktTPKjc2mhq9P4T2hjgqHrJB36SBr7Nu7FXAVHDTG7wQVO+a5CUpq6toA7c4f AKhg+3pb8A8V35i4rEbMEo+Grdj0nMiGXafYEBRGYo+YKKmboxY9PYnary2wOpz5 J5Gm6w/kfxKUHfFjx7FJ =oJDs -----END PGP SIGNATURE-----