Re: [gentoo-user] Openssl 1.0.1c/d have serious issues?

[Alex]

Hi,

On Wed, May 22, 2013 at 01:49:47PM -0400, Tanstaafl wrote:
> On 2013-05-22 12:38 PM, Quanah Gibson-Mount <quanah@××××××.com> wrote:
>  > Both 1.0.1c and 1.0.1d had *serious* problems.
>
and what are these *serious* problems? Are there any links, CVEs?
From the ebuild, these patches are applied to the vanilla sources:

        # Make sure we only ever touch Makefile.org and avoid patching a file
                epatch "${FILESDIR}"/${PN}-1.0.0a-ldflags.patch #327421
                epatch "${FILESDIR}"/${PN}-1.0.0d-fbsd-amd64.patch #363089
                epatch "${FILESDIR}"/${PN}-1.0.0d-windres.patch #373743
                epatch "${FILESDIR}"/${PN}-1.0.0h-pkg-config.patch
                epatch "${FILESDIR}"/${PN}-1.0.1-parallel-build.patch
                epatch "${FILESDIR}"/${PN}-1.0.1-x32.patch
                epatch "${FILESDIR}"/${PN}-1.0.1-ipv6.patch
                epatch_user #332661

-- 
regards
 alex