OpenSSL marked deprecated?

Billy Newsom billy at nlcc.us
Thu Jan 14 23:55:25 UTC 2010


Why is the OpenSSL port marked deprecated? No security issue, but the port 
builds... no fallback to a safe alternative, no known fix? Does the security 
team know?

===>  Cleaning for openssl-0.9.8l_1
===>  openssl-0.9.8l_1 is marked as broken: coredumps on i386 and amd64.
*** Error code 1

Maybe someone should explain this in a way we can understand? The port 
maintainer or "dinoex" is responsible....
dinoex at FreeBSD.org

 From the Makefile for the port:

# $FreeBSD: ports/security/openssl/Makefile,v 1.161 2010/01/12 15:43:52 dinoex 
Exp $

BROKEN=                coredumps on i386 and amd64
DEPRECATED=    has unfixed vulnerabilities
EXPIRATION_DATE=2010-01-12

Where have there been coredumps? Says who? Where? Why? How? When? Which 
version? Which OS?

Billy


More information about the freebsd-security mailing list