OpenSSL import [was: cvs commit: src/sys/amd64/amd64 mp_machdep.c src/sys/i386/i386 mp_machdep.c]

Simon L. Nielsen simon at
Sun Nov 11 02:37:14 PST 2007

On 2007.11.09 11:34:01 -0800, Xin LI wrote:

> > [1] OpenSSL 0.9.7h, change 10/2005 by Matthew D. Wood of Intel,
> >
> > [2] OpenSSL 0.9.8f, change 10/2007 by Matthew D. Wood of Intel,
> >
> Sorry for hijacking this thread, are we going to import a new OpenSSL
> release?  Sounds like we have to do a full package build if we want to
> do that...

For both RELENG_6 and RELENG_7, not unless somebody comes up with very
strong arguments to do so.  The risk of blowing things up this late in
the release cycle is just to great.

The latest 0.9.8 security issue was fixed with patch rather than
complete new import to avoid disruptions to the 7.x release process.

My current plan is to import the new OpenSSL 0.9.8 release into HEAD
after 7.0 has been released, and them MFC to RELENG_7 if possble

Simon L. Nielsen
Hat: OpenSSL maintainer/janitor

More information about the cvs-src mailing list