openssl 1.0.2h-1

Yaakov Selkowitz yselkowitz@cygwin.com
Wed May 4 18:02:00 GMT 2016


The following packages have been uploaded to the Cygwin distribution:

* openssl-1.0.2h-1
* openssl-devel-1.0.2h-1
* openssl-perl-1.0.2h-1
* libopenssl100-1.0.2h-1
* mingw64-i686-openssl-1.0.2h-1
* mingw64-x86_64-openssl-1.0.2h-1

The OpenSSL toolkit provides support for secure communications between 
machines. OpenSSL includes a certificate management tool and shared 
libraries which provide various cryptographic algorithms and protocols.

This is an update to the latest upstream release, which includes fixes for 
CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, and CVE-2016-2176:

https://www.openssl.org/news/secadv/20160503.txt

Support for the SSLv2 protocol, which is vulnerable to DROWN, has been 
completely removed in this release, while maintaining ABI compatibility 
(which was not possible OOTB with 1.0.2g).

--
Yaakov



More information about the Cygwin-announce mailing list