openssl 1.0.2h-1
Yaakov Selkowitz
yselkowitz@cygwin.com
Wed May 4 18:02:00 GMT 2016
The following packages have been uploaded to the Cygwin distribution:
* openssl-1.0.2h-1
* openssl-devel-1.0.2h-1
* openssl-perl-1.0.2h-1
* libopenssl100-1.0.2h-1
* mingw64-i686-openssl-1.0.2h-1
* mingw64-x86_64-openssl-1.0.2h-1
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and protocols.
This is an update to the latest upstream release, which includes fixes for
CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, and CVE-2016-2176:
https://www.openssl.org/news/secadv/20160503.txt
Support for the SSLv2 protocol, which is vulnerable to DROWN, has been
completely removed in this release, while maintaining ABI compatibility
(which was not possible OOTB with 1.0.2g).
--
Yaakov
More information about the Cygwin-announce
mailing list