openssl-0.9.8l is out but still incompatible with openconnect
David Woodhouse
dwmw2 at infradead.org
Sun Nov 8 13:01:10 EST 2009
On Sun, 2009-11-08 at 18:19 +0100, Adam Piątyszek wrote:
> Since 5th November there is a new maintenance release of openssl-0.9.8
> stable branch. It is denoted with version 0.9.8l.
It was a panic release for a protocol vulnerability. It's 0.9.8k with
only one patch -- to disable renegotiation. All the other changes which
were committed since 0.9.8k, including the Cisco DTLS compatibility, are
now destined for 0.9.8m. Or 0.9.8n, if 0.9.8m turns out to be a slightly
more well-thought-out response to the protocol problem.
--
dwmw2
More information about the openconnect-devel
mailing list