openssl-0.9.8l is out but still incompatible with openconnect

David Woodhouse dwmw2 at infradead.org
Sun Nov 8 13:01:10 EST 2009


On Sun, 2009-11-08 at 18:19 +0100, Adam Piątyszek wrote:
> Since 5th November there is a new maintenance release of openssl-0.9.8 
> stable branch. It is denoted with version 0.9.8l.

It was a panic release for a protocol vulnerability. It's 0.9.8k with
only one patch -- to disable renegotiation. All the other changes which
were committed since 0.9.8k, including the Cisco DTLS compatibility, are
now destined for 0.9.8m. Or 0.9.8n, if 0.9.8m turns out to be a slightly
more well-thought-out response to the protocol problem.

-- 
dwmw2




More information about the openconnect-devel mailing list