Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[openssl] upgrade to 1.0.2n #1053

Closed

Conversation

robbkidd
Copy link
Contributor

@robbkidd robbkidd commented Dec 7, 2017

Upgrade openssl to 1.0.2n to address CVE-2017-3737.

Version published announcement.
Security Advisory.

@thesentinels
Copy link
Contributor

Thanks for the pull request! Here is what will happen next:

  1. Your PR will be reviewed by the maintainers
  2. If everything looks good, one of them will approve it, and your PR will be merged.

Thank you for contributing!

Upgrade openssl to 1.0.2n to address CVE-2017-3737.

[Version published announcement](http://www.mail-archive.com/openssl-announce@openssl.org/msg00258.html).
[Security Advisory](http://www.mail-archive.com/openssl-announce@openssl.org/msg00259.html).

Signed-off-by: Robb Kidd <robb@thekidds.org>
Copy link
Contributor

@stevendanna stevendanna left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since we missed a version, this update will cover the following CVEs:

@robbkidd robbkidd changed the title upgrade openssl to 1.0.2n [openssl] upgrade to 1.0.2n Dec 7, 2017
@fnichol
Copy link
Collaborator

fnichol commented Mar 1, 2018

Looks good, I'm going to pull this in some base package refresh work.

@fnichol fnichol self-assigned this Mar 1, 2018
@fnichol fnichol added this to the Base Packages Refresh 2018.01 milestone Mar 1, 2018
@nellshamrell
Copy link
Contributor

Hello!

Wanted to give you an update on this.

This pull request has been incorporated into the base plans refresh. We are holding off on merging this refresh until after ChefConf(which takes place May 22-25 in Chicago, IL). If you have any questions, please feel free to ask! We greatly appreciate your work on this and look forward to getting it into master :)

@fnichol
Copy link
Collaborator

fnichol commented Jun 19, 2018

We've merged #1210 which contains this work. Thanks again!!

@fnichol fnichol closed this Jun 19, 2018
@fnichol fnichol removed their assignment Jun 19, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

7 participants