[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#828475: openssh: Please migrate to openssl1.1 in Buster



On 2017-10-13 01:21:35 [+0100], Colin Watson wrote:
> I'm sorry, but reminders or not, at this time I do not intend to move to
> 1.1 in advance of upstream; I consider that far too risky a change (it's
> a ~4000-line patch to security-critical code, IIRC).  If you want to
> lobby for this, you need to engage with the objections raised by
> upstream on the openssh-unix-dev list.

Okay. My last information is that upstream is doing nothing because they
want a shim layer provided by openssl-upstream. This did not happen and
I doubt it will. Is there any new update on the sitution or is this
really the last update on the situation or was there some progress in
the meantime?

PS: Fedora is shipping an updated / fixed version of the initial patch
    as far as I am aware.

Sebastian


Reply to: