From owner-cvs-all@FreeBSD.ORG Sun Nov 11 10:20:57 2007 Return-Path: Delivered-To: cvs-all@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5703E16A418; Sun, 11 Nov 2007 10:20:57 +0000 (UTC) (envelope-from simon@benji.nitro.dk) Received: from mx.nitro.dk (zarniwoop.nitro.dk [83.92.207.38]) by mx1.freebsd.org (Postfix) with ESMTP id F2CE913C4B2; Sun, 11 Nov 2007 10:20:56 +0000 (UTC) (envelope-from simon@benji.nitro.dk) Received: from benji.nitro.dk (unknown [192.168.3.39]) by mx.nitro.dk (Postfix) with ESMTP id BE3032DC911; Sun, 11 Nov 2007 10:20:45 +0000 (UTC) Received: by benji.nitro.dk (Postfix, from userid 2000) id 93B19FE1A; Sun, 11 Nov 2007 11:20:45 +0100 (CET) Date: Sun, 11 Nov 2007 11:20:45 +0100 From: "Simon L. Nielsen" To: d@delphij.net Message-ID: <20071111102044.GB1020@zaphod.nitro.dk> References: <200711081945.lA8JjKcW080540@repoman.freebsd.org> <47337724.9040108@FreeBSD.org> <47337940.6040909@root.org> <47340B74.9070004@freebsd.org> <4734B13C.6050008@root.org> <4734B629.4010001@delphij.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4734B629.4010001@delphij.net> User-Agent: Mutt/1.5.16 (2007-06-09) Cc: src-committers@FreeBSD.ORG, cvs-src@FreeBSD.ORG, Kris Kennaway , cvs-all@FreeBSD.ORG, Colin Percival , Nate Lawson Subject: Re: OpenSSL import [was: cvs commit: src/sys/amd64/amd64 mp_machdep.c src/sys/i386/i386 mp_machdep.c] X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Nov 2007 10:20:57 -0000 On 2007.11.09 11:34:01 -0800, Xin LI wrote: > > [1] OpenSSL 0.9.7h, change 10/2005 by Matthew D. Wood of Intel, > > http://www.openssl.org/news/changelog.html > > [2] OpenSSL 0.9.8f, change 10/2007 by Matthew D. Wood of Intel, > > http://www.openssl.org/news/changelog.html > > Sorry for hijacking this thread, are we going to import a new OpenSSL > release? Sounds like we have to do a full package build if we want to > do that... For both RELENG_6 and RELENG_7, not unless somebody comes up with very strong arguments to do so. The risk of blowing things up this late in the release cycle is just to great. The latest 0.9.8 security issue was fixed with patch rather than complete new import to avoid disruptions to the 7.x release process. My current plan is to import the new OpenSSL 0.9.8 release into HEAD after 7.0 has been released, and them MFC to RELENG_7 if possble later. -- Simon L. Nielsen Hat: OpenSSL maintainer/janitor