[meta-freescale] meta-fsl-ppc uses Openssl 1.0.1g in master

Gary Thomas gary at mlbassoc.com
Tue Dec 16 06:01:43 PST 2014


On 2014-12-16 06:58, Sona Sarmadi wrote:
> Hi guys,
> Is there any specific reason why openssl 1.0.1g is used by default? Yocto is using 1.0.1j in master to address some security issues (SSLv3 protocol vulnerability). If there is a
> strong reason to stay on 1.0.1g, I suggest we apply sslv3 patches  otherwise we just remove this line.
> _https://git.yoctoproject.org/cgit/cgit.cgi/meta-fsl-ppc/tree/conf/machine/include/qoriq-default-versions.inc_
> PREFERRED_VERSION_openssl = "1.0.1g"

Indeed, why is there a pinned version at all in meta-fsl-*?

-- 
------------------------------------------------------------
Gary Thomas                 |  Consulting for the
MLB Associates              |    Embedded world
------------------------------------------------------------


More information about the meta-freescale mailing list