[meta-freescale] meta-fsl-ppc uses Openssl 1.0.1g in master
Gary Thomas
gary at mlbassoc.com
Tue Dec 16 06:01:43 PST 2014
On 2014-12-16 06:58, Sona Sarmadi wrote:
> Hi guys,
> Is there any specific reason why openssl 1.0.1g is used by default? Yocto is using 1.0.1j in master to address some security issues (SSLv3 protocol vulnerability). If there is a
> strong reason to stay on 1.0.1g, I suggest we apply sslv3 patches otherwise we just remove this line.
> _https://git.yoctoproject.org/cgit/cgit.cgi/meta-fsl-ppc/tree/conf/machine/include/qoriq-default-versions.inc_
> PREFERRED_VERSION_openssl = "1.0.1g"
Indeed, why is there a pinned version at all in meta-fsl-*?
--
------------------------------------------------------------
Gary Thomas | Consulting for the
MLB Associates | Embedded world
------------------------------------------------------------
More information about the meta-freescale
mailing list