[meta-freescale] meta-fsl-ppc uses Openssl 1.0.1g in master

[VIVEK VERMA]

HI All,

I am trying to use gstreamer library to play wma file. In my rootfs I do have compiled gstreamer plug-ins for good ,bad and ugly.

I am using the command  to play the wma file
________________________________________
From: meta-freescale-bounces at yoctoproject.org <meta-freescale-bounces at yoctoproject.org> on behalf of Otavio Salvador <otavio at ossystems.com.br>
Sent: Tuesday, December 16, 2014 7:37 PM
To: Sona Sarmadi
Cc: Paul Eggleton (paul.eggleton at linux.intel.com); Saul Wold (sgw at linux.intel.com); yocto at yoctoproject.org; meta-freescale at yoctoproject.org
Subject: Re: [meta-freescale] meta-fsl-ppc uses Openssl 1.0.1g in master

Hello Sona,

On Tue, Dec 16, 2014 at 11:58 AM, Sona Sarmadi <sona.sarmadi at enea.com> wrote:
>
> Is there any specific reason why openssl 1.0.1g is used by default? Yocto is using 1.0.1j in master to address some security issues (SSLv3 protocol vulnerability). If there is a strong reason to stay on 1.0.1g, I suggest we apply sslv3 patches  otherwise we just remove this line.
>
> https://git.yoctoproject.org/cgit/cgit.cgi/meta-fsl-ppc/tree/conf/machine/include/qoriq-default-versions.inc
>
> PREFERRED_VERSION_openssl = "1.0.1g"

I agree; it should be removed in my opinion.

Could you prepare a patch and send? So it goes over the usual review
process while Luo enquire internally if there is any reason to not
upgrade?

--
Otavio Salvador                             O.S. Systems
http://www.ossystems.com.br        http://code.ossystems.com.br
Mobile: +55 (53) 9981-7854            Mobile: +1 (347) 903-9750
--
_______________________________________________
meta-freescale mailing list
meta-freescale at yoctoproject.org
https://lists.yoctoproject.org/listinfo/meta-freescale
This message contains information that may be privileged or confidential and is the property of the KPIT Technologies Ltd. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message. KPIT Technologies Ltd. does not accept any liability for virus infected mails.