Links for 2016-03-01

This entry was posted in Uncategorized. Bookmark the permalink. Both comments and trackbacks are currently closed.

2 Comments

  1. Nix
    Posted March 2, 2016 at 15:22 | Permalink

    Note that openssl’s source tree disables sslv2 to fix this, but the fix removes the APIs and symbols related to SSLv2 as well, which breaks among other things libcurl, Qt4, Qt5, socat, and God knows what else (I don’t mean they won’t do SSL, I mean they don’t even start because of the missing symbols, and rebuilding them causes at least curl to conclude that openssl isn’t available at all and build without linking against it). It appears that the OpenSSL team still don’t understand that you don’t remove symbols without changing the soname, and you don’t do either in a security update. Sigh.

  2. Posted March 2, 2016 at 15:25 | Permalink

    What the hell. that’s just totally broken….