Message-ID: <4FD078F5.7060903@...1543...> Date: Thu, 07 Jun 2012 11:48:37 +0200 From: Paul Bakker MIME-Version: 1.0 References: <4FD0735C.7090902@...515...> <1CED409804E2164C8104F9E623B08B9012D498A813@...1436...> In-Reply-To: <1CED409804E2164C8104F9E623B08B9012D498A813@...1436...> Subject: Re: [Openvpn-devel] PolarSSL 1.1.0 support? List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable To: openvpn-devel@lists.sourceforge.net Agreed as well.. On 7-6-2012 11:42, Adriaan de Jong wrote: >> -----Original Message----- >> From: Frank de Brabander [mailto:brabander@...1435...] >> Sent: donderdag 7 juni 2012 11:36 >> To: Samuli Sepp=E4nen; openvpn-devel@lists.sourceforge.net >> Subject: Re: [Openvpn-devel] PolarSSL 1.1.0 support? >> >> Maybe this should actually be changed to >=3D 1.1.2, since there is a >> security issue with versions from 0.99-pre4 up to and including >> PolarSSL 1.1.1. >> > The trouble there is that some distro's tend to only backport the securit= y patches, and not the version patches. This would throw an extra obstacle = in their way. Is it really our responsibility to verify that you are using = a secure version of an SSL library?=20 > > Adriaan > > -------------------------------------------------------------------------= ----- > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and=20 > threat landscape has changed and how IT managers can respond. Discussions= =20 > will include endpoint security, mobile security and the latest in malware= =20 > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ > Openvpn-devel mailing list > Openvpn-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-devel