Boost Transition

Kees Cook kees at ubuntu.com
Thu May 5 07:09:51 UTC 2011


On Tue, May 03, 2011 at 02:00:26PM +0100, Colin Watson wrote:
> On Fri, Apr 29, 2011 at 12:48:54PM +0200, Pau Garcia i Quiles wrote:
> > This version of Boost (along with many other packages, some of them
> > mine) will be broken once OpenSSL 1.0.0d, which disables SSLv2, is
> > accepted into Oneiric.
> 
> The version of OpenSSL in Natty already disabled SSLv2.

Just for clarity, Natty (and Maverick) disabled v2 in OpenSSL by way of
erroring out on the routines (but did not break ABI). The 1.0.0d openssl
removes the v2 ABI completely.

-Kees

-- 
Kees Cook
Ubuntu Security Team



More information about the ubuntu-devel mailing list