Re: Upcoming OpenSSL updates

[Ludovic Courtès]

Leo Famulari <address@hidden> skribis:

> On Tue, May 23, 2017 at 12:40:02AM -0400, Leo Famulari wrote:
>> On May 25 between 1200–1600UTC, OpenSSL will release some bug-fix
>> updates:
>> 
>> https://mta.openssl.org/pipermail/openssl-announce/2017-May/000098.html
>> 
>> Apparently, none of the fixes are for security problems.
>> 
>> However, I still think we should apply the update of address@hidden with
>> a graft, if the ABI is unchanged, unless none of the changes are
>> relevant for GNU / Linux systems.
>
> I thought about it some more, and now I'm not so sure we should start
> grafting non-security related bug fixes, in general. For this case,
> let's see what the changes are.

Same here.  I think we should reserve graft for security fixes, or
otherwise serious bug fixes.

I’m surprised that they announce bug-fix-only releases in this way.

Ludo’.