From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/3300 Path: news.gmane.org!not-for-mail From: idunham@lavabit.com Newsgroups: gmane.linux.lib.musl.general Subject: Re: High-priority library replacements? Date: Wed, 8 May 2013 16:00:22 -0700 Message-ID: <20130508230022.GA14297@Caracal> References: <20130429101620.GG12689@port70.net> <20130429215500.GJ12689@port70.net> <20130430021014.GC20323@brightrain.aerifal.cx> <20130430083516.GK12689@port70.net> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1368054039 5208 80.91.229.3 (8 May 2013 23:00:39 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 8 May 2013 23:00:39 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-3304-gllmg-musl=m.gmane.org@lists.openwall.com Thu May 09 01:00:41 2013 Return-path: Envelope-to: gllmg-musl@plane.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1UaDLl-0002Pw-5W for gllmg-musl@plane.gmane.org; Thu, 09 May 2013 01:00:41 +0200 Original-Received: (qmail 12025 invoked by uid 550); 8 May 2013 23:00:39 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 12017 invoked from network); 8 May 2013 23:00:39 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lavabit; d=lavabit.com; b=WgPiQSjuOtByg4adzqTGxBRiVMmFtGLCmjr5d5sXe2aSstKLE052BXncjNaMSESmsGuYZc72Ixlt+OlfS9Fsqq5WZ6cKhIWfbFwT57677hvyYRWcyTz1BBl0/z4W8a+NcxmqEjPCpfkza33gI/3vM7SFdSJEL7ODdfkMSGMuG+M=; h=Date:From:To:Subject:Message-ID:References:MIME-Version:Content-Type:Content-Disposition:In-Reply-To:User-Agent; Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Xref: news.gmane.org gmane.linux.lib.musl.general:3300 Archived-At: On Wed, May 08, 2013 at 11:37:47PM +0200, Daniel Cegie?ka wrote: > and tropicssl? > > http://gitorious.org/tropicssl > > http://teholabs.com/tag/ssl/ Tropicssl is a fork of polarssl, but as far as I can tell they haven't fixed CVEs 2013-0169, 2013-1621, and 2013-1622 yet. While I agree with their view of the license switch, the activity (or lack thereof) does not seem promising. -- Isaac Dunham