[chef-dev] Re: Any plan for updating OpenSSL in chef client package from 1.0.1h to 1.0.1i ?

["Julian C. Dunn" < >]

On Mon, Sep 8, 2014 at 11:36 PM, Hui Hu 
<
 >
 wrote:

> As mentioned by "Chef Server 11.1.4 Release"
> http://www.getchef.com/blog/2014/08/14/chef-server-11-1-4-release/ , OpenSSL
> packaged in Chef Server 11.1.4 is updated from 1.0.1h to 1.0.1i.
> However the latest chef client rpm package chef-11.14.2-1.el6.x86_64 stills
> use OpenSSL 1.0.1h.
>
> According to https://www.openssl.org/news/secadv_20140806.txt , the OpenSSL
> 1.0.1h client is also affected by the issues. Is chef client going to use
> OpenSSL 1.0.1i ? Or is it not needed for chef client ?

Chef Client 11.16.0 released today contains OpenSSL 1.0.1i.

- Julian

-- 
[ Julian C. Dunn 
<
 >
          * Sorry, I'm    ]
[ WWW: http://www.aquezada.com/staff/julian    * only Web 1.0  ;]
[ gopher://sdf.org/1/users/keymaker/           * compliant!    ;]
[ PGP: 91B3 7A9D 683C 7C16 715F 442C 6065 D533 FDC2 05B9       ]