rPUA-2007-0037-1 curl openssl openssl-scripts

[rPath Update Announcements]

rPath Update Advisory: 2007-0037-1
Published: 2007-08-24
Products: rPath Linux 1
Rating: Minor
Updated Versions:
    openssl=/conary.rpath.com at rpl:devel//1/0.9.7f-10.9-1
    openssl-scripts=/conary.rpath.com at rpl:devel//1/0.9.7f-10.9-1
    curl=/conary.rpath.com at rpl:devel//1/7.15.3-1.1-1

References:
    https://issues.rpath.com/browse/RPL-1066
    https://issues.rpath.com/browse/RPL-1070

Description:
    Previous versions of the openssl package do not include hashes of the
    .pem files in the /etc/ssl/certs/ directory, used for authenticating
    SSL connections, causing applications which depend on openssl finding
    those .pem files to fail to authenticate SSL connections.
    Additionally, the openssl package has been modified to provide a root
    certification bundle in the /etc/ssl/certs/ca-bundle.crt file.
    
    Previous versions of the curl package incorrectly search for a root
    certification bundle in the /usr/share/ssl/certs/ca-bundle.crt file.
    The curl package has been modified to use the root certification
    bundle now provided by the openssl package.

Copyright 2007 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html