All,
A few weeks ago, the OpenSSL project announced new versions of OpenSSL
(1.1.1m and 3.0.1) which address a problem with their squaring procedure
on MIPS3 and MIPS64 architectures.
It is appropriate for Tomcat to issue a new release of libtcnative and
include that in any future Tomcat releases.
However.
I wanted to point out a few things:
1. This is only a problem with MIPS32 and MIPS64 architectures
(and these are very uncommon)
2. Tomcat only produces binaries for libtcnative for Windows
3. Windows does not run on MIPS32 and MIPS64
Therefore, I don't see any particular reason to rush to produce a new
release.
If you are running Tomcat on MIPS32 or MIPS64, I would recommend that
you manually upgrade your OS's OpenSSL version (if you are using dynamic
linking, which is quite common) or re-build your libtcnative (if you are
statically linking your libraries).
-chris
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
