Chris Knadle:
> Mikkel Krautz:
>[...]
> When a new OpenSSL comes down containing a library rename, the Mumble #2124
> patch will disallow multiple libssl/libcrypto load and Mumble will break.
> Besides Mumble not being functional, the broken behavior deletes the user's
> SSL key used with Mumble and the automatic backup of it, replacing the
> latter with an empty file.  This harms the user's trust and represents a bug
> of severity "grave".

Sorry -- the patch doesn't cause the SSL key deletion, the different
libssl/libcrypto library versions without SSL initialization did.  The above
erroneous wording happened due to paragraph re-arranging.

   -- Chris

-- 
Chris Knadle
chris.kna...@coredump.us

Reply via email to