Announcement: OpenSSL version 1.0.0a

The OpenSSL project team is pleased to announce the release of version 1.0.0a of our open source toolkit for SSL/TLS. This new OpenSSL version is a security and bugfix release which addresses CVE-2010-1633 and CVE-2010-0742. For a complete list of changes, please see http://cvs.openssl.org/getfile?f=openssl/CHANGES&v=OpenSSL_1_0_0a.

We consider OpenSSL 1.0.0a to be the best version of OpenSSL available and we strongly recommend that users of older versions upgrade as soon as possible. OpenSSL 1.0.0a is available for download via HTTP and FTP from the following master locations (you can find the various FTP mirrors under http://www.openssl.org/source/mirror.html):

• http://www.openssl.org/source/
• ftp://ftp.openssl.org/source/

The distribution file name is:

• openssl-1.0.0a.tar.gz
  Size: 4015794
  MD5 checksum: e3873edfffc783624cfbdb65e2249cbd
  SHA1 checksum: b837a9f75a51f456bd533690cf04d3d5714812dc
  

The checksums were calculated using the following commands:

    openssl md5 openssl-1.0.*.tar.gz
    openssl sha1 openssl-1.0.*.tar.gz

Yours,
The OpenSSL Project Team...

    Mark J. Cox             Nils Larsch         Ulf Möller
    Ralf S. Engelschall     Ben Laurie          Andy Polyakov
    Dr. Stephen Henson      Richard Levitte     Geoff Thorpe
    Lutz Jänicke            Bodo Möller