Re: Truly scary SSL 3.0 vuln to be revealed soon:


Burton, Ross <ross.burton@...>
 

On 15 October 2014 07:48, Sona Sarmadi <sona.sarmadi@...> wrote:
The advice is: Disable SSLv3.

I created https://bugzilla.yoctoproject.org/show_bug.cgi?id=6843 so we can start to work with this immediately.
Presumably the list of affected packages is:
- gnutls
- openssl
- nss

Are there more? Will ENEA be able to send patches to these packages?

Ross

Join yocto@lists.yoctoproject.org to automatically receive all group messages.