Bug#781965: wheezy-pu: package ircd-hybrid/1:7.2.2.dfsg.2-10
On Sun, Apr 05, 2015 at 07:46:26PM +0100, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
>
> On Sun, 2015-04-05 at 19:08 +0100, Dominic Hargreaves wrote:
> > As per #779082, ircd-hybrid in wheezy (when recompiled to support
> > SSL) currently listens on SSLv3, which could be exposing a risk of a
> > POODLE attack.
> >
> > The patch to disable SSLv3 is simple, and I've attached a tested package
> > diff. The Debian security team treats this as a no-dsa issue.
>
> Please go ahead, thanks.
Thank you! On its way.
Dominic.
Reply to: