[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#781965: wheezy-pu: package ircd-hybrid/1:7.2.2.dfsg.2-10



On Sun, Apr 05, 2015 at 07:46:26PM +0100, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Sun, 2015-04-05 at 19:08 +0100, Dominic Hargreaves wrote:
> > As per #779082, ircd-hybrid in wheezy (when recompiled to support
> > SSL) currently listens on SSLv3, which could be exposing a risk of a
> > POODLE attack.
> > 
> > The patch to disable SSLv3 is simple, and I've attached a tested package
> > diff. The Debian security team treats this as a no-dsa issue.
> 
> Please go ahead, thanks.

Thank you! On its way.

Dominic.


Reply to: