[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DLA 282-1] lighttpd security update



Package        : lighttpd
Version        : 1.4.28-2+squeeze1.7
CVE ID         : CVE-2014-3566
Debian Bug     : #765702

This update allows to disable SSLv3 in lighttpd in order to protect
against the POODLE attack. SSLv3 is now disabled by default and can be
reenabled (if needed) using the ssl.use-sslv3 option.

Attachment: signature.asc
Description: Digital signature


Reply to: