Re: OpenSSL 0.9.8 patches
On Tue, Oct 21, 2014 at 09:17:00AM +0200, Raphael Hertzog wrote:
> Hello Paul,
>
> On Mon, 20 Oct 2014, Paul Allen wrote:
> > Right, but what about the patch for adding TLS_FALLBACK_SCSV? And the
> > other vulnerabilities that were patched in 0.9.8zc?
>
> I believe that Kurt Roeckx <kurt@roeckx.be> (one of the openssl
> maintainers in Debian) intends to upload a package with those
> fixes. I'm not sure when he will get to it though (I'm putting him in
> copy).
So I plan to upload a version. I'm just not sure when yet.
Kurt
Reply to: