[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

CVE-2019-1551/openssl triage



Hi Utkarsh,

You wrote for CVE-2019-1551:
+    [jessie] - openssl <not-affected> (Only affects OpenSSL > 1.1.0-pre1)

However the advisory says:
https://www.openssl.org/news/secadv/20191206.txt
"OpenSSL versions 1.1.1 and 1.0.2 are affected by this issue."

So the status for 1.0.1 (jessie, wheezy) isn't clear.

Can you add more elements to your triage?

Cheers!
Sylvain


Reply to: