Control: tags -1 + confirmed On Sun, 2015-04-05 at 19:08 +0100, Dominic Hargreaves wrote: > As per #779082, ircd-hybrid in wheezy (when recompiled to support > SSL) currently listens on SSLv3, which could be exposing a risk of a > POODLE attack. > > The patch to disable SSLv3 is simple, and I've attached a tested package > diff. The Debian security team treats this as a no-dsa issue. Please go ahead, thanks. Regards, Adam