Bug#781965: wheezy-pu: package ircd-hybrid/1:7.2.2.dfsg.2-10
Control: tags -1 + pending
On Sun, 2015-04-05 at 19:52 +0100, Dominic Hargreaves wrote:
> On Sun, Apr 05, 2015 at 07:46:26PM +0100, Adam D. Barratt wrote:
> > Control: tags -1 + confirmed
> >
> > On Sun, 2015-04-05 at 19:08 +0100, Dominic Hargreaves wrote:
> > > As per #779082, ircd-hybrid in wheezy (when recompiled to support
> > > SSL) currently listens on SSLv3, which could be exposing a risk of a
> > > POODLE attack.
> > >
> > > The patch to disable SSLv3 is simple, and I've attached a tested package
> > > diff. The Debian security team treats this as a no-dsa issue.
> >
> > Please go ahead, thanks.
>
> Thank you! On its way.
Flagged for acceptance into p-u.
Regards,
Adam
Reply to: