[yocto] Truly scary SSL 3.0 vuln to be revealed soon:

Burton, Ross ross.burton at intel.com
Wed Oct 15 03:07:27 PDT 2014


On 15 October 2014 07:48, Sona Sarmadi <sona.sarmadi at enea.com> wrote:
> The advice is: Disable SSLv3.
>
> I created https://bugzilla.yoctoproject.org/show_bug.cgi?id=6843  so we can start to work with this immediately.

Presumably the list of affected packages is:
- gnutls
- openssl
- nss

Are there more?  Will ENEA be able to send patches to these packages?

Ross



More information about the yocto mailing list