Re: OpenSSL 1.0.1 TLS/DTLS hearbeat information disclosure CVE-2014-0160

[Florian Weimer <fw () deneb enyo de>]

* Vincent Danen:

> > Mon, 07 Apr 2014 16:53 : Fix is committed to OpenSSL git (not sure if it
> >                       was public or private at that point)
>
> At this point it was private.

Indeed.  The first public commit notificcation went out around 17:27
UTC.  Ugh, looks like the clock on my mail relay is somewhat off.

(I wonder if the Google folks spotted it on their networks because
someone among the original group tested it against Google
infrastructure. :-)