oss-sec mailing list archives

RE: Truly scary SSL 3.0 vuln to be revealed soon:


From: Sona Sarmadi <sona.sarmadi () enea com>
Date: Thu, 16 Oct 2014 16:42:10 +0000

Hanno Böck wrote:
It's out:

https://www.openssl.org/~bodo/ssl-poodle.pdf
http://googleonlinesecurity.blogspot.de/2014/10/this-poodle-bites-
exploiting-ssl-30.html


OpenSSL has patches for this and 3 other vulnerabilities: 

   https://www.openssl.org/news/secadv_20141015.txt

GnuTLS also implements the SSLv3 protocol, does anyone know if there are any  patches for GnuTLS for the SSL 3.0 
protocol vulnerability? 

-- Sona



Current thread: