Bug 507322

Summary:	dev-libs/openssl - drop tls-heartbeat from IUSE defaults
Product:	Gentoo Linux	Reporter:	Jorge Manuel B. S. Vicetto <jmbsvicetto>
Component:	[OLD] Library	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Jorge Manuel B. S. Vicetto (RETIRED) Gentoo Infrastructure

2014-04-10 12:36:10 UTC

Given the recent CVE-2014-0160, the impact it had and apparently some doubts about how much valid use tls-heartbeat really has, it seems it would be advisable to leave to users enabling tls-heartbeat. In this case, I argue the "better safe then sorry" approach, makes sense.

Comment 1 Alex Legler (RETIRED) archtester

2014-04-10 12:40:18 UTC


*** This bug has been marked as a duplicate of bug 507130 ***