Bug 528326

Summary:	<net-libs/serf-1.3.8: Usage of SSL 2 and 3 not disabled
Product:	Gentoo Security	Reporter:	Arfrever Frehtes Taifersar Arahesis <arfrever.fta>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	All
Whiteboard:	A4 [noglsa]
Package list:		Runtime testing required:	---

Description Arfrever Frehtes Taifersar Arahesis 2014-11-05 15:48:55 UTC

net-libs/serf-1.3.8 disables usage of SSL 2 and 3 (by SSL_OP_NO_SSLv2 and SSL_OP_NO_SSLv3).
CHANGES file: "Fix issue #154: Disable SSLv2 and SSLv3 as both or broken."

net-libs/serf-1.3.8 should be stabilized.

Comment 1 Jeroen Roovers (RETIRED) gentoo-dev

2014-11-05 17:04:03 UTC

Stable for HPPA.

Comment 2 Markus Meier gentoo-dev

2014-11-08 11:47:31 UTC

arm stable

Comment 3 Agostino Sarubbo gentoo-dev

2014-11-08 18:08:26 UTC

amd64 stable

Comment 4 Agostino Sarubbo gentoo-dev

2014-11-08 18:09:51 UTC

x86 stable

Comment 5 Agostino Sarubbo gentoo-dev

2014-11-10 13:46:10 UTC

ppc stable

Comment 6 Agostino Sarubbo gentoo-dev

2014-11-10 13:53:05 UTC

ppc64 stable

Comment 7 Agostino Sarubbo gentoo-dev

2014-11-11 10:37:17 UTC

ia64 stable

Comment 8 Tobias Klausmann (RETIRED) gentoo-dev

2014-11-13 17:46:50 UTC

Stable on alpha.

Comment 9 Agostino Sarubbo gentoo-dev

2014-12-01 09:16:56 UTC

sparc stable

Comment 10 Arfrever Frehtes Taifersar Arahesis 2015-01-13 22:17:50 UTC

Vulnerable <net-libs/serf-1.3.8 dropped.

Comment 11 Aaron Bauman (RETIRED) gentoo-dev

2016-07-19 02:40:36 UTC

GLSA Vote: No