Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 528326 - <net-libs/serf-1.3.8: Usage of SSL 2 and 3 not disabled
Summary: <net-libs/serf-1.3.8: Usage of SSL 2 and 3 not disabled
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All All
: Normal normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard: A4 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2014-11-05 15:48 UTC by Arfrever Frehtes Taifersar Arahesis
Modified: 2016-07-19 02:40 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Arfrever Frehtes Taifersar Arahesis 2014-11-05 15:48:55 UTC
net-libs/serf-1.3.8 disables usage of SSL 2 and 3 (by SSL_OP_NO_SSLv2 and SSL_OP_NO_SSLv3).
CHANGES file: "Fix issue #154: Disable SSLv2 and SSLv3 as both or broken."

net-libs/serf-1.3.8 should be stabilized.
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2014-11-05 17:04:03 UTC
Stable for HPPA.
Comment 2 Markus Meier gentoo-dev 2014-11-08 11:47:31 UTC
arm stable
Comment 3 Agostino Sarubbo gentoo-dev 2014-11-08 18:08:26 UTC
amd64 stable
Comment 4 Agostino Sarubbo gentoo-dev 2014-11-08 18:09:51 UTC
x86 stable
Comment 5 Agostino Sarubbo gentoo-dev 2014-11-10 13:46:10 UTC
ppc stable
Comment 6 Agostino Sarubbo gentoo-dev 2014-11-10 13:53:05 UTC
ppc64 stable
Comment 7 Agostino Sarubbo gentoo-dev 2014-11-11 10:37:17 UTC
ia64 stable
Comment 8 Tobias Klausmann (RETIRED) gentoo-dev 2014-11-13 17:46:50 UTC
Stable on alpha.
Comment 9 Agostino Sarubbo gentoo-dev 2014-12-01 09:16:56 UTC
sparc stable
Comment 10 Arfrever Frehtes Taifersar Arahesis 2015-01-13 22:17:50 UTC
Vulnerable <net-libs/serf-1.3.8 dropped.
Comment 11 Aaron Bauman (RETIRED) gentoo-dev 2016-07-19 02:40:36 UTC
GLSA Vote: No