Hi,

On Thu, Jun 05, 2014 at 11:54:40PM +0200, joerg jungermann wrote:
> > > today appeared another serious vulnerability in openssl. More info is
> > > here http://ccsinjection.lepidum.co.jp. Users are advised to update to
> > > openssl 1.0.1h.
> > Thank you for your patch, it was committed in r41026 and 41027.
> Will there be a backport to AA 12.09?

Seconded - that would be very welcome (because OpenVPN is vulnerable to 
CVE-2014-0224).

gert


-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             g...@greenie.muc.de
fax: +49-89-35655025                        g...@net.informatik.tu-muenchen.de

Attachment: pgpKjTwnFL2Wa.pgp
Description: PGP signature

_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel

Reply via email to