Re: CVE-2010-3864

2010-11-19 Thread Victor Duchovni
On Fri, Nov 19, 2010 at 03:44:15PM +0100, Ralf Hildebrandt wrote: > I assume postfix is not affected since smtpd is not multi-threaded? > http://www.openssl.org/news/secadv_20101116.txt Correct. We also don't have an in-memory SSL session cache in the Postfix SMTP client. We do have a 1-element i

CVE-2010-3864

2010-11-19 Thread Ralf Hildebrandt
I assume postfix is not affected since smtpd is not multi-threaded? http://www.openssl.org/news/secadv_20101116.txt -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 4