This bug was fixed in the package ejabberd - 2.1.10-2ubuntu1.2
---------------
ejabberd (2.1.10-2ubuntu1.2) precise-security; urgency=low
* SECURITY UPDATE: Disable SSLv2 and weak ciphers in the TLS driver.
(LP: #1239307)
- debian/patches/disable-ssl2.patch, patch from Debian
- debian/patches/disable-insecure-ssl-cyphers.patch, patch from Debian
- CVE-2013-6169
-- Felix Geyer <de...@ubuntu.com> Sun, 13 Oct 2013 13:21:31 +0200
** Changed in: ejabberd (Ubuntu Precise)
Status: New => Fix Released
** Changed in: ejabberd (Ubuntu Quantal)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1239307
Title:
Allows SSLv2 and weak ciphers
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ejabberd/+bug/1239307/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
