[Secure-testing-commits] r35420 - data

Guido Guenther agx at moszumanska.debian.org
Fri Jul 10 15:11:44 UTC 2015


Author: agx
Date: 2015-07-10 15:11:44 +0000 (Fri, 10 Jul 2015)
New Revision: 35420

Modified:
   data/dla-needed.txt
Log:
CVE-2014-3566 can be mitigated by lighttpd

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2015-07-10 14:35:27 UTC (rev 35419)
+++ data/dla-needed.txt	2015-07-10 15:11:44 UTC (rev 35420)
@@ -26,6 +26,11 @@
 --
 linux-2.6
 --
+lighttpd
+  NOTE: boils down to disable SSLv3 suppoert as in
+  http://git.lighttpd.net/lighttpd/lighttpd-1.x.git/commit/?id=f610f894a35b5ef0e082b9f3bd24fa338bb10147
+  http://git.lighttpd.net/lighttpd/lighttpd-1.x.git/commit/?id=084df7e99a8738be79f83e330415a8963280dc4a
+--
 netty
 --
 nss




More information about the Secure-testing-commits mailing list