Re: AW: [security-announce] SUSE-SU-2014:1361-1: important: Security update for OpenSSL
Johannes Segitz <[email protected]>
| Newsgroups | gmane.linux.suse.security |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Nov 06, 2014 at 06:51:00AM +0000, [email protected] wrote: > When I asked you, if we would need the poodle workaround any longer after installing this patch, you answerd: yes, because the patch was only for a special product. > > Now, what about this patch: it seemed to me, that it includes the poodle leak. Do we - after installing it - still need the workaround as described here: It includes measures that can be used by applications to mitigate the issue. You still need to use the workarounds. Johannes -- Johannes Segitz SUSE Security Team GPG Key E7C81FA0 EE16 6BCE AD56 E034 BFB3 3ADD 7BF7 29D5 E7C8 1FA0 SUSE LINUX GmbH Maxfeldstraße 5 90409 Nürnberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 21284 (AG Nürnberg)
signature.asc
(application/pgp-signature, 836 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJUWxxBAAoJEHv3KdXnyB+g9SkP/jc5CaDRVr9LZLLGCpibdu3i 0/WWiFUJYvoDyBC09mTIoSFl/9/+VIVZWZSclTdrsqL1VNlxzi4616rSEeyeDvXL AYpbFDGndTWBGEmKpuFU+8OAsdhfXdN7ewniaNbVjif9a6qwMgk4Jzj8dO21LqdD Ei9eFnvQ471/RwdhMx23fTeapZIuWQG+gmk/kcvm3dmoYvEtvR2jfgZKwErEzBOK bAupLUT+MlczRGk4RIKCydLhgqtp2YlQlb0/EHAVmJFofTcC5n7XPEjjBCxX95Jo JGnh7/kRmioASMvde78/o864lJmZF41N51AFHcR+4uGdr5uUtDjKp9kLOq7sryWD zEY43uKcMfYSil6iXJEVAfetFicxAwEb8pvLerZ2PzWIcEjONJJvyVXEtk3j3f6Z 9Qzrj+k4iVbL1kRH7Tv6U7XOFtjdN3DLh/w+HqsVDbvzveuqfYHdvWFh7k2Dfcm4 hRyqIVImo0rbvEzxl62qM3aRHYiN5u+lg/3cX8AYazO4Yt+3vzHrmWHsLJFc/lr1 IEt5kxQIIG7jdWLsyQcj0/xq+Bl9fI9gUcuXAxBJwucrqNsbLnlbKs8mnmdJ+ksL X/4uhZMkczvqFewep062phr2hkUvAZcM7tgfiXGNu+a0CA2uW1iNlyBchcH6QF5x C7z6eg9vD/q6UTmUgIIt =kpNm -----END PGP SIGNATURE-----