Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 08 Apr 2014 23:09:42 +0200
From: Florian Weimer <>
Subject: Re: OpenSSL 1.0.1 TLS/DTLS hearbeat information disclosure CVE-2014-0160

* Vincent Danen:

>> Mon, 07 Apr 2014 16:53 : Fix is committed to OpenSSL git (not sure if it
>>                       was public or private at that point)
> At this point it was private.

Indeed.  The first public commit notificcation went out around 17:27
UTC.  Ugh, looks like the clock on my mail relay is somewhat off.

(I wonder if the Google folks spotted it on their networks because
someone among the original group tested it against Google
infrastructure. :-)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.