Date: Tue, 08 Apr 2014 23:09:42 +0200 From: Florian Weimer <fw@...eb.enyo.de> To: oss-security@...ts.openwall.com Subject: Re: OpenSSL 1.0.1 TLS/DTLS hearbeat information disclosure CVE-2014-0160 * Vincent Danen: >> Mon, 07 Apr 2014 16:53 : Fix is committed to OpenSSL git (not sure if it >> was public or private at that point) > > At this point it was private. Indeed. The first public commit notificcation went out around 17:27 UTC. Ugh, looks like the clock on my mail relay is somewhat off. (I wonder if the Google folks spotted it on their networks because someone among the original group tested it against Google infrastructure. :-)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.