Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 9 Apr 2014 08:00:44 +0200
From: Arrigo Triulzi <>
Subject: Re: Other instances of CVE-2014-0160 - mod_spdy from Google

On Apr 9, 2014, at 05:59, Kurt Seifried <> wrote:
> So it appears there are projects that statically compile OpenSSL into
> their software, one example:

Note that OpenVPN has also advertised on Twitter that they too have released a new version with a patch for Heartbleed. Most architectures ship with OpenVPN dynamically linked but they do distribute with their own private copy.


Download attachment "signature.asc" of type "application/pgp-signature" (802 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.