Date: Wed, 9 Apr 2014 08:00:44 +0200 From: Arrigo Triulzi <arrigo@...hemistowl.org> To: oss-security@...ts.openwall.com Subject: Re: Other instances of CVE-2014-0160 - mod_spdy from Google On Apr 9, 2014, at 05:59, Kurt Seifried <kseifried@...hat.com> wrote: > So it appears there are projects that statically compile OpenSSL into > their software, one example: Note that OpenVPN has also advertised on Twitter that they too have released a new version with a patch for Heartbleed. Most architectures ship with OpenVPN dynamically linked but they do distribute with their own private copy. Arrigo Download attachment "signature.asc" of type "application/pgp-signature" (802 bytes)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.