Freeze Break: SSLv3

Stephen John Smoogen smooge at gmail.com
Wed Oct 15 03:35:40 UTC 2014


On 14 October 2014 19:32, Kevin Fenzi <kevin at scrye.com> wrote:

> There's been a vulnerability discovered in SSLv3 that basically allows
> attackers to decrypt it. ;(
>
> I would like to apply the following and disable it on our sites for now
> until and unless we find a better solution in coming days.
>
> Note that I am likely going to try and test the koji change in stg first
> and might adjust it some.
>
> I'll also likely apply this soon anyhow as it's a security issue,
> but more eye's +1's welcome.
>

Reviewed. +1 from what I can tell.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20141014/3e916cb0/attachment.html>


More information about the infrastructure mailing list