Package: polarssl Version: 1.3.8-1 Severity: important Tags: security Hi Roland,
I see that SSLv3 has been disabled in polarssl/1.3.9-2 in sid, excellent. However, it's really desirable to have this fix also in jessie. Given that unstable has a new upstream release with many changes, I think it's unlikely that the release team will unblock 1.3.9-2. Can you maybe prepare an update 1.3.8-1+deb8u1 for testing-proposed-updates that disables SSLv3 only? Cheers, Thijs -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
