On Fri, Feb 10, 2012 at 20:23:24 +0100, Kurt Roeckx wrote:

> On Fri, Feb 10, 2012 at 10:15:44AM +0100, Alessandro Ghedini wrote:
> > On Sat, Feb 04, 2012 at 10:45:59PM +0100, Kurt Roeckx wrote:
> > > Having SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS disabled by default
> > > would be fine if I had the option to turn it on.  In that case
> > > it's my decision to ignore the security consequences.
> > 
> > This has been fixed upstream now (commits 2a699bc6 and 62d15f15).
> 
> Do you plan to upload this to stable-proposed-updates?
> 
In general, regressions on security should be fixed on security, not
spu.

Cheers,
Julien

Attachment: signature.asc
Description: Digital signature

Reply via email to