On Fri, Feb 10, 2012 at 20:23:24 +0100, Kurt Roeckx wrote: > On Fri, Feb 10, 2012 at 10:15:44AM +0100, Alessandro Ghedini wrote: > > On Sat, Feb 04, 2012 at 10:45:59PM +0100, Kurt Roeckx wrote: > > > Having SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS disabled by default > > > would be fine if I had the option to turn it on. In that case > > > it's my decision to ignore the security consequences. > > > > This has been fixed upstream now (commits 2a699bc6 and 62d15f15). > > Do you plan to upload this to stable-proposed-updates? > In general, regressions on security should be fixed on security, not spu.
Cheers, Julien
signature.asc
Description: Digital signature