Source: libnet-tclink-perl
Version: 3.4.0-7
Severity: serious
Hi,
Your package does this in tclink.c:
c->meth = SSLv3_client_method();
Please call SSLv23_client_method() instead. The SSLv3_* methods
only supports SSLv3 while the SSLv23_* is the only that supports
multiple versions.
The SSLv3_* methods have now been removed in unstable.
SSLv3 is no longer considered secure and you should stop using it.
SSLv3 support has been disabled in jessie when using the SSLv23_*
methods but you could still use it using the SSLv3_* methods.
I suggest you fix this in all releaes.
Kurt
