Re: OpenSSL vulnerabilities

2016-03-02 Thread Rainer Jung
Am 02.03.2016 um 09:48 schrieb Mark Thomas: All, I'm primarily looking at the window builds for Tomcat Native. tc-native 1.1.34 was built with OpenSSL 1.0.1q tc-native 1.2.4 was built with OpenSSL 1.0.2e. Looking at the latest OpenSSL security vulnerabilities: CVE-2016-0800: SSLv2 disabled by

OpenSSL vulnerabilities

2016-03-02 Thread Mark Thomas
All, I'm primarily looking at the window builds for Tomcat Native. tc-native 1.1.34 was built with OpenSSL 1.0.1q tc-native 1.2.4 was built with OpenSSL 1.0.2e. Looking at the latest OpenSSL security vulnerabilities: CVE-2016-0800: SSLv2 disabled by default. Not an issue. CVE-2016-0705: Low. Co