Am 09.12.2010 13:49, schrieb Hirokazu Yamamoto:
> On 2010/11/25 1:23, exar...@twistedmatrix.com wrote:
>> Ah. Okay, then Python 3.2 would be vulnerable. Good thing it isn't
>> released yet. ;)
>
> It seems OpenSSL 1.0.0c out.
>
> http://openssl.org/news/secadv_20101202.txt
>
>> 02-Dec-2010:
On 2010/11/25 1:23, exar...@twistedmatrix.com wrote:
Ah. Okay, then Python 3.2 would be vulnerable. Good thing it isn't
released yet. ;)
It seems OpenSSL 1.0.0c out.
http://openssl.org/news/secadv_20101202.txt
> 02-Dec-2010: Security Advisory: ciphersuite downgrade fix
> 02-Dec-2010:
On 03:11 pm, solip...@pitrou.net wrote:
On Wed, 24 Nov 2010 15:01:06 -
exar...@twistedmatrix.com wrote:
>
>If I believe the link above:
> 1CAny OpenSSL based TLS server is vulnerable if it is multi-threaded
and
>uses OpenSSL's internal caching mechanism. Servers that are
>multi-process and
