https://issues.apache.org/bugzilla/show_bug.cgi?id=47055

--- Comment #42 from Ruediger Pluem <[email protected]> 2009-11-09 09:28:23 CET 
---
(In reply to comment #41)
> Joe, does config from first comment is vulnerabile to CVE-2009-3555?

Yes it is. Even with the patch applied. You can only "fix" it with openssl
0.9.8l, but as soon as you use 0.9.8l this config will stop working at all.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to