Hi,
>> The fix is already in OpenBSD [4], Debian and Ubuntu will probably ship the >> patch soon, also see [5] and [6]. > > Oh, cool, that's good news that it's upstream then. Getting the patch > to apply is a piece of cake. I was more worried about what would happen > for the next libssl update. Hopefully Ubuntu will pick that update up. > Thanks! FYI, debian already ships this since April, 17th: https://lists.debian.org/debian-security-announce/2014/msg00083.html Ubuntu not yet, as it seems. Regards, Lukas _______________________________________________ nginx mailing list [email protected] http://mailman.nginx.org/mailman/listinfo/nginx
