We have received several emails asking if we are impacted by the
latest CVE-2015-1793.  We are not impacted.  The code related to that
CVE was added after we forked 1.0.1g and we did not merge these changes
from upstream.  This CVE only concerns newer OpenSSL releases.

Reply via email to