This bug was fixed in the package pure-ftpd - 1.0.36-1.1ubuntu0.1
---------------
pure-ftpd (1.0.36-1.1ubuntu0.1) trusty-security; urgency=low
* SECURITY-UPDATE: SSLv3 is enabled by default allowing the POODLE
attack (LP: #1381840)
- debian/pure-ftpd-wrapper: enable loading of TLSCipherSuite parameter
- debian/etc/TLSCipherSuite: disable SSLv3
- CVE-2014-3566
-- Joshua Zeitlinger <[email protected]> Sat, 28 May 2016
19:50:18 -0400
** Changed in: pure-ftpd (Ubuntu)
Status: Fix Committed => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3566
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1381840
Title:
Wrapper doesn't include TLSCipherSuite
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pure-ftpd/+bug/1381840/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
