PS: that being said, it took POODLE for some of the build utility guys to realize that they might need to turn off linking to an OpenSSL version with SSLv3 support: https://github.com/sstephenson/ruby-build/pull/593
I've also argued with the Homebrew (Mac OS X) community over this issue in Pull Requests, but they are still ignorant and think this is an "upstream problem". Most distributions seem to properly package, patch and ship OpenSSL with appropriate security fixes (if possible) though. Aaron
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Uta mailing list [email protected] https://www.ietf.org/mailman/listinfo/uta
