Page 1 of 1

another new openssl vulnerability (CVE-2016-0701)

PostPosted: Feb 1st, '16, 23:12
by jiml8
http://arstechnica.com/security/2016/01 ... s-traffic/

I do hope the patch will be along soon...

Re: another new openssl vulnerability (CVE-2016-0701)

PostPosted: Feb 2nd, '16, 11:15
by doktor5000
update candidates for this ( CVE-2016-0701 ) and the previous one, CVE-2015-3197 are currently being validated via https://bugs.mageia.org/show_bug.cgi?id=17640

Re: another new openssl vulnerability (CVE-2016-0701)

PostPosted: Aug 16th, '16, 14:03
by plspls
ahahahah openssl is very bad for security

better to use no ssl at all than openssl

openssl is security nightmare all expert say this

I recommend no ssl

openssh is ok

Re: another new openssl vulnerability (CVE-2016-0701)

PostPosted: Aug 16th, '16, 16:36
by maat
plspls wrote:ahahahah openssl is very bad for security

better to use no ssl at all than openssl

openssl is security nightmare all expert say this

I recommend no ssl

openssh is ok


I'd be happy to learn about how you protect HTTP traffic with SSH instead of SSL in browsers :D

More seriously: of course there is always a mean for technical people to tunnel HTTP into whatever but if you want to teach Mr Average how to deal with SOCKS proxies on a large scale...