[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <87vbujcyuh.fsf@mid.deneb.enyo.de>
Date: Tue, 08 Apr 2014 23:09:42 +0200
From: Florian Weimer <fw@...eb.enyo.de>
To: oss-security@...ts.openwall.com
Subject: Re: OpenSSL 1.0.1 TLS/DTLS hearbeat information disclosure CVE-2014-0160
* Vincent Danen:
>> Mon, 07 Apr 2014 16:53 : Fix is committed to OpenSSL git (not sure if it
>> was public or private at that point)
>
> At this point it was private.
Indeed. The first public commit notificcation went out around 17:27
UTC. Ugh, looks like the clock on my mail relay is somewhat off.
(I wonder if the Google folks spotted it on their networks because
someone among the original group tested it against Google
infrastructure. :-)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
