=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata56.html,v retrieving revision 1.4 retrieving revision 1.5 diff -u -r1.4 -r1.5 --- www/errata56.html 2014/10/19 21:08:19 1.4 +++ www/errata56.html 2014/10/21 18:25:37 1.5 @@ -125,6 +125,21 @@ A source code patch exists which remedies this problem.

+

  • +005: SECURITY FIX: October 20, 2014All architectures
    +This patch disables the SSLv3 protocol by default. +

    + +Applications depending on SSLv3 may need to be recompiled with +

        SSL_CTX_clear_option(ctx, SSL_OP_NO_SSLv3);
    +but we recommend against the continued use of this obsolete protocol. + +

    + +A source code patch exists which remedies this problem. +

    +