Package: ejabberd
Version: 2.1.10-4+deb7u1
Severity: normal

Dear Maintainer,

Recently, SSLv3 started to be seriously broken. ejabberd in stable
however does not support disabling SSLv3 and has it enabled by
default. Please consider dropping SSLv3 support in stable!

  Christoph

-- System Information:
Debian Release: 7.7
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ejabberd depends on:
ii  adduser                        3.113+nmu3
ii  debconf [debconf-2.0]          1.5.49
ii  erlang-asn1                    1:15.b.1-dfsg-4+deb7u1
ii  erlang-base [erlang-abi-15.b]  1:15.b.1-dfsg-4+deb7u1
ii  erlang-crypto                  1:15.b.1-dfsg-4+deb7u1
ii  erlang-inets                   1:15.b.1-dfsg-4+deb7u1
ii  erlang-mnesia                  1:15.b.1-dfsg-4+deb7u1
ii  erlang-odbc                    1:15.b.1-dfsg-4+deb7u1
ii  erlang-public-key              1:15.b.1-dfsg-4+deb7u1
ii  erlang-ssl                     1:15.b.1-dfsg-4+deb7u1
ii  erlang-syntax-tools            1:15.b.1-dfsg-4+deb7u1
ii  libc6                          2.13-38+deb7u6
ii  libexpat1                      2.1.0-1+deb7u1
ii  libpam0g                       1.1.3-7.1
ii  libssl1.0.0                    1.0.1e-2+deb7u13
ii  openssl                        1.0.1e-2+deb7u13
ii  ucf                            3.0025+nmu3
ii  zlib1g                         1:1.2.7.dfsg-13

ejabberd recommends no packages.

Versions of packages ejabberd suggests:
ii  imagemagick          8:6.7.7.10-5+deb7u3
pn  libunix-syslog-perl  <none>

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to