Package: ejabberd Version: 2.1.10-4+deb7u1 Severity: normal Dear Maintainer,
Recently, SSLv3 started to be seriously broken. ejabberd in stable however does not support disabling SSLv3 and has it enabled by default. Please consider dropping SSLv3 support in stable! Christoph -- System Information: Debian Release: 7.7 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages ejabberd depends on: ii adduser 3.113+nmu3 ii debconf [debconf-2.0] 1.5.49 ii erlang-asn1 1:15.b.1-dfsg-4+deb7u1 ii erlang-base [erlang-abi-15.b] 1:15.b.1-dfsg-4+deb7u1 ii erlang-crypto 1:15.b.1-dfsg-4+deb7u1 ii erlang-inets 1:15.b.1-dfsg-4+deb7u1 ii erlang-mnesia 1:15.b.1-dfsg-4+deb7u1 ii erlang-odbc 1:15.b.1-dfsg-4+deb7u1 ii erlang-public-key 1:15.b.1-dfsg-4+deb7u1 ii erlang-ssl 1:15.b.1-dfsg-4+deb7u1 ii erlang-syntax-tools 1:15.b.1-dfsg-4+deb7u1 ii libc6 2.13-38+deb7u6 ii libexpat1 2.1.0-1+deb7u1 ii libpam0g 1.1.3-7.1 ii libssl1.0.0 1.0.1e-2+deb7u13 ii openssl 1.0.1e-2+deb7u13 ii ucf 3.0025+nmu3 ii zlib1g 1:1.2.7.dfsg-13 ejabberd recommends no packages. Versions of packages ejabberd suggests: ii imagemagick 8:6.7.7.10-5+deb7u3 pn libunix-syslog-perl <none> -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org