On Thu, Jan 16, 2014, [email protected] wrote: > It is my understanding that 0.9.8y contains the DTLS retransmission flaw > described in CVE-2013-6450. >
It contains the flaw but it is not a DoS issue in 0.9.8. It's not a trivial fix for 0.9.8 because the DTLS record handling changed in 1.0.0. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
