It's "POODLE", actually: "Padding Oracle On Downgraded Legacy Encryption."

http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html

And, you know what else?  I hate that I know this.  :-)

- Patrick


On Oct 20, 2014, at 7:13 PM, Pascal Robert <[email protected]> wrote:

> 
> Le 2014-10-20 à 19:00, Lon Varscsak <[email protected]> a écrit :
> 
>> Shellshock was an SSLv3/v2 fallback problem (technically a client 
>> bug)...upgrading Apache shouldn't resolve this (unless by default 2.4 turns 
>> off SSLv3/v2).
> 
> Shellshock is the bash security issue :-) The SSL fallback issue is called 
> POOTLE.
> 
>> -Lon
>> 
>> On Mon, Oct 20, 2014 at 3:10 PM, Ray Kiddy <[email protected]> wrote:
>> On Mon, 20 Oct 2014 14:10:19 -0700
>> Lon Varscsak <[email protected]> wrote:
>> 
>>> I just downgraded and installed 2.2.26 using homebrew (and these
>>> instructions https://gist.github.com/falker/857c40ac854999d88135).
>>> Figured it was the path of least resistance. :P
>>> 
>>> -Lon
>> 
>> So, I updated my apache instance in response to Shellshock. Was this
>> not necessary or not an issue?
>> 
>> - ray
>> 
>>> On Mon, Oct 20, 2014 at 9:28 AM, Michael Kondratov <
>>> [email protected]> wrote:
>>> 
>>>> I would also love to get a copy of a binary. Tried compiling - no
>>>> success.
>>>> 
>>>> Michael Kondratov
>>>> Aspire Auctions, Inc.
>>>> 216-231-5515
>>>> 
>>>> On Oct 20, 2014, at 6:13 AM, Gino Pacitti <[email protected]> wrote:
>>>> 
>>>> Hi all…
>>>> 
>>>> Just updated to Yosemite and duh… Apache is updated and I cannot
>>>> get WO to work…
>>>> I have the adaptor make file from wonder but not totally sure how
>>>> to set it up to compile. There is no make.postamble or make.config
>>>> and I am not sure what to use to configure if there were.
>>>> 
>>>> Is there a precompiled adaptor for Apache 2.4 to use on Yosemite?
>>>> 
>>>> Gino
>> 
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Webobjects-dev mailing list      ([email protected])
>> Help/Unsubscribe/Update your Subscription:
>> https://lists.apple.com/mailman/options/webobjects-dev/lon.varscsak%40gmail.com
>> 
>> This email sent to [email protected]
>> 
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Webobjects-dev mailing list      ([email protected])
>> Help/Unsubscribe/Update your Subscription:
>> https://lists.apple.com/mailman/options/webobjects-dev/probert%40macti.ca
>> 
>> This email sent to [email protected]
> 
> 
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Webobjects-dev mailing list      ([email protected])
> Help/Unsubscribe/Update your Subscription:
> https://lists.apple.com/mailman/options/webobjects-dev/pgr%40vt.edu
> 
> This email sent to [email protected]


 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list      ([email protected])
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to