Return-Path: X-Original-To: apmail-cloudstack-dev-archive@www.apache.org Delivered-To: apmail-cloudstack-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id A03A210227 for ; Wed, 4 Mar 2015 06:59:26 +0000 (UTC) Received: (qmail 88157 invoked by uid 500); 4 Mar 2015 06:59:25 -0000 Delivered-To: apmail-cloudstack-dev-archive@cloudstack.apache.org Received: (qmail 88109 invoked by uid 500); 4 Mar 2015 06:59:25 -0000 Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list dev@cloudstack.apache.org Received: (qmail 88093 invoked by uid 99); 4 Mar 2015 06:59:24 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 04 Mar 2015 06:59:24 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of terbolous@gmail.com designates 74.125.82.177 as permitted sender) Received: from [74.125.82.177] (HELO mail-we0-f177.google.com) (74.125.82.177) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 04 Mar 2015 06:59:00 +0000 Received: by wesu56 with SMTP id u56so44325232wes.10 for ; Tue, 03 Mar 2015 22:57:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=lVJ3jgThRiNAfbFcOEjdeqRAa5MjElZuXvfyO+RHuAw=; b=u+9T1cv5WLNBMWWPICFbxkeT6bkryuV0tf2ygiXDPciEZB2ZQhuMEYm9Qau1ISjnr8 v4OrcqtQBGnU6yEICx0GJXfQcPd9mvSl+YZARgHjb9wkqBGVjEUywQQxJ1HnSbcgDZvS 2XP+aPBNzsE9cFAFNRxM9Cgxil1qa9XpaRYegu91u+x9ryRl1GrojVWFOYRsK2LeWesA tJurfmvo0HrJ35hTOOTgtPWwt9wPdWWj0mtw3PHr9tuunGuXlrciAtOpCaPokXSz7AAE 6JYhlyJxU2T5BcQfhm6SvOt4XkUet87bAQCwI8rok2Xt3A0cHHcwbTrWERBx+2FNp/G3 TtAQ== MIME-Version: 1.0 X-Received: by 10.194.61.100 with SMTP id o4mr5065489wjr.28.1425452249321; Tue, 03 Mar 2015 22:57:29 -0800 (PST) Received: by 10.28.172.131 with HTTP; Tue, 3 Mar 2015 22:57:29 -0800 (PST) In-Reply-To: <1685045818.6066.1425432101928.JavaMail.zimbra@li.nux.ro> References: <1685045818.6066.1425432101928.JavaMail.zimbra@li.nux.ro> Date: Wed, 4 Mar 2015 07:57:29 +0100 Message-ID: Subject: Re: New SSL vulnerability #FREAK From: Erik Weber To: dev Content-Type: multipart/alternative; boundary=047d7ba974a8f714ed051070f602 X-Virus-Checked: Checked by ClamAV on apache.org --047d7ba974a8f714ed051070f602 Content-Type: text/plain; charset=UTF-8 On Wed, Mar 4, 2015 at 2:21 AM, Nux! wrote: > https://freakattack.com/ > > That time of the month again. Secure your stuff, folks. > > Tried against the SSVM on a CCP 4.3.2 installation, with updated system vm template (think it was Beast or shellshock). Does not export the mentioned ciphers. -- Erik --047d7ba974a8f714ed051070f602--