Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of covener@gmail.com designates
 209.85.210.171 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <1355995994.7815.YahooMailNeo@web163403.mail.gq1.yahoo.com>
References: <1355995994.7815.YahooMailNeo@web163403.mail.gq1.yahoo.com>
Date: Tue, 25 Dec 2012 09:35:13 -0500
Message-ID: 
 <CALK=YjNDzBV0XxW99Ccny+V97R+QT-dhdr90TOBKRP2gGyD_8w@mail.gmail.com>
From: Eric Covener <covener@gmail.com>
To: users@httpd.apache.org, Gorkem Durgut <gorkemdur@yahoo.com>
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [users@httpd] Apache 2.2.x and CVE-2012-2333

> I do not have deeper knowledge about protocols but I think as follows: DTLS
> means TLS for datagram packets so it means http does not use DTLS, right? On
> the other hand, TLS is affected in OpenSSL 1.0.1 and later which means
> 0.9.8-related version is not affected, right?
>
> Thus, can I imply that OpenSSL 0.9.8t version used with Apache httpd 2.2.22
> is not affected with this vulnerability?

That's how I interpret the CVE as well.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org