Bug 1155982

Summary:	Pound POODLE exploit
Product:	[Fedora] Fedora EPEL	Reporter:	Brett Parker <idunno>
Component:	Pound	Assignee:	Lubomir Rintel <lkundrak>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	epel7	CC:	lkundrak, manuel.wolfshant
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	Pound-2.7-0.4.d.el7.1	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-11-10 06:10:51 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Brett Parker 2014-10-23 10:34:33 UTC

Newest Pound 2.7d release contains a fix for disabling SSLv2 and SSLv3 in the pound config, can this be applied to either the 2.7c package via an extra patch or the 2.7d release packaged.

Comment 1 Fedora Update System 2014-10-24 14:35:11 UTC

Pound-2.7-0.4.d.el7.1 has been submitted as an update for Fedora EPEL 7.
https://admin.fedoraproject.org/updates/Pound-2.7-0.4.d.el7.1

Comment 2 Fedora Update System 2014-10-24 14:48:41 UTC

Pound-2.7-0.4.d.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/Pound-2.7-0.4.d.fc21

Comment 3 Fedora Update System 2014-10-27 08:17:18 UTC

Package Pound-2.7-0.4.d.fc21:
* should fix your issue,
* was pushed to the Fedora 21 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing Pound-2.7-0.4.d.fc21'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2014-13628/Pound-2.7-0.4.d.fc21
then log in and leave karma (feedback).

Comment 4 Fedora Update System 2014-11-10 06:10:51 UTC

Pound-2.7-0.4.d.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 5 Fedora Update System 2014-11-22 04:13:11 UTC

Pound-2.7-0.4.d.el7.1 has been pushed to the Fedora EPEL 7 stable repository.  If problems still persist, please make note of it in this bug report.