Ubuntu
znc package

  1. Trusty (14.04)
  2. Bug #1389264
  3. Comment #2

Comment 2 for bug 1389264

Revision history for this message
Thomas Ward (teward) wrote :

After discussion with the Security team, and Upstream ZNC rejecting the changes to incorporate the ability to selectively disable protocols, this is not going to be fixable in any of the stable releases (Precise, Trusty, Utopic).

Therefore, the current path of approach is going to be putting the "Disable SSLv2/SSLv3" code change into Vivid, and leave the rest alone. (Marking Precise, Trusty, Utopic as "Won't Fix" accordingly, per my discussion with mdeslaur in #ubuntu-hardened on this issue.)