SSL subject to POODLE vulnerability

Bug #1382517 reported by DavidS
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
evolution-data-server (Ubuntu)
New
Undecided
Unassigned

Bug Description

It seems that Evolution 2.3.2 uses SSLv3 and is therefore subject to the recently announced POODLE vulnerability. (As a result I can no longer access my IMAP server at fastmail.fm, because they have turned off the SSLv3 fallback).

Evolution 2.3.2 is the latest version from the Ubuntu 12.04 repositories. I use Ubuntu 12.04 on 4 computers, so all are affected by this.

DavidS (david-aeolia)
information type: Private Security → Public Security
Iain Lane (laney)
affects: evolution (Ubuntu) → evolution-data-server (Ubuntu)
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.