Ask Symantec why they labeled it as an openssl CVE; it is not. Read AGL?s blog post[1]. Two specific implementations are identified and a different crypto library (NSS) is implicated. This is about as formal a statement as you?re going to get. ? [1] https://www.imperialviolet.org/2014/12/08/poodleagain.html -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.opensslfoundation.net/pipermail/openssl-users/attachments/20141209/34507d98/attachment-0001.html>
