On 27/02/2019 11:07, Manish Patidar wrote: > > Hi, > There has been two vulnerability reported: golden doodle and zombie poddle. > Does it impact openssl 1.1.1 or 1.0.2 version ? > > https://www.tripwire.com/state-of-security/vulnerability-management/zombie-poodle-goldendoodle/ These issues haven't been reported to openssl-security. From that blog bost zombie poodle only seems to affect Citrix products (https://support.citrix.com/article/CTX240139). There are very little details about the "goldennoodle" vulnerability. Given that this hasn't been reported to us I would assume that OpenSSL is not vulnerable. Matt
