#12876 HIGH Future : retest older releases against activation.laptop.org for CVE-2014-3566

Zarro Boogs per Child bugtracker at laptop.org
Thu Mar 26 03:54:57 EDT 2015


#12876: retest older releases against activation.laptop.org for CVE-2014-3566
----------------------------------------+--------------------------------
            Reporter:  Quozl            |          Owner:  Quozl
                Type:  task             |         Status:  new
            Priority:  high             |      Milestone:  Future Release
           Component:  browse-activity  |        Version:  not specified
          Resolution:                   |       Keywords:
          Blocked By:                   |       Blocking:
Deployments affected:                   |  Action Needed:  reproduce
            Verified:  0                |
----------------------------------------+--------------------------------
Description changed by Quozl:

Old description:

> CVE-2014-3566 forced a change to block SSLv3:
>
> {{{
> sudo sed -i -e 's/SSLProtocol all -SSLv2/SSLProtocol all -SSLv2 SSLv3/g'
> /etc/apache2/mods-available/ssl.conf
> sudo service apache2 graceful
> }}}
>
> now we need to check that certain older releases can still obtain
> developer keys.

New description:

 CVE-2014-3566 forced a change to block SSLv3:

 {{{
 sudo sed -i -e 's/SSLProtocol all -SSLv2/SSLProtocol all -SSLv2 -SSLv3/g'
 /etc/apache2/mods-available/ssl.conf
 sudo service apache2 graceful
 }}}

 now we need to check that certain older releases can still obtain
 developer keys.

--

--
Ticket URL: <http://dev.laptop.org/ticket/12876#comment:1>
One Laptop per Child <http://one.laptop.org/>
One Laptop per Child bug tracking system


More information about the Bugs mailing list