> Does this mean that openssl is not vulnerable to this issue even if TLS 1.0/TLS 1.1 are enabled? > Are all versions of openssl (0.9.8* and 1.0.1*) free from impact? OpenSSL does not have this defect.