Zombie poddle and Goldendoodle vulnerablity

[Matt Caswell]

On 27/02/2019 11:07, Manish Patidar wrote:
> 
> Hi, 
> There has been two vulnerability reported: golden doodle and zombie poddle. 
> Does it impact openssl 1.1.1 or 1.0.2 version ? 
> 
> https://www.tripwire.com/state-of-security/vulnerability-management/zombie-poodle-goldendoodle/

These issues haven't been reported to openssl-security. From that blog bost
zombie poodle only seems to affect Citrix products
(https://support.citrix.com/article/CTX240139). There are very little details
about the "goldennoodle" vulnerability. Given that this hasn't been reported to
us I would assume that OpenSSL is not vulnerable.

Matt