Zombie poddle and Goldendoodle vulnerablity

[Manish Patidar]

Does CVE-2019-1559  is related to these vulnerability.


On Wed, 27 Feb 2019, 4:48 pm Matt Caswell, <matt at openssl.org> wrote:

>
>
> On 27/02/2019 11:07, Manish Patidar wrote:
> >
> > Hi,
> > There has been two vulnerability reported: golden doodle and zombie
> poddle.
> > Does it impact openssl 1.1.1 or 1.0.2 version ?
> >
> >
> https://www.tripwire.com/state-of-security/vulnerability-management/zombie-poodle-goldendoodle/
>
> These issues haven't been reported to openssl-security. From that blog bost
> zombie poodle only seems to affect Citrix products
> (https://support.citrix.com/article/CTX240139). There are very little
> details
> about the "goldennoodle" vulnerability. Given that this hasn't been
> reported to
> us I would assume that OpenSSL is not vulnerable.
>
> Matt
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190227/973cba21/attachment.html>