Evaluation of all for OpenSSL May 2016 CSCuz52528

[Ming Keat Pang]

Hi Mates

Is the bug CSCuz52528 has fixed for IOS? from bug notes and it should fixed but is not properly listed the affected and fixed version.

If the mentioned features are not enable or in use then it should consider as not affected?

Thanks

MK

[Ming Keat Pang]

from the bug notes, the affected version is only IOS Denali 16.3.1 hence the rest of version should not impacted.

FYI, IOS denali is the latest development. http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-1/doc_roadmap/16x-roadmap.html

Thank you

[bmillar]

But if you look under the Security Advisory, the table column "Fixed Release Availability" shows that version 16.3.1 contains the fix.

Under the bug, it also shows that fixed versions are: 15.2(5.2.29i)E, 15.4(1)IA1.73, etc. If the other trains weren't affected, then why are there fixed releases listed?

It also looks like Denali is IOS XE, what about just IOS releases?

All very confusing and which do you believe?