+++ This bug was initially created as a clone of Bug #901223 +++

From http://slrn.sourceforge.net/docs/changes.txt

> 3. src/sltcp.c: Disable support for SSLv3, which is vulnerable to
>    POODLE attacks.

From cd7df64080841a70efec49cd1d836743beb66b68 Mon Sep 17 00:00:00 2001
From: "John E. Davis" <jed@jedsoft.org>
Date: Mon, 1 Jun 2015 18:07:50 -0400
Subject: [PATCH 1/2] pre1.0.3-3: Disable support for SSLv3, which is
 vulnerable to POODLE attacks.

From 976fe373672edc9abc14e8951c253ad60a8c3bfb Mon Sep 17 00:00:00 2001
From: "John E. Davis" <jed@jedsoft.org>
Date: Tue, 2 Jun 2015 10:09:37 -0400
Subject: [PATCH 2/2] pre1.0.3-4: My previous commit introduced a typo.

diff --git a/src/sltcp.c b/src/sltcp.c
index b8528d7..455fbf3 100644
--- a/src/sltcp.c
+++ b/src/sltcp.c
@@ -573,7 +573,9 @@ static SSL *alloc_ssl (void)
             print_error (_("SSL_CTX_new failed.\n"));
             return NULL;
          }
-       /* SSL_CTX_set_options (c, SSL_OP_NO_TLSv1); */
+
+       /* SSLv3 is vulnerable to POODLE attacks.  Do not use it. */
+       SSL_CTX_set_options (c, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);
        This_SSL_Ctx = c;
        atexit (deinit_ssl);