Re: HeartBleed bug

2014-04-27 Thread Rob Weir
On Sat, Apr 26, 2014 at 8:08 AM, Maurice Howe maur...@stny.rr.com wrote: According to MalwareBytes, Apache is very vulnerable to the HeartBleed bug. Any truth in that? Here's what they say: Cheers, Maurice Howe It is a bug in OPEN SSL. It affects version 1.0.1 through 1.0.1f (inclusive

Re: HeartBleed bug

2014-04-27 Thread Andrea Pescetti
On 27/04/2014 Rob Weir wrote: They are talking about the Apache HTTP server. It is clear in context, it affects servers that run Apache and NGINX mostly. Just to remove any remaining doubts: the Apache OpenOffice websites do use the Apache HTTP server, but (since they were not using

HeartBleed bug

2014-04-26 Thread Maurice Howe
According to MalwareBytes, Apache is very vulnerable to the HeartBleed bug. Any truth in that? Here's what they say: Cheers, Maurice Howe It is a bug in OPEN SSL. It affects version 1.0.1 through 1.0.1f (inclusive), and it affects servers that run Apache and NGINX mostly. Open SSL is used