Le 8 avr. 2014 à 14:14, Pete Boyd <petes-li...@thegoldenear.org> a écrit :
> On 08/04/2014 12:59, b...@todoo.biz wrote: >> You would notice that this bug concerns OpenSSL : >> >> • OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable >> • OpenSSL 0.9.8 branch is NOT vulnerable >> >> If you are on the latest version of pfSense the version is : OpenSSL 0.9.8y >> 5 Feb 2013 >> >> So you are not vulnerable to this heart bleed bug ! > > But I see this: > > /usr/bin/openssl version > OpenSSL 0.9.8y 5 Feb 2013 > > /usr/local/bin/openssl version > OpenSSL 1.0.1e 11 Feb 2013 > Mmmh, this is true : on 2.1.1 in —> /usr/local/bin/openssl : # OpenSSL 1.0.1f 6 Jan 2014 I don’t know exactly how this is used… we would need to wait for Chris confirmation on this. > -- > Pete Boyd > > Open Plan IT - http://openplanit.co.uk > The Golden Ear - http://thegoldenear.org > > _______________________________________________ > List mailing list > List@lists.pfsense.org > https://lists.pfsense.org/mailman/listinfo/list ________________________________________________ «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§ ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Your provider of OpenSource Appliances www.osnet.eu ________________________________________________ «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§ ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ PGP ID --> 0x1BA3C2FD _______________________________________________ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list