Le 8 avr. 2014 à 14:14, Pete Boyd <petes-li...@thegoldenear.org> a écrit :

> On 08/04/2014 12:59, b...@todoo.biz wrote:
>> You would notice that this bug concerns OpenSSL :
>> 
>>      • OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable
>>      • OpenSSL 0.9.8 branch is NOT vulnerable 
>> 
>> If you are on the latest version of pfSense the version is : OpenSSL 0.9.8y 
>> 5 Feb 2013
>> 
>> So you are not vulnerable to this heart bleed bug ! 
> 
> But I see this:
> 
> /usr/bin/openssl version
> OpenSSL 0.9.8y 5 Feb 2013
> 
> /usr/local/bin/openssl version
> OpenSSL 1.0.1e 11 Feb 2013
> 

Mmmh, this is true : on 2.1.1 in —> /usr/local/bin/openssl : 

# OpenSSL 1.0.1f 6 Jan 2014

I don’t know exactly how this is used… we would need to wait for Chris 
confirmation on this. 



> -- 
> Pete Boyd
> 
> Open Plan IT - http://openplanit.co.uk
> The Golden Ear - http://thegoldenear.org
> 
> _______________________________________________
> List mailing list
> List@lists.pfsense.org
> https://lists.pfsense.org/mailman/listinfo/list

________________________________________________
«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Your provider of OpenSource Appliances

www.osnet.eu            
________________________________________________
«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
PGP ID --> 0x1BA3C2FD

_______________________________________________
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list

Reply via email to