Heartbleed | search
Click here to view Heartbleed news from 60+ newspapers.
Bookmark or Share- Is OpenVPN UDP vulnerable to heartbleed? - Server FaultIs OpenVPN UDP vulnerable to heartbleed? I need to decide if I'm going to rebuild some servers, but they are very carefully firewalled; 1194/TCP is one of the firewalled ports (yay whitelist!). 1194/UDP is used (mission critical).
- Heartbleed, which specific services must be restarted?Trying to figure out exactly what services should be restarted after patching openssl against Heartbleed. At least one post mentions restarting: sshd, apache, nginx, postfix, dovecot, courier, pure-ftpd, bind, mysql. Is there a command that can be run to see what running services are dependent on openssl?
- linux - Heartbleed: how to reliably and portably check the OpenSSL ...I was looking at a reliable and portable way to check the OpenSSL version on GNU/Linux and other systems, so users can easily discover if they should upgrade their SSL because of the Heartbleed bug. I thought it would be easy, but I quickly ran into a problem on Ubuntu 12.04 LTS with the latest OpenSSL 1.0.1g: openssl version -a
- Heartbleed: What is it and what are options to mitigate it?See the EFF's Wild at Heart: Were Intelligence Agencies Using Heartbleed in November 2013? And Bloomberg reports the NSA had weaponized the exploit shortly after the vulnerability was introduced. See NSA Said to Exploit Heartbleed Bug for Intelligence for Years. However, the US Intelligence Community denies Bloomberg's claims. See IC ON THE RECORD.
- Heartbleed: are services other than HTTPS affected?While OpenSSH does use openssl for some key-generation functions, it does not use the TLS protocol (and in particular the TLS heartbeat extension that heartbleed attacks). So there is no need to worry about SSH being compromised, though it is still a good idea to update openssl to 1.0.1g or 1.0.2-beta2 (but you don't have to worry about ...
More
