Re: heartbleed: is 5.1-stable vulnerable as it reports

2014-04-27 Thread Tomas Bodzar
On Sat, Apr 26, 2014 at 6:25 PM, Yassen Damyanov wrote: > Hello list, > > I worry about my 5.1 servers being at risk due to the heartbleed bug, as > they report openssl 1.0.1f which is known to be vulnerable: > Funny to see people being scared about security issue of particular component of syste

Re: heartbleed: is 5.1-stable vulnerable as it reports

2014-04-27 Thread Ralph Siegler
On Sat, 26 Apr 2014 09:27:50 -0700, Yassen Damyanov wrote: > Pardon me, just saw that it says 1.0.0f, not 1.0.1f. > Fear makes the wolf look bigger! > Y. > > There are other things to worry about if you are running 5.1, what about that use-after-free race condition openssl has that is patched

Re: heartbleed: is 5.1-stable vulnerable as it reports

2014-04-26 Thread Yassen Damyanov
Pardon me, just saw that it says 1.0.0f, not 1.0.1f. Fear makes the wolf look bigger! Y. > On Saturday, April 26, 2014 7:25 PM, Yassen Damyanov > wrote: > > Hello list, > > I worry about my 5.1 servers being at risk due to the heartbleed bug, as they > report openssl 1.0.1f which is known

heartbleed: is 5.1-stable vulnerable as it reports

2014-04-26 Thread Yassen Damyanov
Hello list, I worry about my 5.1 servers being at risk due to the heartbleed bug, as they report openssl 1.0.1f which is known to be vulnerable: mgate1:~ # uname -a OpenBSD mgate1.itlabs.bg 5.1 GENERIC#2 amd64 mgate1:~ # openssl version -a OpenSSL 1.0.0f 4 Jan 2012 built on: date not available