04-16-2014, 02:12 PM
What is Heartbleed Bug ?
Its a serious vulnerability in OpenSSL cryptographic software library .
If any system using vulnerable versions of OpenSSL, anyone can read the memory of the system including encrypted data and private keys.
Infected openssl versions ?.
OpenSSL version 1.0.0 branch -- NOT vulnerable
OpenSSL version 0.9.8 branch -- NOT vulnerable
OpenSSL version 1.0.1 through 1.0.1f (inclusive) -- vulnerable
OpenSSL version 1.0.1g -- NOT vulnerable
Check your OpenSSL version
root@host:~$ openssl version
How to Fix ?
Update your OpenSSL to latest version .
OpenSSL 1.0.1g released on 7th of April 2014 fixes the bug
More info : http://heartbleed.com
Its a serious vulnerability in OpenSSL cryptographic software library .
If any system using vulnerable versions of OpenSSL, anyone can read the memory of the system including encrypted data and private keys.
Infected openssl versions ?.
OpenSSL version 1.0.0 branch -- NOT vulnerable
OpenSSL version 0.9.8 branch -- NOT vulnerable
OpenSSL version 1.0.1 through 1.0.1f (inclusive) -- vulnerable
OpenSSL version 1.0.1g -- NOT vulnerable
Check your OpenSSL version
root@host:~$ openssl version
How to Fix ?
Update your OpenSSL to latest version .
OpenSSL 1.0.1g released on 7th of April 2014 fixes the bug
More info : http://heartbleed.com