Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #58400

Re: BHeartbleed OpenSSL vulnerability

Show all headers | View raw

On 2014-04-08, JF Mezei <jfmezei.spamnot@vaxination.ca> wrote:
> As you may have heard, a major vulnerability has been discovered with
> OpenSSL.
>
> From the command line: "openssl version" gives you the version.
>
> Snow Leopard has 0.9 so it is safe.
>
> 1.00 and 1.01 are vulnerable. You need 1.01g to fix it. (there are
> various flavours of 1.01 , not sure if openssl version provides the
> flavour or just 1.01)
>
> Not sure if Apple provided more recent versions of OpenSSL sicne Snow
> Leopard
>
> This vulnerability affects OpenSSL only in server mode, not in client mode.
>
> And since Apple widthdrew from the server business during Snow Leopard
> era, there are likely not many servers that run later versions of OS-X
> (other than home servers which serve files and not really internet facing)

More info - including a way to test your own server - here:

<http://filippo.io/Heartbleed/>

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

BHeartbleed OpenSSL vulnerability JF Mezei <jfmezei.spamnot@vaxination.ca> - 2014-04-08 16:18 -0400
  Re: BHeartbleed OpenSSL vulnerability Jolly Roger <jollyroger@pobox.com> - 2014-04-08 20:26 +0000
  Re: BHeartbleed OpenSSL vulnerability JF Mezei <jfmezei.spamnot@vaxination.ca> - 2014-04-08 16:27 -0400
  Re: BHeartbleed OpenSSL vulnerability billy@MIX.COM - 2014-04-08 22:18 +0000
    Re: BHeartbleed OpenSSL vulnerability Tim McNamara <timmcn@bitstream.net> - 2014-04-08 18:53 -0500
      Re: BHeartbleed OpenSSL vulnerability Joanna Shuttleworth <js@example.com> - 2014-04-09 00:00 +0000
        Re: BHeartbleed OpenSSL vulnerability Tim McNamara <timmcn@bitstream.net> - 2014-04-08 23:20 -0500
          Re: BHeartbleed OpenSSL vulnerability David Ritz <dritz@mindspring.com> - 2014-04-09 07:56 -0500
        Re: BHeartbleed OpenSSL vulnerability billy@MIX.COM - 2014-04-10 06:08 +0000
      Re: BHeartbleed OpenSSL vulnerability Jolly Roger <jollyroger@pobox.com> - 2014-04-09 00:50 +0000
  Re: BHeartbleed OpenSSL vulnerability Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-04-16 13:18 +0000

csiph-web