On Mon, 7 Apr 2014, Michael Jerris wrote:

> More information available at  http://heartbleed.com/ .  You should probably upgrade openssl to at least 1.0.1g and re-generate all keys and invalidate old keys.

* nod * looks material.  I mentioned side channel leakage [of
which this is a variant], and the need to move to Perfect
Forward Security in my post last week

The speculation in the heartbleed site as to CentOS 6 series
PRIOR to the 6.5 updates, seems to be partiall ruled out by:
        https://access.redhat.com/security/cve/CVE-2014-0160

but the 6.5 update srouces, sadly, adds it, and so we can look
for an openssl update there

-- Russ herrold

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org