7 Apr
2014
7 Apr
'14
10:20 p.m.
On Mon, 7 Apr 2014, Michael Jerris wrote:
More information available at http://heartbleed.com/ . You should probably upgrade openssl to at least 1.0.1g and re-generate all keys and invalidate old keys.
* nod * looks material. I mentioned side channel leakage [of which this is a variant], and the need to move to Perfect Forward Security in my post last week The speculation in the heartbleed site as to CentOS 6 series PRIOR to the 6.5 updates, seems to be partiall ruled out by: https://access.redhat.com/security/cve/CVE-2014-0160 but the 6.5 update srouces, sadly, adds it, and so we can look for an openssl update there -- Russ herrold