Re: [OpenWrt-Devel] OpenSSL vulnerability

2014-04-07 Thread Sami Olmari
And this bug is particularly nasty one, should be fixed ASAP. On Tue, Apr 8, 2014 at 2:10 AM, Ben West wrote: > About the exploit: > http://heartbleed.com/ > > The fixed version (released recently) is 1.01g+: > https://www.openssl.org/news/secadv_20140407.txt > > Trunk appears to be using 1.01f:

[OpenWrt-Devel] OpenSSL vulnerability

2014-04-07 Thread Ben West
About the exploit: http://heartbleed.com/ The fixed version (released recently) is 1.01g+: https://www.openssl.org/news/secadv_20140407.txt Trunk appears to be using 1.01f: https://dev.openwrt.org/browser/trunk/package/libs/openssl/Makefile AA is on 1.01e https://dev.openwrt.org/browser/tags/att