Re: [Puppet Users] Heartbleed and Puppet-Supported Operating Systems

2014-04-10 Thread Moses Mendoza
Hi Darin, Just to clarify - I believe SLES 11 was listed under the section "Operating Systems that are Not Vulnerable." Are you referring to a different document that has been posted? On Thu, Apr 10, 2014 at 3:34 AM, Darin Perusich wrote: > You've listed SLES 11 as vulnerable, it is not. Howeve

Re: [Puppet Users] Heartbleed and Puppet-Supported Operating Systems

2014-04-10 Thread Darin Perusich
You've listed SLES 11 as vulnerable, it is not. However OpenSUSE 12.3 and 13.1 are affected and patches have been released. http://support.novell.com/security/cve/CVE-2014-0160.html http://lists.opensuse.org/opensuse-security-announce/2014-04/msg5.html On Apr 10, 2014 1:22 AM, "Eric Sorenson"

[Puppet Users] Heartbleed and Puppet-Supported Operating Systems

2014-04-09 Thread Eric Sorenson
Like you, we are still learning about the full extent of the OpenSSL security bug dubbed Heartbleed, and what we need to do to help Puppet users remediate the vulnerability. We published step-by-step documentation for remediating yesterday [http://puppetlabs.com/blog/heartbleed-security-bug-upd