226
Web applications / Re: 'Heartbleed' vulnerability - OS/2 web server fixes
« on: April 12, 2014, 04:05:20 am »
Thank you.
After I've checked RPM just after the vulnerability became available, and found that there is version 1.0.0a that is not vulnerable, and that I don't use SSL in Apache, I settled down and added the link to #netlabs topic.
I can't remember any other application that uses OpenSSL, but if it is, please say what one.
We should check that it uses the openssl.dll that ships via netlabs repository, or if it uses its own, that it is not vulnerable.
After I've checked RPM just after the vulnerability became available, and found that there is version 1.0.0a that is not vulnerable, and that I don't use SSL in Apache, I settled down and added the link to #netlabs topic.
I can't remember any other application that uses OpenSSL, but if it is, please say what one.
We should check that it uses the openssl.dll that ships via netlabs repository, or if it uses its own, that it is not vulnerable.

