Gentoo Archives: gentoo-user

From: Ralf <ralf+gentoo@×××××××××××××××××××.de>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] 'Heartbleed' bug
Date: Thu, 10 Apr 2014 00:14:03
Message-Id: 5345E245.1060608@ramses-pyramidenbau.de
In Reply to: [gentoo-user] 'Heartbleed' bug by Joseph
1 Hello Joseph,
2 On 04/10/2014 02:06 AM, Joseph wrote:
3 > Is gentoo effected by this new 'Heartbleed' bug?
4 yes it is, as all OpenSSL versions > 0.9.8 were affected.
5 And Gentoo supported those versions.
6
7 So Gentoo also was affected but it supports the new
8 "heartbleed-bug-fixed" version 1.0.1g.
9
10 I *think* that you could also use an older version disabling the
11 "tls-heartbeat" USE flag.
12
13 Regards
14 Ralf