From: | Ralf <ralf+gentoo@×××××××××××××××××××.de> | ||
---|---|---|---|
To: | gentoo-user@l.g.o | ||
Subject: | Re: [gentoo-user] 'Heartbleed' bug | ||
Date: | Thu, 10 Apr 2014 00:14:03 | ||
Message-Id: | 5345E245.1060608@ramses-pyramidenbau.de | ||
In Reply to: | [gentoo-user] 'Heartbleed' bug by Joseph |
1 | Hello Joseph, |
2 | On 04/10/2014 02:06 AM, Joseph wrote: |
3 | > Is gentoo effected by this new 'Heartbleed' bug? |
4 | yes it is, as all OpenSSL versions > 0.9.8 were affected. |
5 | And Gentoo supported those versions. |
6 | |
7 | So Gentoo also was affected but it supports the new |
8 | "heartbleed-bug-fixed" version 1.0.1g. |
9 | |
10 | I *think* that you could also use an older version disabling the |
11 | "tls-heartbeat" USE flag. |
12 | |
13 | Regards |
14 | Ralf |