Heartbleed OpenSSL exposure for Arch?

This forum is for Marvell Kirkwood devices such as the GoFlex Home/Net, PogoPlug v1/v2, SheevaPlug, and ZyXEL devices.
Topic locked

Heartbleed OpenSSL exposure for Arch?

Postby unplugged » Fri Apr 11, 2014 2:31 pm

I'm a n00b at this, but I have a Pogo running Arch serving as a pseudo-NAS on my home network for media content. Is there any exposure to this OpenSSL fiasco?
unplugged
 
Posts: 8
Joined: Fri Sep 03, 2010 2:35 pm
Top

Re: Heartbleed OpenSSL exposure for Arch?

Postby karog » Fri Apr 11, 2014 3:35 pm

$this->bbcode_second_pass_quote('unplugged', 'I')'m a n00b at this, but I have a Pogo running Arch serving as a pseudo-NAS on my home network for media content. Is there any exposure to this OpenSSL fiasco?

Check the version of openssl you are running. The latest available via pacman is openssl 1.0.1.g-1 which is NOT vulnerable.

1.0.1 through 1.0.1.f-1 ARE reportedly vulnerable.
karog
 
Posts: 305
Joined: Thu Jan 05, 2012 7:55 pm
Top

Re: Heartbleed OpenSSL exposure for Arch?

Postby WarheadsSE » Fri Apr 11, 2014 4:54 pm

This was addressed in Arch within one day of the announcement. Update your system.
Core Developer
Remember: Arch Linux ARM is entirely community donation supported!
WarheadsSE
Developer
 
Posts: 6807
Joined: Mon Oct 18, 2010 2:12 pm
Top

Re: Heartbleed OpenSSL exposure for Arch?

Postby Geoff » Fri Apr 11, 2014 8:40 pm

McAfee recommends to regenerate all self-signed keys, including your OpenVPN keys. What a hassle!
Geoff
 
Posts: 231
Joined: Wed Mar 09, 2011 5:14 pm
Top

Re: Heartbleed OpenSSL exposure for Arch?

Postby moonman » Fri Apr 11, 2014 9:05 pm

I would like to point out the openssl-cryptodev is at version 1.0.1e but has been patched and is safe to use.
Pogoplug V4 | GoFlex Home | Raspberry Pi 4 4GB | CuBox-i4 Pro | ClearFog | BeagleBone Black | Odroid U2 | Odroid C1 | Odroid XU4
-----------------------------------------------------------------------------------------------------------------------
[armv5] Updated U-Boot | [armv5] NAND Rescue System
moonman
Developer
 
Posts: 3388
Joined: Sat Jan 15, 2011 3:36 am
Top
Topic locked

Return to Marvell Kirkwood

Who is online

Users browsing this forum: No registered users and 4 guests

Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group    © Arch Linux ARM