From: Michael Halstead <michael@yoctoproject.org>
To: Martin Jansa <martin.jansa@gmail.com>,
Richard Schmitt <richard.schmitt@freescale.com>
Cc: "yocto@yoctoproject.org" <yocto@yoctoproject.org>
Subject: Re: openssl and heartbleed
Date: Wed, 16 Apr 2014 15:42:43 -0700 [thread overview]
Message-ID: <534F0763.6050409@yoctoproject.org> (raw)
In-Reply-To: <20140414144121.GC2132@jama>
[-- Attachment #1: Type: text/plain, Size: 879 bytes --]
On 04/14/2014 07:41 AM, Martin Jansa wrote:
> On Mon, Apr 14, 2014 at 02:37:52PM +0000, Richard Schmitt wrote:
>> Does the Yocto project plan to have some response to the heartbleed exploit in openssl in the near term? Has this already been addressed?
> It was already addressed for master, daisy, dora and dylan.
It's a separate issue but as far as the yoctoproject.org infrastructure
is concerned our primary SSL termination server runs OpenSSL 0.9.8k and
was not vulnerable to heartbleed. Other servers were not publicly
accessible and were patched quickly after the announcement. On the build
hosts the only running service linked linked against OpenSSL was NTP. We
discussed this on the
https://www.yoctoproject.org/tools-resources/community/weekly-technical-call
the day after heartbleed was announced.
Michael Halstead
Yocto Project / Sys Admin
>
>
[-- Attachment #2: Type: text/html, Size: 1740 bytes --]
prev parent reply other threads:[~2014-04-16 22:42 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-04-14 14:37 openssl and heartbleed Richard Schmitt
2014-04-14 14:41 ` Martin Jansa
2014-04-14 17:26 ` Paul Eggleton
2014-04-16 22:42 ` Michael Halstead [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=534F0763.6050409@yoctoproject.org \
--to=michael@yoctoproject.org \
--cc=martin.jansa@gmail.com \
--cc=richard.schmitt@freescale.com \
--cc=yocto@yoctoproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.