<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div><div>We’ve got another one up on: <a href="https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp" style="color: purple; font-size: 15px;">https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp</a></div><div><br></div><div><br></div><div><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><span lang="EN-US">Nick.<o:p></o:p></span></p><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><span lang="EN-US"> </span></p><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><span lang="EN-US">-------------------------------------------------------<o:p></o:p></span></p><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><span lang="EN-US">Nick Savvides, </span>Senior Principal Systems Engineer (Security)</p><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><span lang="EN-US"><span style="color: blue; "><a href="mailto:nick_savvides@symantec.com" style="color: purple; ">nick_savvides@symantec.com</a>, </span></span>Mobile: +61 434 600 870</p></div></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Joshua D'Alton <<a href="mailto:joshua@railgun.com.au">joshua@railgun.com.au</a>><br><span style="font-weight:bold">Date: </span> Thursday, 10 April 2014 15:47 <br><span style="font-weight:bold">To: </span> Shain Singh <<a href="mailto:shain.singh@gmail.com">shain.singh@gmail.com</a>><br><span style="font-weight:bold">Cc: </span> "<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>" <<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>><br><span style="font-weight:bold">Subject: </span> Re: [AusNOG] Fwd: Heartbleed Bug<br></div><div><br></div><div><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><div><div dir="ltr">Another tool: <a href="https://ssltools.geotrust.com/checker/views/certCheck.jsp">https://ssltools.geotrust.com/checker/views/certCheck.jsp</a> though it seems to be being "ddosed" due to use.</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Apr 9, 2014 at 6:55 PM, Shain Singh <span dir="ltr">
<<a href="mailto:shain.singh@gmail.com" target="_blank">shain.singh@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi,<br><br><br><br>
On 9 April 2014 05:48, Colin Stubbs<br><div class=""><<a href="mailto:colin.stubbs@equatetechnologies.com.au">colin.stubbs@equatetechnologies.com.au</a>> wrote:<br>
><br>
> Yeap, I can confirm that.<br>
><br>
> Note however,<br>
><br>
> 11.5's management interface is affected. That's the webGUI to config/manage<br>
> the box which runs Apache w/ OpenSSL.<br>
><br>
> SSL virtual hosts terminated by TMOS __are not__ affected, e.g. the<br>
> production services hosted by the F5.<br><br></div>
Only if you are not using the COMPAT directive in your SSL profiles<br>
(which the majority of people won't).<br><div class=""><br><br>
><br>
> Definitely doesn't affect 11.4 or below from the testing I've now done.<br>
><br>
> -Colin<br>
><br>
> On 8 April 2014 14:09, Mick O'Rourke <<a href="mailto:mkorourke%2Bausnog@gmail.com">mkorourke+ausnog@gmail.com</a>> wrote:<br>
>><br>
>> > F5 load balancers are vulnerable.<br>
>><br>
>> Apparently only 11.5.x versions of BIG IP.<br>
>><br>
>><br><br></div>
The official release from F5<br><a href="http://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html" target="_blank">http://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html</a><br><br>
Disclaimer: I am an F5 employee.<br><br>
For security related alerts on F5, you can sign up here (you need to<br>
provide contact details besides email):<br><a href="https://interact.f5.com/technews.html" target="_blank">https://interact.f5.com/technews.html</a><br><span class="HOEnZb"><font color="#888888"><br><br>
--<br>
Shaineel Singh<br>
e: <a href="mailto:shain.singh@gmail.com">shain.singh@gmail.com</a><br>
p: <a href="tel:%2B61%20422%20921%20951" value="+61422921951">+61 422 921 951</a><br>
w: <a href="http://buffet.shainsingh.com" target="_blank">http://buffet.shainsingh.com</a><br><br>
--<br>
"Too many have dispensed with generosity to practice charity" - Albert Camus<br></font></span><div class="HOEnZb"><div class="h5">_______________________________________________<br>
AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br></div></div></blockquote></div><br></div></div></div></span></body></html>