[AusNOG] Heartbleed Bug

[Colin Stubbs]

Or just use 'rpm -qi openssl', which will give you better information about
the actual package installed and what the build originated from. Ssh -V
won't help you determine what patches have been backported.

--

Sent from a mobile device. Correct spelling and accurate use of grammar is
unlikely to have occurred.
On 10/04/2014 4:48 pm, "Andy S." <ciscoarc7 at gmail.com> wrote:

> Also, for those need to check openssl version in F5, ssh to it and type
>
> ssh -V
>
> Cheers.
>
> On Thursday, April 10, 2014, Andy S. <ciscoarc7 at gmail.com> wrote:
>
>> I used Qualy SSL Labs test for our F5.
>>
>> https://www.ssllabs.com/ssltest
>>
>> Cheers.
>> Andy
>>
>> On Thursday, April 10, 2014, Joshua D'Alton <joshua at railgun.com.au>
>> wrote:
>>
>>> Another tool:  https://ssltools.geotrust.com/checker/views/certCheck.jsp  though it seems to be being "ddosed" due to use.
>>>
>>>
>>> On Wed, Apr 9, 2014 at 6:55 PM, Shain Singh <shain.singh at gmail.com>wrote:
>>>
>>>> Hi,
>>>>
>>>>
>>>>
>>>> On 9 April 2014 05:48, Colin Stubbs
>>>> <colin.stubbs at equatetechnologies.com.au> wrote:
>>>> >
>>>> > Yeap, I can confirm that.
>>>> >
>>>> > Note however,
>>>> >
>>>> > 11.5's management interface is affected. That's the webGUI to
>>>> config/manage
>>>> > the box which runs Apache w/ OpenSSL.
>>>> >
>>>> > SSL virtual hosts terminated by TMOS __are not__ affected, e.g. the
>>>> > production services hosted by the F5.
>>>>
>>>> Only if you are not using the COMPAT directive in your SSL profiles
>>>> (which the majority of people won't).
>>>>
>>>>
>>>> >
>>>> > Definitely doesn't affect 11.4 or below from the testing I've now
>>>> done.
>>>> >
>>>> > -Colin
>>>> >
>>>> > On 8 April 2014 14:09, Mick O'Rourke <mkorourke+ausnog at gmail.com>
>>>> wrote:
>>>> >>
>>>> >> > F5 load balancers are vulnerable.
>>>> >>
>>>> >> Apparently only 11.5.x versions of BIG IP.
>>>> >>
>>>> >>
>>>>
>>>> The official release from F5
>>>> http://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html
>>>>
>>>> Disclaimer: I am an F5 employee.
>>>>
>>>> For security related alerts on F5, you can sign up here (you need to
>>>> provide contact details besides email):
>>>> https://interact.f5.com/technews.html
>>>>
>>>>
>>>> --
>>>> Shaineel Singh
>>>> e: shain.singh at gmail.com
>>>> p: +61 422 921 951
>>>> w: http://buffet.shainsingh.com
>>>>
>>>> --
>>>> "Too many have dispensed with generosity to practice charity" - Albert
>>>> Camus
>>>> _______________________________________________
>>>> AusNOG mailing list
>>>> AusNOG at lists.ausnog.net
>>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>>
>>>
>>>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140410/8ecba527/attachment.html>