@JamesChevalier @sferik Thanks but on Ubuntu `openssl version` ... • Aaron Parecki

50°F

Erik Berlin https://twitter.com/sferik • Apr 8
To check the version of OpenSSL Ruby was built with:
ruby -r openssl -e 'puts OpenSSL::OPENSSL_VERSION'
Anything below 1.0.1g is vulnerable.

@JamesChevalier @sferik Thanks but on Ubuntu `openssl version` always says "OpenSSL 1.0.1 14 Mar 2012" even for the correctly patched version. #heartbleed http://askubuntu.com/questions/444702/how-to-patch-cve-2014-0160-in-openssl

Portland, Oregon, USA

Tue, Apr 8, 2014 3:06pm -07:00 #heartbleed

2 replies
Have you written a response to this? Let me know the URL:
- Aaron Parecki aaronparecki.com
  
  @sferik Yep. I managed to track it down tho: aaronparecki.com/articles/2014/… #heartbleed (aaron.pk/r4VU4)
  
  Tue, Apr 8, 2014 4:57pm -07:00 (via brid-gy.appspot.com)
- Erik Michaels-Ober github.com/sferik
  
  @aaronpk @JamesChevalier Wow. That’s horrible.
  
  Tue, Apr 8, 2014 3:20pm -07:00 (via brid-gy.appspot.com)

Posted in /replies