<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<div class="PlainText">Airos nada<br>
<br>
--- Messaggio originale ---<br>
<br>
Da: "Edoardo Mazzaracchio" <edoardo.mazzaracchio@gmail.com><br>
Inviata: 11 aprile 2014 10:45<br>
A: nodi-roma@ml.ninux.org<br>
Cc: "wireless" <wireless@ml.ninux.org><br>
Oggetto: Re: [Ninux-Wireless] [ninux-roma] OpenWrt e AirOs - OpenSSL: update to 1.0.1g - heartbleed bug<br>
<br>
</div>
<div>
<div dir="ltr">
<div>Ho appena fatto un "sudo apt-get update" e "sudo apt-get upgrade" su EdgeOS del mio EdgeMAX e ha aggiornato proprio OpenSSL:<br>
<pre id="x_console"><div class="" style="height:14px"><span class="" style="">nazza@Nazza-Edge:~$ sudo apt-get upgrade</span><span style=""> </span></div>
<div class="" style="height:14px"><span class="" style="">Reading package lists... Done</span><span style=""> </span></div><div class="" style="height:14px"><span class="" style="">Building dependency tree... Done</span><span style=""> </span></div>
<div class="" style="height:14px"><span class="" style="">The following packages will be upgraded:</span><span style=""> </span></div><div class="" style="height:14px"><span class="" style=""> openssh-client openssh-server ssh</span><span style=""> </span></div>
<div class="" style="height:14px"><span class="" style="">3 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.</span><span style=""> </span></div><div class="" style="height:14px"><span class="" style="">Need to get 1253 kB of archives.</span><span style=""> </span></div>
<div class="" style="height:14px"><span class="" style="">After this operation, 45.1 kB disk space will be freed.</span><span style=""> </span></div><div class="" style="height:14px"><span class="" style="">Do you want to continue [Y/n]? Y</span><span style=""> </span></div>
</pre>
</div>
Per AirOS non ho ancora visto<br>
</div>
<div class="x_gmail_extra"><br>
<br>
<div class="x_gmail_quote">2014-04-11 9:02 GMT+02:00 Saverio Proto <span dir="ltr">
<<a href="mailto:zioproto@gmail.com" target="_blank">zioproto@gmail.com</a>></span>:<br>
<blockquote class="x_gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
Ciao,<br>
<br>
inoltro da OpenWrt Devel.<br>
<br>
OpenWrt ha gia rilasciato il nuovo ipkg di OpenSSL.<br>
<br>
Alla grande il sui miei apparato Scooreggione sono entrato ed ho dato i comandi<br>
<br>
opkg update<br>
opkg install openssl<br>
<br>
ed ho aggiornato openssl senza dover riflashare.<br>
<br>
Io non ho piu apparati miei con AirOS. Chi ha accesso ad apparati<br>
AirOS con Sburratone, puo fare ldd per controllare il web server<br>
lighttpd che versione di OpenSSL usa ?<br>
<br>
Stanno uscendo i tools per sfruttare il bug. Questo รจ un bug serio.<br>
<br>
Saverio<br>
<br>
<br>
<br>
---------- Forwarded message ----------<br>
From: John Crispin <<a href="mailto:john@phrozen.org">john@phrozen.org</a>><br>
Date: 2014-04-10 22:45 GMT+02:00<br>
Subject: [OpenWrt-Devel] OpenSSL: update to 1.0.1g - heartbleed bug<br>
To: OpenWrt Development List <<a href="mailto:openwrt-devel@lists.openwrt.org">openwrt-devel@lists.openwrt.org</a>><br>
<br>
<br>
Heartbleed - libopenssl AA binary feed update<br>
<br>
we updated the AA release. the files libopenssl_1.0.1e-1_*.ipk have<br>
been replaced with libopenssl_1.0.1g-1_*.ipk and the Packages index<br>
was updated. If you use openssl on your unit you need to run :<br>
<br>
# opkg update<br>
# opkg upgrade libopenssl<br>
<br>
In order to ensure that all affected services are using the updated<br>
OpenSSL library it is recommended to reboot the device after applying<br>
the upgrade.<br>
<br>
To find out more about the bug go to - <a href="http://heartbleed.com/" target="_blank">
http://heartbleed.com/</a><br>
<br>
Note that default OpenWrt installations are not vulnerable to the<br>
particular bug, neither the builtin SSH server nor the optional LuCI<br>
SSL support rely on OpenSSL for cryptography.<br>
<br>
The OpenSSL library is not installed within the stock images available<br>
on the download server.<br>
<br>
This is not a lightweight bug. Please take it serious and check your unit.<br>
<br>
OpenWrt Developers<br>
_______________________________________________<br>
openwrt-devel mailing list<br>
<a href="mailto:openwrt-devel@lists.openwrt.org">openwrt-devel@lists.openwrt.org</a><br>
<a href="https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel" target="_blank">https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</body>
</html>