<div dir="ltr"><div>Ho appena fatto un "sudo apt-get update" e "sudo apt-get upgrade" su EdgeOS del mio EdgeMAX e ha aggiornato proprio OpenSSL:<br><pre id="console"><div class="" style="height:14px"><span style class="">nazza@Nazza-Edge:~$ sudo apt-get upgrade</span><span style> </span></div>
<div class="" style="height:14px"><span style class="">Reading package lists... Done</span><span style> </span></div><div class="" style="height:14px"><span style class="">Building dependency tree... Done</span><span style> </span></div>
<div class="" style="height:14px"><span style class="">The following packages will be upgraded:</span><span style> </span></div><div class="" style="height:14px"><span style class=""> openssh-client openssh-server ssh</span><span style> </span></div>
<div class="" style="height:14px"><span style class="">3 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.</span><span style> </span></div><div class="" style="height:14px"><span style class="">Need to get 1253 kB of archives.</span><span style> </span></div>
<div class="" style="height:14px"><span style class="">After this operation, 45.1 kB disk space will be freed.</span><span style> </span></div><div class="" style="height:14px"><span style class="">Do you want to continue [Y/n]? Y</span><span style> </span></div>
</pre></div>Per AirOS non ho ancora visto<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-04-11 9:02 GMT+02:00 Saverio Proto <span dir="ltr"><<a href="mailto:zioproto@gmail.com" target="_blank">zioproto@gmail.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Ciao,<br>
<br>
inoltro da OpenWrt Devel.<br>
<br>
OpenWrt ha gia rilasciato il nuovo ipkg di OpenSSL.<br>
<br>
Alla grande il sui miei apparato Scooreggione sono entrato ed ho dato i comandi<br>
<br>
opkg update<br>
opkg install openssl<br>
<br>
ed ho aggiornato openssl senza dover riflashare.<br>
<br>
Io non ho piu apparati miei con AirOS. Chi ha accesso ad apparati<br>
AirOS con Sburratone, puo fare ldd per controllare il web server<br>
lighttpd che versione di OpenSSL usa ?<br>
<br>
Stanno uscendo i tools per sfruttare il bug. Questo è un bug serio.<br>
<br>
Saverio<br>
<br>
<br>
<br>
---------- Forwarded message ----------<br>
From: John Crispin <<a href="mailto:john@phrozen.org">john@phrozen.org</a>><br>
Date: 2014-04-10 22:45 GMT+02:00<br>
Subject: [OpenWrt-Devel] OpenSSL: update to 1.0.1g - heartbleed bug<br>
To: OpenWrt Development List <<a href="mailto:openwrt-devel@lists.openwrt.org">openwrt-devel@lists.openwrt.org</a>><br>
<br>
<br>
Heartbleed - libopenssl AA binary feed update<br>
<br>
we updated the AA release. the files libopenssl_1.0.1e-1_*.ipk have<br>
been replaced with libopenssl_1.0.1g-1_*.ipk and the Packages index<br>
was updated. If you use openssl on your unit you need to run :<br>
<br>
# opkg update<br>
# opkg upgrade libopenssl<br>
<br>
In order to ensure that all affected services are using the updated<br>
OpenSSL library it is recommended to reboot the device after applying<br>
the upgrade.<br>
<br>
To find out more about the bug go to - <a href="http://heartbleed.com/" target="_blank">http://heartbleed.com/</a><br>
<br>
Note that default OpenWrt installations are not vulnerable to the<br>
particular bug, neither the builtin SSH server nor the optional LuCI<br>
SSL support rely on OpenSSL for cryptography.<br>
<br>
The OpenSSL library is not installed within the stock images available<br>
on the download server.<br>
<br>
This is not a lightweight bug. Please take it serious and check your unit.<br>
<br>
OpenWrt Developers<br>
_______________________________________________<br>
openwrt-devel mailing list<br>
<a href="mailto:openwrt-devel@lists.openwrt.org">openwrt-devel@lists.openwrt.org</a><br>
<a href="https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel" target="_blank">https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel</a><br>
</blockquote></div><br></div>