topic Re: SSL Vulnerability in Operating System - NonStop OS

SSL Vulnerability

VNB-Pete — Wed, 09 Apr 2014 13:53:05 GMT

Is there any public statement confirming that the HP SSL functionality is not affected by the recently discovered SSL vulnerability? As best as I can determine, HP is using version 1.0.0 of the OpenSSL library, which clears it from the range reportedly affect (1.0.1 through 1.0.1f), but I would like to provide my security officers something more concrete.

Reference Article

Re: SSL Vulnerability

Twofish2 — Fri, 07 Nov 2014 09:12:36 GMT

See:

https://www.comforte.com/resources/news/openssl-security-vulnerabilities-15oct2014/

https://www.comforte.com/resources/news/analysis-of-ssl-poodle-attack-published-14-oct-2014/

https://www.comforte.com/resources/news/openssl-security-vulnerabilities-06aug2014/

https://www.comforte.com/resources/news/openssl-security-vulnerabilities-05jun2014/

https://www.comforte.com/resources/news/openssl-heartbleed/