no affect on security issue of FreeBSD-SA-14:08.tcp ?

[mauchida26]

Hi,

Is nimble os affected FreeBSD-SA-14:08.tcp?

I heard nimble os was built based on FreeBSD, and am afraid I can't find 

which version is based in nimble os. But it seems there're possibility of

influence for this article.

http://www.freebsd.org/security/advisories/FreeBSD-SA-14:08.tcp.asc

How about nimble os 1.4 and 2.0?  Both affected or neither of them affected?

Please advise.

Thank you,

Masahiro Uchida

[dannyboy99 · Accepted solution]

A CVE listings page including effected versions and mitigation would probably be helpful here, although I've already seen a proactive notification from Nimble for Heartbleed.

You could run a Nessus scan or similar to check, although you can get a lot of false positives taking this approach.