Extreme Networks update on the OpenSSL vulnerability called “Heartbleed"

[Tamera_Rousseau]

Patches will be available for all affected products by Monday (4/14). Reference Extreme Network CERT VU#720951 Vulnerability Advisory note for additional details. http://learn.extremenetworks.com/rs/extreme/images/CERT_VU%23720951_Vulnerability_Advisory_04_11_201...

[Paul_Poyant]

This information was added yesterday to the end of the NetSight Patch readme file, in the copy that is accessible from the end of the "Article ID: 16131" as both embedded and hyperlinked above:

code:

Optional verification of results:

code:

In 'dpkg -l | grep ssl' command output, the "libssl1.0.0" and "openssl" packages should display version "1.0.1-4ubuntu5.12" if the patch has been successfully applied.

The last time I checked (yesterday), it had not yet been added to the copy out on the NMS Product page.

[Su__Kevin]

Thanks, Paul.

[Kevin_Su]

Hi

After patch the NetSight, how can I make sure the bug has been fixed?

Thanks.
Kevin

[Andy_M]

This reply was created from a merged topic originally titled heartbleed OpenSSL vulnerability. Does anyone have any information on whether or not and which Enterasys or Extreme products are affected by this vulnerability?