Changes between Version 3 and Version 4 of heartbleed

Timestamp:

04/08/14 17:42:35 (10 years ago)

Author:

Steffan Karger

Comment:

--

heartbleed

@@ -21 +21 @@
 Android shipped OpenSSL 1.0.1 as of 4.1, but disable heartbeats since 4.1.2. That means only Android 4.1(.0) and 4.1.1 are vulnerable.
 
+== What about Windows clients? ==
+The Windows client binaries are shipped with OpenSSL. At least all OpenVPN 2.3 binaries up to and including 2.3.2-I003 are vulnerable. New binaries are available on http://openvpn.net/index.php/open-source/downloads.html .
+
 == Are PolarSSL builds affected too? ==
 No. See [#ref2 2].