heartbleed

Open lowks opened this issue 11 years ago • 1 comments

(linode)lowks@lowkster:~/src/go> /home/lowks/go/bin/heartbleeder expm.co
VULNERABLE(expm.co:443) - has the heartbeat extension enabled and is vulnerable to CVE-2014-0160

Apr 11 '14 03:04 lowks

Thanks for catching this! HTTP(s) frontend seems to be handled by nginx/1.1.19. I will need to move and rebuild this server anyway, but for this to happen I'd rather make sure expm is rewritten again (elixir 0.13 style). Packages can be then reimported.

Apr 11 '14 04:04 yrashk