For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Paul_Roberts_16's avatar
Paul_Roberts_16
Icon for Nimbostratus rankNimbostratus
Jun 09, 2014

SSL irregularities in 10.2.4/11.4.1 LTMs. Vulnerable to Heartbleed or not?

So our network security team regularly sweeps our network looking for unpatched issues, and this week we recieved a whole pile of alerts about our LTMs and GTMs for the Heartbleed vulnerability on po...
application delivery
BIG-IP DNS
LTM
management
security
Paul_Roberts_16's avatar
Paul_Roberts_16
Icon for Nimbostratus rankNimbostratus
Jun 09, 2014

Joy. It looks like they used parts of OpenSSL 1.0.1e to build this thing sitting in /shared/bin/big3d. The one in /usr/sbin is still 0.9.8y at least tho'.

 

After asking around here quite a bit, it appears the Enterprise Manager upgraded the thing on us.