[tor-talk] Orbot v13.0.6-BETA-7 vs. heartbleed

Nusenu BM-2D8wMEVgGVY76je1WXNPfo8SrpZt5yGHES at bitmessage.ch
Tue Apr 15 20:45:27 UTC 2014


Hi Nathan,

from the changelog of  v13.0.6-BETA-3

> CHANGELOG for v13.0.6-BETA-3
> 
[...]
> 7229c52 updated to openssl 1.0.1g


The "About" in Orbot v13.0.6-BETA-7 still says:

3rd-Party-Software:
[...]
OpenSSL v1.0.1e: http://www.openssl.org

which would be a version that is vulnerable to HB.

Is the "About" or the changelog wrong here?


thanks!





More information about the tor-talk mailing list