Details of the bug are hear: http://heartbleed.com/
Does the wallet use the heartbeat facility of openssl? Is it vulnerable?
Please assess the effects of openssl heartbleed bug on the wallet security #4021
issue jfkirkley opened this issue on April 8, 2014-
jfkirkley commented at 3:14 AM on April 8, 2014: none
- jfkirkley renamed this:
Please access the effects of openssl heartbleed bug on the wallet security
Please assess the effects of openssl heartbleed bug on the wallet security
on Apr 8, 2014 -
laanwj commented at 8:34 AM on April 8, 2014: member
The vulnerability does not affect the bitcoin protocol or wallet. It may affect auxilary usage of TLS in RPC-over-SSL and when fetching payment requests over HTTPS.
Not a big deal, but we are going to release a 0.9.1 that updates OpenSSL (see pull #4023 if you want to test) and fixes some other minor issues from 0.9.0.
-
jfkirkley commented at 12:26 PM on April 8, 2014: none
Thank you for the analysis. I will definitely do the upgrade.
- brossi cross-referenced this on Apr 9, 2014 from issue Updates for OpenSSL by brossi
- laanwj closed this on May 2, 2014
-
laanwj commented at 7:26 AM on May 2, 2014: member
0.9.1 has been released with a new version of OpenSSL a while ago - this issue can be closed.
- bitcoin locked this on Sep 8, 2021
