Heartbleed

• The Heartbleed Bug
  • http://heartbleed.com/

What versions of the OpenSSL are affected?
Status of different versions:
OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable
OpenSSL 1.0.1g is NOT vulnerable
OpenSSL 1.0.0 branch is NOT vulnerable
OpenSSL 0.9.8 branch is NOT vulnerable

• CVE-2014-0160 OpenSSL Heartbleed 脆弱性まとめ
  • http://d.hatena.ne.jp/nekoruri/20140408/heartbleed

• なぜTheo de RaadtはIETFに激怒しているのか
  • http://cpplover.blogspot.jp/2014/04/theo-de-raadtietf.html

• Heartbleed Bugはこうしてデータを盗む、のわかりやすい4コマ漫画
  • http://blogs.itmedia.co.jp/burstlog/2014/04/heartbleed-bug4-4c11.html
    • http://xkcd.com/about/

関連

• OpenSSL | OpenOpenSSL
• CDSA