FreeBSD Security Advisory FreeBSD-SA-14:06.openssl

Carlo Strub cs at FreeBSD.org
Thu Apr 10 10:10:22 UTC 2014


> 
> SSH is not affected.
> 

SSH is indeed not affected, but I guess you should still consider the secret sshd key on your otherwise affected server as burnt, as it might have been in the memory too while an attacker was inspecting it via heartbleed. Better recreate the secret ssh key and all other secret keys on your server as well. But, again, the OpenSSH protocol/software per se are not affected.


More information about the freebsd-security mailing list