SSL FREAK Attack

[mtessier_]

Any word on whether we need to be concerned over the FREAK SSL vulnerability?

Apparently this was patched in OpenSSL version 1.0.1k.

https://threatpost.com/new-freak-attack-threatens-many-ssl-clients/111390

https://nakedsecurity.sophos.com/2015/03/04/the-freak-bug-in-tlsssl-what-you-need-to-know/

[Kita_ · Accepted solution]

Here is our official statement:

http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB29833&actp=search&viewlocale=en_US&sear...

[mtessier_]

Excellent. Thank you, Kita.