Hi Stephen, I've done the test this morning and although the result is that we are not vulnerable, but I'm a bit confused, as to how. We have hardware appliance (jetnexus), running TM version 9.4, on debian wheezy/sid, the version of openssl on the appliance is # openssl version OpenSSL 1.0.1 14 Mar 2012 # dpkg -l |grep openssl ii openssl 1.0.1-4ubuntu5.10 Secure Socket Layer (SSL) binary and related cryptographic tools Which I believe is vulnerable, so is the traffic manager doing something to prevent this? As I said, the tests seems to say its not vulnerable. So my question is, how should we go about patching the openssl version on the appliance. I have opened a support ticket with our supplier but they haven't yet responded. Any suggestion appreciated.
... View more