5 ms·

Does heartbleed affect ssh or only TLS?

• mey 13y ago
  This does not impact SSH, see http://heartbleed.com/ http://heartbleed.com/
  • Lockal 13y ago
    There is no information about SSH on this page. OpenSSH is a program depending on OpenSSL the library, specifically OpenSSH uses the libcrypto part of OpenSSL. So after updating OpenSSL ssh service should be restarted anyway.
    • pritambaral 13y ago
      ssh doesn't need to be restarted. As you said, OpenSSH never uses the vulnerable part of OpenSSL code. When the ssh service was started, libcrypto (which isn't vulnerable) was loaded into memory and made available to OpenSSH code. That memory isn't going to be invalidated if libcrypto's on-disk copy changes.