I am testing my raspberry pi3 against security tests. I am using the newest Raspbian Stretch Lite. Version: November 2017 Release date: 2017-11-29 Kernel version: 4.9
I looked at http://heartbleed.com/
They mention these versions for OpenSSL being vulnerable:
OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable OpenSSL 1.0.1g is NOT vulnerable OpenSSL 1.0.0 branch is NOT vulnerable OpenSSL 0.9.8 branch is NOT vulnerable
But when I check with this website:
It says I am open to heartbleed for openssl when I put in my test server website naturalpainease.com
The issue is that I have OpenSSL 1.1.0f which I can't find anything for heartbleed in this version. I have seen it for version 1.0.1f.
Is version 1.1.0f for Raspbian Stretch Lite vulnerable to heartbleed? Are there any more updates I need to do on this version, or is this site24x7 not giving me correct info?