[opensuse] Re: [security-announce] openSUSE not affected by OpenSSL CVE-2015-1793
On 07/09/2015 11:33 AM, Carlos E. R. wrote:
The OpenSSL versions shipped in openSUSE 13.1 and 13.2 are not
affected. What about 11.4? Does evergreen 11.4 need an update?
IIRC when the 'heartbleed' SSL bug was discovered last year (April?), I simply built a new rpm with the new source for my then 11.4 box. You need to check the version carefully and check for a test to detect the vulnerability on your system if the version number is ambiguous. -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
* David C. Rankin
On 07/09/2015 11:33 AM, Carlos E. R. wrote:
The OpenSSL versions shipped in openSUSE 13.1 and 13.2 are not
affected. What about 11.4? Does evergreen 11.4 need an update?
IIRC when the 'heartbleed' SSL bug was discovered last year (April?), I simply built a new rpm with the new source for my then 11.4 box. You need to check the version carefully and check for a test to detect the vulnerability on your system if the version number is ambiguous.
I was running 11.4/evergreen then and seem to remember seeing announcement that evergreen was safe from heartbleed, openssl had been updated or backported or .... -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (2)
-
David C. Rankin -
Patrick Shanahan