www.zeroshell.org Forum Index www.zeroshell.org
Linux Distribution for server and embedded devices
 
 SearchSearch  RegisterRegister  UsergroupsUsergroups 
 ProfileProfile  Log inLog in  Log in to check your private messagesPrivate Message 

Heartbleed bug, update openssl package?

 
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell
View previous topic :: View next topic  
Author Message
FlashEngineer



Joined: 23 Jan 2012
Posts: 22

PostPosted: Wed Apr 09, 2014 6:44 pm    Post subject: Heartbleed bug, update openssl package? Reply with quote

Hi, is it possible we get the newer openssl to avoid heartbleed bug?
Back to top
View user's profile Send private message
tls



Joined: 09 Jul 2011
Posts: 17

PostPosted: Wed Apr 09, 2014 8:44 pm    Post subject: Reply with quote

I asked the same question in the 3.0.0 release forum. I hope there is some patch that can be applied to versions going back a bit. I have 3 different versions deployed Smile
Back to top
View user's profile Send private message
tls



Joined: 09 Jul 2011
Posts: 17

PostPosted: Thu Apr 10, 2014 1:07 pm    Post subject: Re: Heartbleed bug, update openssl package? Reply with quote

FlashEngineer wrote:
Hi, is it possible we get the newer openssl to avoid heartbleed bug?


I answered my own reply when I read more about the issue. Currently the version of OpenSSL on 3.0 and 2.0RC3 is "OpenSSL 0.9.8u 12 Mar 2012".

According to the CVE and other docs 0.9.8 is not effected, so no update is needed. Though it would be nice to update to current version to nail other issues, but this issue does not have an affect on ZS

--tls
Back to top
View user's profile Send private message
rsiera



Joined: 12 Jan 2012
Posts: 13

PostPosted: Thu Apr 10, 2014 4:08 pm    Post subject: Reply with quote

Thx for the update tls!
Back to top
View user's profile Send private message
reaperz



Joined: 13 Apr 2012
Posts: 81

PostPosted: Fri Apr 25, 2014 11:42 am    Post subject: Reply with quote

Sometimes it is better to use older "tried and tested" software. New versions just introduce new bugs. Such as Heartbleed Very Happy
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group