Re: [Security-Discuss] OpenSSl Update?

On Monday 08 November 2004 00:16, Vincent Danen wrote:
> On 6-Nov-04, at 2:15 PM, Amichai Rotman wrote:
> > Hey,
> >
> > While scanning for rootkits, I got a warning regarding the version of
> > OpenSSL
> > (openssl-0.9.7c-3mdk) instaled.
> >
> > Looking at the OpenSSL site (http://www.openssl.org) reveals a Security
> > Advisory regarding this version.
> >
> > Any plans on releasing the new version (0.9.7e) as an update?
>
> No, 0.9.7e won't be released as an update.  We patch things as much as
> possible... if we updated to that version, we'd have to rebuild and put
> into updates everything that builds against openssl.  What was the
> specific vuln it was mentioning?  The last that I know of was taken
> care of by:

My bad,

I am using MDK 10.0 Official, and the link below relates to MDK 9.2. Should I 
d/l the 9.2 package then? This is the package I have installed:

openssl-0.9.7c-3mdk

and the rootkit hunter has this listed as a vul version.

>
> http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:023
>
> 0.9.7e fixes bugs, but I didn't see an advisory saying it fixed any
> security issues.
>
> > I am using Proxad as my Update Source for URPMI.
>
> You also don't indicate which mdk version you're using.

-- 
:====================================================:.

Amichai Rotman

The Jerusalem Linux Club - Founder.

UIN#: 6401746
Registered Linux User#: 201192

-----------------------------------------------------------------------------------

PLEASE READ: http://www.fsf.org/philosophy/no-word-attachments.html

-----------------------------------------------------------------------------------

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________