Koozali.org: home of the SME Server

Open SSL/Security

David

Open SSL/Security
« on: February 25, 2003, 01:03:11 AM »
Hi !

Open SSL have a security hole :
http://www.openssl.org/news/secadv_20030219.txt

And I suppose the bug is also in sshd.

Do you think there will be an update soon about that ? Or do we have to use redhat packages ?

Thanks,

David

Bill Talcott

Re: Open SSL/Security
« Reply #1 on: February 25, 2003, 05:32:32 PM »
Did you send this to the security team via email?

David

Re: Open SSL/Security
« Reply #2 on: February 25, 2003, 05:40:28 PM »
No I didn't... I don't have the email of the Security team.

Dan Brown

Re: Open SSL/Security
« Reply #3 on: February 25, 2003, 05:50:31 PM »

Nathan Fowler

Re: Open SSL/Security
« Reply #4 on: February 25, 2003, 08:22:56 PM »
I use the RH updates and have no issues.  I'd also look at upgrading Apache, Mod-SSL, OpenSSH, and any others that you can.

http://rhn.redhat.com/errata