FYI: It appears "opkg upgrade libopenssl" will install it if it has not
yet been installed.  Therefore, if the commands are run "just-in-case",
you will end up installing libopenssl where it was not previously installed:

# opkg info libopenssl | grep ^Status:
Status: unknown ok not-installed
# opkg list-upgradable
# opkg upgrade libopenssl
Installing libopenssl (1.0.1g-1) to root...
Downloading
http://downloads.openwrt.org/attitude_adjustment/12.09/ar71xx/generic/packages/libopenssl_1.0.1g-1_ar71xx.ipk.
Configuring libopenssl.
# opkg info libopenssl | grep ^Status:
Status: install user installed
# opkg remove libopenssl
Removing package libopenssl from root...

The "Status: ... user ..." means that it was manually requested (or
installed via an "upgrade").

-Justin


On 4/10/14, 4:45 PM, John Crispin wrote:
> Heartbleed - libopenssl AA binary feed update
>
> we updated the AA release. the files libopenssl_1.0.1e-1_*.ipk have
> been replaced with libopenssl_1.0.1g-1_*.ipk and the Packages index
> was updated. If you use openssl on your unit you need to run :
>
> # opkg update
> # opkg upgrade libopenssl
>
> In order to ensure that all affected services are using the updated
> OpenSSL library it is recommended to reboot the device after applying
> the upgrade.
>
> To find out more about the bug go to - http://heartbleed.com/
>
> Note that default OpenWrt installations are not vulnerable to the
> particular bug, neither the builtin SSH server nor the optional LuCI
> SSL support rely on OpenSSL for cryptography.
>
> The OpenSSL library is not installed within the stock images available
> on the download server.
>
> This is not a lightweight bug. Please take it serious and check your unit.
>
>     OpenWrt Developers
> _______________________________________________
> openwrt-devel mailing list
> [email protected]
> https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel


-- 
-Justin
[email protected]


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
openwrt-devel mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel

Reply via email to