Re: [blfs-support] Heartbleed

2014-04-08 Thread Douglas R. Reno
Would it be best to just restart your system after an upgrade? In the version of the book I have, it said something about an Xorg Server dependency being OpenSSL (thats why I install it right before Xorg). Douglas Reno -- http://linuxfromscratch.org/mailman/listinfo/blfs-support FAQ: http://www.l

Re: [blfs-support] Heartbleed

2014-04-08 Thread Ken Moffat
On Tue, Apr 08, 2014 at 08:55:01PM +0100, Ken Moffat wrote: > On Wed, Apr 09, 2014 at 03:41:16AM +0100, lux-integ wrote: > > > > openssl is a package one generally installs early in the > > distribution-build > > process. To upgrade to say openssl-1.0.1g > > --(a) does one need to yank o

Re: [blfs-support] Heartbleed

2014-04-08 Thread Ken Moffat
On Wed, Apr 09, 2014 at 03:41:16AM +0100, lux-integ wrote: > > openssl is a package one generally installs early in the distribution-build > process. To upgrade to say openssl-1.0.1g > --(a) does one need to yank out the old say openssl-1.0.1 and install the > new > 1,0,1g and if so wou

Re: [blfs-support] Heartbleed

2014-04-08 Thread Bruce Dubbs
Alexey Orishko wrote: > On Wed, Apr 9, 2014 at 4:41 AM, lux-integ wrote: >> openssl is a package one generally installs early in the distribution-build >> process. To upgrade to say openssl-1.0.1g >> --(a) does one need to yank out the old say openssl-1.0.1 and install the >> new >> 1,0,1g an

Re: [blfs-support] Heartbleed

2014-04-08 Thread Alexey Orishko
On Wed, Apr 9, 2014 at 4:41 AM, lux-integ wrote: > openssl is a package one generally installs early in the distribution-build > process. To upgrade to say openssl-1.0.1g > --(a) does one need to yank out the old say openssl-1.0.1 and install the new > 1,0,1g and if so would there not be break

Re: [blfs-support] Heartbleed

2014-04-08 Thread lux-integ
On Tuesday 08 April 2014 18:02:38 Rob Taylor wrote: > Heartbleed vulnerability > > http://www.openssl.org/news/vulnerabilities.html > > OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable > OpenSSL 1.0.1g is NOT vulnerable > OpenSSL 1.0.0 branch is NOT vulnerable > OpenSSL 0.9.8 branch is NOT