[blfs-support] Heartbleed

2014-04-08 Thread Rob Taylor
Heartbleed vulnerability http://www.openssl.org/news/vulnerabilities.html OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable OpenSSL 1.0.1g is NOT vulnerable OpenSSL 1.0.0 branch is NOT vulnerable OpenSSL 0.9.8 branch is NOT vulnerable Suggest immediate revision to BLFS 7.5 OpenSSL-1.0.1f

Re: [blfs-support] Heartbleed

2014-04-08 Thread lux-integ
On Tuesday 08 April 2014 18:02:38 Rob Taylor wrote: Heartbleed vulnerability http://www.openssl.org/news/vulnerabilities.html OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable OpenSSL 1.0.1g is NOT vulnerable OpenSSL 1.0.0 branch is NOT vulnerable OpenSSL 0.9.8 branch is NOT

Re: [blfs-support] Heartbleed

2014-04-08 Thread Alexey Orishko
On Wed, Apr 9, 2014 at 4:41 AM, lux-integ lux-in...@btconnect.com wrote: openssl is a package one generally installs early in the distribution-build process. To upgrade to say openssl-1.0.1g --(a) does one need to yank out the old say openssl-1.0.1 and install the new 1,0,1g and if so

Re: [blfs-support] Heartbleed

2014-04-08 Thread Bruce Dubbs
Alexey Orishko wrote: On Wed, Apr 9, 2014 at 4:41 AM, lux-integ lux-in...@btconnect.com wrote: openssl is a package one generally installs early in the distribution-build process. To upgrade to say openssl-1.0.1g --(a) does one need to yank out the old say openssl-1.0.1 and install the

Re: [blfs-support] Heartbleed

2014-04-08 Thread Ken Moffat
On Wed, Apr 09, 2014 at 03:41:16AM +0100, lux-integ wrote: openssl is a package one generally installs early in the distribution-build process. To upgrade to say openssl-1.0.1g --(a) does one need to yank out the old say openssl-1.0.1 and install the new 1,0,1g and if so would

Re: [blfs-support] Heartbleed

2014-04-08 Thread Ken Moffat
On Tue, Apr 08, 2014 at 08:55:01PM +0100, Ken Moffat wrote: On Wed, Apr 09, 2014 at 03:41:16AM +0100, lux-integ wrote: openssl is a package one generally installs early in the distribution-build process. To upgrade to say openssl-1.0.1g --(a) does one need to yank out the old

Re: [blfs-support] Heartbleed

2014-04-08 Thread Douglas R. Reno
Would it be best to just restart your system after an upgrade? In the version of the book I have, it said something about an Xorg Server dependency being OpenSSL (thats why I install it right before Xorg). Douglas Reno -- http://linuxfromscratch.org/mailman/listinfo/blfs-support FAQ: