Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[hata_ph]

Just saw there is another GnuTLS security issue so I build GnuTLS-3.2.15 for VL 7.1...maybe some pls check it out

http://arstechnica.com/security/2014/06/critical-new-bug-in-crypto-library-leaves-linux-apps-open-to-drive-by-attacks/

[roarde]

GnuTLS:
Just installed it, then thrashed it around a little bit running HexChat with SSL connection and Firefox with the HTTPS Everywhere plugin going. Everything works well, will let you know if that changes.

[hata_ph]

Another OpenSSL security bugs...i can try to build after next monday...but if someone free can build it first

http://www.zdnet.com/openssl-fixes-another-severe-vulnerability-7000030253/

[M0E-lnx]

Security update has been done on 7.1
http://vlcore.vectorlinux.com/buildbot/builders/openssl/builds/13

I don't know what kind of ramifications we can expect from upgrading openssl on 7.0.  It is currently at 0.9.8x there, so I wont touch it for now because I don't know if it will break other things

[roarde]

Somehow, I have a 7.0 with 1.0.0g, 18 Jan 2012.

Examining further, 1.0.0g and 1.0.0d are in extra. No idea why in extra.

But looking at vabs, no real idea how they got there. A scan of the SlackBuild did turn up a line that might patch later versions to report 0.9.8 to some software, not sure.

BTW: repo maintenance or slow scripts temporarily blocked upgrading on 7.1. If you tried prior to the "last edit" time of this post, try again. Seems to work now.