On Thu, Sep 19, 2002 at 06:53:46AM -0500, Mike Busse wrote: Saw this little proggy on bugtraq. http://CERT.Uni-Stuttgart.DE/advisories/openssl-sslv2-master/ grab that source file, read the comments, compile it, then test your boxen. It will make you feel better. > >So then I went over to Redhat's site, and they have a link about the >slapper worm on their home page. >http://rhn.redhat.com/errata/RHSA-2002-160.html In the article they again >reference CAN-2002-0656. (So I know they are talking about the same worm) > They say that they fixed their versions of openssl back in the end of >July. And they provide links to the updated fixes. >http://rhn.redhat.com/errata/RHSA-2002-160.html Redhat's version of >openssl is 0.9.6b (which is the one that I cam currently running > >My question or delema... Since I have RedHat's version of openssl (0.9.6b) >and they say its been fixed, do I still update it and use the openssl >0.9.6g from openssl.org's site or not? > > > > > >_______________________________________________ >Twin Cities Linux Users Group Mailing List - Minneapolis/St. Paul, Minnesota >http://www.mn-linux.org >tclug-list at mn-linux.org >https://mailman.mn-linux.org/mailman/listinfo/tclug-list > -- Ben Lutgens | http://people.sistina.com/~blutgens/ System Administrator | http://www.sistina.com/ Sistina Software Inc. | "If you love something set it free, if it doesn't come back to you hunt it down and set it on fire" -- George Carlin -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 232 bytes Desc: not available Url : http://shadowknight.real-time.com/pipermail/tclug-list/attachments/20020920/c32b1449/attachment.pgp