[BlueOnyx:15148] Re: OpenSSL (CenOS-6.5/SL-6.5) CVE-2014-0160

[Alex Anseel - Titelive]

Hi,

I follow the update procedure below but after a reboot the 'openssl version' gives me OpenSSL 1.0.1e-fips 11 Feb 2013 

A yum --list gives:
yum list openssl
Loaded plugins: security
Installed Packages
openssl.x86_64                   1.0.1e-16.el6_5.7                   @BlueOnyx
Available Packages
openssl.i686                     1.0.1e-16.el6_5.7                   sl-security

what's wrong ?

thanks

Alex

-----Message d'origine-----
De : blueonyx-bounces at mail.blueonyx.it [mailto:blueonyx-bounces at mail.blueonyx.it] De la part de Chris Gebhardt - VIRTBIZ Internet
Envoyé : mardi 8 avril 2014 16:48
À : blueonyx at mail.blueonyx.it
Objet : [BlueOnyx:15126] Re: OpenSSL (CenOS-6.5/SL-6.5) CVE-2014-0160


On 4/8/2014 9:36 AM, Michael Stauber wrote:
> Hi Dan,
>
>> # yum clean all
>> # yum update
>> # service httpd restart
>> # service admserv restart
>
> service dovecot restart
> servixe xinetd restart
> service sendmail restart
>
> Pretty much everything that uses OpenSSL needs to be restarted.
>
> It's probably better to do a reboot. Saves a bit of typing.

While I'm not arguing, some of us really have an aversion to rebooting 
production systems.   Therefore, I think the following can be cut & 
pasted into a shell and achieve adequate results:

yum clean all
yum -y update
service httpd restart
service admserv restart
service sendmail restart
service dovecot restart


That should take care of everything, right?   Maybe the service restarts 
can be added into our own yum repo for 5107/5108R so that even those of us who are not very active on the list, but have the automatic updates enabled, should get the benefit in the next day or so.

--
Chris Gebhardt
VIRTBIZ Internet Services
Access, Web Hosting, Colocation, Dedicated www.virtbiz.com | toll-free (866) 4 VIRTBIZ _______________________________________________
Blueonyx mailing list
Blueonyx at mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx