<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:proxima-nova;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
code
{mso-style-priority:99;
font-family:"Courier New";}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
p.1b3f16b6-4707-45ec-ab9d-81d0a62dd847, li.1b3f16b6-4707-45ec-ab9d-81d0a62dd847, div.1b3f16b6-4707-45ec-ab9d-81d0a62dd847
{mso-style-name:1b3f16b6-4707-45ec-ab9d-81d0a62dd847;
mso-style-priority:99;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle26
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">By the way so it doesn’t get lost in the thread:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Applying the update is only the FIRST step.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">It is also necessary to stop/start any currently running apps using openssl for the update to take effect for them. (e.g. for RHEL/Fedora you might need to
run “service httpd restart”) The easiest way to insure everything is OK is to reboot after the update because that will stop/start everything.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> Lightner, Jeff
<br>
<b>Sent:</b> Wednesday, April 16, 2014 12:36 PM<br>
<b>To:</b> 'pbcartwright@gmail.com'; Atlanta Linux Enthusiasts<br>
<b>Subject:</b> RE: [ale] OpenSSL Broken, Upgrade Now<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">According to the link below 20’s update is available and it is done similar to 19:<o:p></o:p></span></p>
<p class="MsoNormal"><a href="https://lists.fedoraproject.org/pipermail/announce/2014-April/003205.html"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">https://lists.fedoraproject.org/pipermail/announce/2014-April/003205.html</span></a><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><i><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">Jeffrey C. Lightner</span></i><i><span style="font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">Sr. UNIX Administrator</span></i><i><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></i></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">DS Services of America, Inc.</span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">5660 New Northside Drive NW</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">Suite
<i>250</i></span><span style="font-size:11.0pt;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="PT" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">Atlanta, GA 30328</span><span lang="PT" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="PT" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="PT" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">P:
<i>678-486-3516<o:p></o:p></i></span></p>
<p class="MsoNormal"><span lang="PT" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">C:
<i>678-772-0018</i></span><span lang="PT" style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="PT" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">F:
<i>678-460-3603</i></span><span lang="PT" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="PT" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">E:
</span><a href="mailto:jlightner@dsservices.com"><i><span lang="PT" style="font-size:10.0pt;font-family:"Arial","sans-serif"">jlightner@dsservices.com</span></i></a><span lang="PT" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> Paul Cartwright [</span><a href="mailto:pbcartwright@gmail.com"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">mailto:pbcartwright@gmail.com</span></a><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">]
<br>
<b>Sent:</b> Wednesday, April 16, 2014 10:49 AM<br>
<b>To:</b> Lightner, Jeff; Atlanta Linux Enthusiasts<br>
<b>Subject:</b> Re: [ale] OpenSSL Broken, Upgrade Now<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">and I am running Fedora 20... it didn't mention how to fix 20..<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">That is for Fedora 19. It also says Fedora 17 is unaffected.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">RHEL5 was also unaffected.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">That’s a nice link: It talks about multiple distros and what you need for each.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<o:p></o:p></p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">
</span><a href="mailto:ale-bounces@ale.org"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">ale-bounces@ale.org</span></a><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> [</span><a href="mailto:ale-bounces@ale.org"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">mailto:ale-bounces@ale.org</span></a><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">]
<b>On Behalf Of </b>Paul Cartwright<br>
<b>Sent:</b> Wednesday, April 16, 2014 10:43 AM<br>
<b>To:</b> </span><a href="mailto:ale@ale.org"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">ale@ale.org</span></a><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"><br>
<b>Subject:</b> Re: [ale] OpenSSL Broken, Upgrade Now</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:12.0pt;margin-left:1.0in">
according to a web site, the patched version is still 1.0.1e-37:<br>
<br>
<a href="https://www.digitalocean.com/community/articles/how-to-protect-your-server-against-the-heartbleed-openssl-vulnerability">https://www.digitalocean.com/community/articles/how-to-protect-your-server-against-the-heartbleed-openssl-vulnerability</a><br>
<br>
<br>
<o:p></o:p></p>
<p style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:22.5pt;margin-left:1.0in;line-height:22.5pt">
<span style="font-size:15.0pt;font-family:"proxima-nova","serif"">For a 64 bit system:</span><o:p></o:p></p>
<pre style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:22.5pt;margin-left:1.0in;background:#F3F3F3;white-space:pre-wrap;word-wrap: break-word;box-sizing: border-box;border-top-left-radius: 3px;border-top-right-radius: 3px;border-bottom-right-radius: 3px;border-bottom-left-radius: 3px;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px"><code><span style="font-size:11.5pt;color:#111111">yum -y install koji</span></code><o:p></o:p></pre>
<pre style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:22.5pt;margin-left:1.0in;background:#F3F3F3"><code><span style="font-size:11.5pt;color:#111111">koji download-build --arch=x86_64 openssl-1.0.1e-37.fc19.1</span></code><o:p></o:p></pre>
<pre style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:22.5pt;margin-left:1.0in;background:#F3F3F3"><code><span style="font-size:11.5pt;color:#111111">yum localinstall openssl-1.0.1e-37.fc19.1.x86_64.rpm</span></code><o:p></o:p></pre>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:12.0pt;margin-left:1.0in">
yum localinstall openssl-1.0.1e-37.fc19.1.x86_64.rpm<br>
Loaded plugins: langpacks<br>
Examining openssl-1.0.1e-37.fc19.1.x86_64.rpm: 1:openssl-1.0.1e-37.fc19.1.x86_64<br>
openssl-1.0.1e-37.fc19.1.x86_64.rpm: does not update installed package.<br>
Nothing to do<br>
<br>
<br>
<br>
<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:2.5in;margin-bottom:12.0pt;margin-left:2.5in">
Hi <br>
<br>
I believe the patched version is OpenSSL 1.0.1g 7 Apr 2014 <br>
<br>
Jay <br>
On 04/16/2014 10:24 AM, Paul Cartwright wrote: <br>
<br>
<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:2.5in;margin-bottom:5.0pt;margin-left:2.5in">
I ran that and also got the same: <br>
openssl <br>
OpenSSL> version <br>
OpenSSL 1.0.1e-fips 11 Feb 2013 <br>
<br>
openssl.x86_64 1:1.0.1e-37.fc20.1 @updates <br>
openssl-libs.i686 1:1.0.1e-37.fc20.1 @updates <br>
openssl-libs.x86_64 1:1.0.1e-37.fc20.1 @update <br>
<br>
<br>
but I just got an updated openssl recently.. <o:p></o:p></p>
</blockquote>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:12.0pt;margin-left:1.0in">
<br>
<br>
<br>
<o:p></o:p></p>
<pre style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">-- <o:p></o:p></pre>
<pre style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">Paul Cartwright<o:p></o:p></pre>
<pre style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">Registered Linux User #367800 and new counter #561587<o:p></o:p></pre>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<o:p></o:p></p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<o:p></o:p></p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:fuchsia">Athena</span><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:fuchsia">®</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:fuchsia">, Created
for the Cause</span><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:fuchsia">™
</span><o:p></o:p></p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Making a Difference in the Fight Against Breast Cancer</span><o:p></o:p></p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<o:p></o:p></p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<o:p></o:p></p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847" style="mso-margin-top-alt:0in;margin-right:1.0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt">
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">---------------------------------<br>
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information
is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.<br>
----------------------------------</span><o:p></o:p></p>
<p style="mso-margin-top-alt:5.0pt;margin-right:1.0in;margin-bottom:5.0pt;margin-left:1.0in">
<o:p></o:p></p>
</blockquote>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
<br>
<o:p></o:p></p>
<pre>-- <o:p></o:p></pre>
<pre>Paul Cartwright<o:p></o:p></pre>
<pre>Registered Linux User #367800 and new counter #561587<o:p></o:p></pre>
</div>
</body>
</html>