<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">I ran that and also got the same:<br>
openssl<br>
OpenSSL> version<br>
OpenSSL 1.0.1e-fips 11 Feb 2013<br>
<br>
openssl.x86_64
1:1.0.1e-37.fc20.1 @updates<br>
openssl-libs.i686
1:1.0.1e-37.fc20.1 @updates<br>
openssl-libs.x86_64
1:1.0.1e-37.fc20.1 @update<br>
<br>
<br>
but I just got an updated openssl recently..<br>
</div>
<blockquote
cite="mid:040B89C8B1E1D945AE2700C511A039E9E07261@ATMEXDB03.dsw.net"
type="cite">
<!-- Template generated by Exclaimer Mail Disclaimers on 09:47:47 Wednesday, 16 April 2014 -->
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<style type="text/css">P.1b3f16b6-4707-45ec-ab9d-81d0a62dd847 {
MARGIN: 0cm 0cm 0pt
}
LI.1b3f16b6-4707-45ec-ab9d-81d0a62dd847 {
MARGIN: 0cm 0cm 0pt
}
DIV.1b3f16b6-4707-45ec-ab9d-81d0a62dd847 {
MARGIN: 0cm 0cm 0pt
}
TABLE.1b3f16b6-4707-45ec-ab9d-81d0a62dd847Table {
MARGIN: 0cm 0cm 0pt
}
DIV.Section1 {
page: Section1
}
</style>
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.hoenzb
{mso-style-name:hoenzb;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Yes
and it is using the affected version. You need to patch.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">You
can figure out your version of openssl by:<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Typing
“openssl”<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">At
prompt type “version”.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a class="moz-txt-link-abbreviated" href="mailto:ale-bounces@ale.org">ale-bounces@ale.org</a> [<a class="moz-txt-link-freetext" href="mailto:ale-bounces@ale.org">mailto:ale-bounces@ale.org</a>]
<b>On Behalf Of </b>Jim Kinney<br>
<b>Sent:</b> Wednesday, April 16, 2014 8:38 AM<br>
<b>To:</b> Atlanta Linux Enthusiasts<br>
<b>Subject:</b> Re: [ale] OpenSSL Broken, Upgrade Now<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">If I run
ssh -v user@host I see:<br>
<br>
OpenSSH_6.4, OpenSSL 1.0.1e-fips 11 Feb 2013<br>
debug1: Reading configuration data /etc/ssh/ssh_config<br>
debug1: /etc/ssh/ssh_config line 51: Applying options for
*<br>
...<o:p></o:p></p>
</div>
<p class="MsoNormal">So is OpenSSH _using_ OpenSSL for
encryption processes?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Tue, Apr 15, 2014 at 1:07 PM, Jim
Kinney <<a moz-do-not-send="true"
href="mailto:jim.kinney@gmail.com" target="_blank">jim.kinney@gmail.com</a>>
wrote:<o:p></o:p></p>
<div>
<p class="MsoNormal">Heartbleed bug also affects android
phones with Jelly Bean version<br>
<br>
<a moz-do-not-send="true"
href="http://www.theguardian.com/technology/2014/apr/15/heartbleed-android-phones-vulnerable-data-shows"
target="_blank">http://www.theguardian.com/technology/2014/apr/15/heartbleed-android-phones-vulnerable-data-shows</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Mon, Apr 7, 2014 at 7:14 PM,
David Tomaschik <<a moz-do-not-send="true"
href="mailto:david@systemoverlord.com"
target="_blank">david@systemoverlord.com</a>>
wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC
1.0pt;padding:0in 0in 0in
6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<div>
<div>
<p class="MsoNormal">TL;DR: Upgrade OpenSSL to
>= 1.0.1g immediately, consider replacing
keys. Not as bad as Debian OpenSSL bug, but
worse than "goto fail;".<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">"The Heartbleed Bug is a
serious vulnerability in the popular OpenSSL
cryptographic software library. This weakness
allows stealing the information protected,
under normal conditions, by the SSL/TLS
encryption used to secure the Internet.
SSL/TLS provides communication security and
privacy over the Internet for applications
such as web, email, instant messaging (IM) and
some virtual private networks (VPNs).<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The Heartbleed bug allows
anyone on the Internet to read the memory of
the systems protected by the vulnerable
versions of the OpenSSL software. This
compromises the secret keys used to identify
the service providers and to encrypt the
traffic, the names and passwords of the
users and the actual content. This allows
attackers to eavesdrop communications, steal
data directly from the services and users
and to impersonate services and users."<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><a moz-do-not-send="true"
href="http://heartbleed.com"
target="_blank">http://heartbleed.com</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="color:#888888"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#888888">--
<br>
David Tomaschik<br>
OpenPGP: 0x5DEA789B<br>
<a moz-do-not-send="true"
href="http://systemoverlord.com"
target="_blank">http://systemoverlord.com</a><br>
<a moz-do-not-send="true"
href="mailto:david@systemoverlord.com"
target="_blank">david@systemoverlord.com</a>
</span><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</div>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847"> </p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847"> </p>
<div class="WordSection1">
<div>
<div>
<div>
<div>
<blockquote style="border:none;border-left:solid #CCCCCC
1.0pt;padding:0in 0in 0in
6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">_______________________________________________<br>
Ale mailing list<br>
<a moz-do-not-send="true"
href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a moz-do-not-send="true"
href="http://mail.ale.org/mailman/listinfo/ale"
target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a moz-do-not-send="true"
href="http://mail.ale.org/mailman/listinfo"
target="_blank">http://mail.ale.org/mailman/listinfo</a><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><span style="color:#888888"><br>
<br clear="all">
<br>
<span class="hoenzb">-- <o:p></o:p></span></span></p>
<div>
<p class="MsoNormal"><span style="color:#888888">-- <br>
James P. Kinney III<br>
<i><br>
</i>Every time you stop a school, you will have to
build a jail. What you gain at one end you lose at
the other. It's like feeding a dog on his own tail.
It won't fatten the dog.<br>
- Speech 11/23/1900 Mark Twain<br>
<i><br>
<a moz-do-not-send="true"
href="http://heretothereideas.blogspot.com/"
target="_blank">http://heretothereideas.blogspot.com/</a></i></span><o:p></o:p></p>
</div>
</div>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<br>
-- <o:p></o:p></p>
<div>
<p class="MsoNormal">-- <br>
James P. Kinney III<br>
<i><br>
</i>Every time you stop a school, you will have to build a
jail. What you gain at one end you lose at the other. It's
like feeding a dog on his own tail. It won't fatten the
dog.<br>
- Speech 11/23/1900 Mark Twain<br>
<i><br>
<a moz-do-not-send="true"
href="http://heretothereideas.blogspot.com/"
target="_blank">http://heretothereideas.blogspot.com/</a></i><o:p></o:p></p>
</div>
</div>
</div>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847"> </p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847"> </p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847"><font face="Arial"><font
color="fuchsia"><font style="FONT-FAMILY: Arial; FONT-SIZE:
10pt" size="2">Athena<font size="1">®</font>, Created for
the Cause</font><font size="1">™
</font></font></font></p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847"><font face="Arial"
size="2">Making a Difference in the Fight Against Breast
Cancer</font></p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847"> </p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847"> </p>
<p class="1b3f16b6-4707-45ec-ab9d-81d0a62dd847"><span
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">---------------------------------<br>
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or
confidential information and is for the sole use of the
intended recipient(s). If you are not the intended recipient,
any disclosure, copying, distribution, or use of the contents
of this information is prohibited and may be unlawful. If you
have received this electronic transmission in error, please
reply immediately to the sender that you have received the
message in error, and delete it. Thank you.<br>
----------------------------------</span><span
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 9pt"><o:p></o:p></span></p>
<p> </p>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Ale mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Ale@ale.org">Ale@ale.org</a>
<a class="moz-txt-link-freetext" href="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</a>
See JOBS, ANNOUNCE and SCHOOLS lists at
<a class="moz-txt-link-freetext" href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Paul Cartwright
Registered Linux User #367800 and new counter #561587</pre>
</body>
</html>