[TriLUG] OpenSSL worm and RedHat

[Sinner from the Prairy]

Howdy,

I guess that the issue of the Slapper Worm (and now Slapper B) is fresh
in everybody's memory.

Unless I'm wrong, nobody confirmed nor ever post anything about the
patch status of RedHat's packages.

For this message on Security Focus, it seems that OpenSSL was patched
long ago.

Any confirmation about this?


Regards,
Sinner


-----Forwarded Message-----

From: Muhammad Faisal Rauf Danka <mfrd at attitudex.com>
To: focus-linux at securityfocus.com
Subject: Re: OpenSSL worm
Date: 20 Sep 2002 15:20:59 -0700

For clearing some confusions that many have that the openssl 0.9.6b-28
rpm package from RedHat at 
http://rhn.redhat.com/errata/RHSA-2002-160.html 
is not vulnerable to the worm, They have backported the patch, as a matter of fact it has been out since 5th august.


Regards
--------
Muhammad Faisal Rauf Danka

Head of GemSEC / Chief Technology Officer
Gem Internet Services (Pvt) Ltd.
web: www.gem.net.pk
Key Id: 0x784B0202
Key Fingerprint: 6F8C EDCF 6C6E 06A5 48D7  6A20 C592 484B 
784B 0202

_____________________________________________________________
---------------------------
[ATTITUDEX.COM]
http://www.attitudex.com/
---------------------------

_____________________________________________________________
Promote your group and strengthen ties to your members with email at yourgroup.org by Everyone.net  http://www.everyone.net/?btn=tag

-- 
http://www.ibiblio.org/sinner/
[MaDuiXa PoWeR] http://www.maduixa.net
Linux User # 89976     Linux Machine # 38068
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 232 bytes
Desc: This is a digitally signed message part
URL: <http://www.trilug.org/pipermail/trilug/attachments/20020925/b7dcbc8b/attachment.pgp>