"rpm -q --changelog openssl | grep ASN" can tell you the same thing...
without the tech support <grin>.

Trevor.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Nick White
Sent: Wednesday, September 18, 2002 2:11 PM
To: '[EMAIL PROTECTED]'
Subject: RE: Slapper Worm on openssl 0.9.6b(-28)


That's exactly why I contacted RedHat... They don't have information
anywhere about the worm on their web site.  I received a response back from
a higher level tech support person at RedHat confirming that the up2date
openssl package 0.9.6b-28 is safe.  (see RedHat's response below)

Dear Sir,

We apologize for the delay.

Our Escalation point has responded and he said that the latest openssl
update
(the one that you have installed) is not vulnerable to the slapper worm.
Red
Hat Developers have already patched the package against the exploit used by
the
slapper worm.

Regards,
Erik





-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to