Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-09 Thread Leonid Isaev
[ I had to reconstruct the message from the online archive -- sorry if message ID is screwed ] On Tue, 8 Apr 2014 17:54:14 +0100 adys.wh at gmail.com (Jerome Leclanche) wrote: > Slightly OT but for those interested, I added the heartbleed utility > (used by the heartbleed checker site) to the A

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread RbN
> I actually did push an updated package within 3 hours after the public > announcement. I think that is pretty reasonable especially since we are > not among the fortunate distros and companies that were notified > beforehand. It's very good! Only a few distribution and vendors can do that! What

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread Anatol Pomozov
Hi On Tue, Apr 8, 2014 at 8:32 AM, Anatol Pomozov wrote: > Hi > > On Tue, Apr 8, 2014 at 8:29 AM, Neal Oakey wrote: >> Hi, >> >> there is an Bug(1) in OpenSSL 1.0.1 and as far as I'm informed this has >> only been patched in 1.0.1g. >> Many other Distributions have build there own patch, what is

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread Jerome Leclanche
Slightly OT but for those interested, I added the heartbleed utility (used by the heartbleed checker site) to the AUR: https://aur.archlinux.org/packages/heartbleed-git/ % heartbleed mediacru.sh:443 2014/04/08 17:53:57 mediacru.sh:443 - SAFE J. Leclanche On Tue, Apr 8, 2014 at 5:35 PM, Anatol Po

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread Anatol Pomozov
Hi On Tue, Apr 8, 2014 at 9:29 AM, Pierre Schmitz wrote: > Am 08.04.2014 17:29, schrieb Neal Oakey: >> Hi, >> >> there is an Bug(1) in OpenSSL 1.0.1 and as far as I'm informed this has >> only been patched in 1.0.1g. >> Many other Distributions have build there own patch, what is with us? >> Curr

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread Pierre Schmitz
Am 08.04.2014 17:29, schrieb Neal Oakey: > Hi, > > there is an Bug(1) in OpenSSL 1.0.1 and as far as I'm informed this has > only been patched in 1.0.1g. > Many other Distributions have build there own patch, what is with us? > Currently we have "1.0.1.f-2" which is effected as far as I can know.

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread Timothée Ravier
On 08/04/2014 17:29, Neal Oakey wrote: > Many other Distributions have build there own patch, what is with us? As a reminder, there is now a Wiki page that tracks all security issues and their status in Arch Linux [1]. If it's not there, please either add the issue in the wiki by yourself and file

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread Neal Oakey
Hi, ah ... ok kickt the top mirror - now I'm back up to date tanks Neal Am 08.04.2014 17:32, schrieb y...@marupa.net: > On Tuesday, April 08, 2014 05:29:11 PM Neal Oakey wrote: >> Hi, >> >> there is an Bug(1) in OpenSSL 1.0.1 and as far as I'm informed this has >> only been patched in 1.0.1g. >>

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread Zeger-Jan van de Weg
> Currently we have "1.0.1.f-2" which is effected as far as I can know. pacman -Syu should upgrade it to 1.0.1.g-1? pacman -Q openssl reports that version anyway, which fixes heartbleed. [1] Greetings, Zeger-Jan van de Weg [1] https://www.openssl.org/news/secadv_20140407.txt

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread Anatol Pomozov
Hi On Tue, Apr 8, 2014 at 8:29 AM, Neal Oakey wrote: > Hi, > > there is an Bug(1) in OpenSSL 1.0.1 and as far as I'm informed this has > only been patched in 1.0.1g. > Many other Distributions have build there own patch, what is with us? It is fixed already. The new version of openssl is in stab

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread Daniel Micay
% pacman -Si openssl Repository : core Name : openssl Version: 1.0.1.g-1 Description: The Open Source toolkit for Secure Sockets Layer and Transport Layer Security Architecture : x86_64 URL: https://www.openssl.org Licenses : custom:BSD Groups :

Re: [arch-general] Heartbleed-bug in OpenSSL 1.0.1 up to 1.0.1f

2014-04-08 Thread yaro
On Tuesday, April 08, 2014 05:29:11 PM Neal Oakey wrote: > Hi, > > there is an Bug(1) in OpenSSL 1.0.1 and as far as I'm informed this has > only been patched in 1.0.1g. > Many other Distributions have build there own patch, what is with us? > Currently we have "1.0.1.f-2" which is effected as far