RE: Slapper Worm on openssl 0.9.6b(-28)

2002-09-18 Thread Trevor
TECTED]]On Behalf Of Nick White Sent: Wednesday, September 18, 2002 4:19 PM To: '[EMAIL PROTECTED]' Subject: RE: Slapper Worm on openssl 0.9.6b(-28) >From the changelog: (via rpm -q --changelog) * Thu Aug 01 2002 Nalin Dahyabhai <[EMAIL PROTECTED]> 0.9.6b-28 - update asn patch

RE: Slapper Worm on openssl 0.9.6b(-28)

2002-09-18 Thread Nick White
al Message- From: Trevor [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 18, 2002 1:48 PM To: [EMAIL PROTECTED] Subject: RE: Slapper Worm on openssl 0.9.6b(-28) "rpm -q --changelog openssl | grep ASN" can tell you the same thing... without the tech support . Trevor. -Orig

RE: Slapper Worm on openssl 0.9.6b(-28)

2002-09-18 Thread Chuck Mead
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 18 Sep 2002, Nick White posted the following: NW>That's exactly why I contacted RedHat... They don't have information NW>anywhere about the worm on their web site. I dunno why but this satisfied my curiosity: http://www.redhat.com/support

RE: Slapper Worm on openssl 0.9.6b(-28)

2002-09-18 Thread Trevor
Subject: RE: Slapper Worm on openssl 0.9.6b(-28) That's exactly why I contacted RedHat... They don't have information anywhere about the worm on their web site. I received a response back from a higher level tech support person at RedHat confirming that the up2date openssl package 0.9

RE: Slapper Worm on openssl 0.9.6b(-28)

2002-09-18 Thread Nick White
Regards, Erik -Original Message- From: Anthony E. Greene [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 18, 2002 10:14 AM To: [EMAIL PROTECTED] Subject: Re: Slapper Worm on openssl 0.9.6b *** PGP Signature Status: good *** Signer: Anthony E. Greene <[EMAIL PROTECTED]> (Inva

Re: Slapper Worm on openssl 0.9.6b

2002-09-18 Thread Anthony E. Greene
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18-Sep-2002/13:22 -0400, Jason Costomiris <[EMAIL PROTECTED]> wrote: >On Wed, Sep 18, 2002 at 01:14:19PM -0400, Anthony E. Greene wrote: >: Specifically 0.9.6b-28. Earlier 0.9.6b packages (ie; 0.9.6b-24 and >: 0.9.6b-8) may not have the fix for thi

Re: Slapper Worm on openssl 0.9.6b

2002-09-18 Thread Jason Costomiris
On Wed, Sep 18, 2002 at 01:14:19PM -0400, Anthony E. Greene wrote: : Specifically 0.9.6b-28. Earlier 0.9.6b packages (ie; 0.9.6b-24 and : 0.9.6b-8) may not have the fix for this vulnerability. : : I really wish RH would make some kind of explicit announcement about this. You mean, like this: ht

Re: Slapper Worm on openssl 0.9.6b

2002-09-18 Thread Saul Arias
On Wed, 2002-09-18 at 13:14, Anthony E. Greene wrote: > I really wish RH would make some kind of explicit announcement about this. They've done. http://www.redhat.com/support/alerts/linux_slapper_worm.html -- Saul Arias - [EMAIL PROTECTED] -- redhat-list mailing list unsubscribe mailto:[EMAI

Re: Slapper Worm on openssl 0.9.6b

2002-09-18 Thread Anthony E. Greene
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18-Sep-2002/07:42 -0700, Nick White <[EMAIL PROTECTED]> wrote: >I've called RedHat about the "Slapper" worm and it appears that the RHN >package 0.9.6b is safe. [snip] Specifically 0.9.6b-28. Earlier 0.9.6b packages (ie; 0.9.6b-24 and 0.9.6b-8) ma

Slapper Worm on openssl 0.9.6b

2002-09-18 Thread Nick White
I've called RedHat about the "Slapper" worm and it appears that the RHN package 0.9.6b is safe. Below is a response from their support. __ Description of your problem: using openssl 0.9.6b from the Red Hat Network. Is this vulnerable from the slapper worm? Ou