CVE-2014-0160 OpenSSL Heartbleed

Please post any bugs you have found
Message
Author
User avatar
shinobar
Posts: 2672
Joined: Thu 28 May 2009, 09:26
Location: Japan
Contact:

openssl-fix for Precise Puppy

#46 Post by shinobar »

openssl-fix for all Precise Puppy:
made of openssl/libssl 1.0.1-4ubuntu5.14 from Ubuntu precise repo, libssl0.9.8k-7ubuntu8.18 from lucid repo.
http://shino.pos.to/party/bridge.cgi?pu ... tu8.18.pet
Remove openssl-fix-1.0.1-4ubuntu5.12.pet before if you already installed it.
Downloads for Puppy Linux [url]http://shino.pos.to/linux/downloads.html[/url]

User avatar
bigpup
Posts: 13886
Joined: Sun 11 Oct 2009, 18:15
Location: S.C. USA

#47 Post by bigpup »

OpenSSL Security Advisory [05 Jun 2014]

http://www.openssl.org/news/secadv_20140605.txt

The update is already listed in Slacko 5.7 Updates Manager.

openssl-1.0.1h
The things they do not tell you, are usually the clue to solving the problem.
When I was a kid I wanted to be older.... This is not what I expected :shock:
YaPI(any iso installer)

User avatar
oldyeller
Posts: 889
Joined: Tue 15 Nov 2011, 14:26
Location: Alaska

#48 Post by oldyeller »

Is also affecting dpup wheezy?

User avatar
OscarTalks
Posts: 2196
Joined: Mon 06 Feb 2012, 00:58
Location: London, England

#49 Post by OscarTalks »

oldyeller wrote:Is also affecting dpup wheezy?
Hello oldyeller,

I did try to compile openssl-1.0.1h for Dpup Wheezy.
It is here:-
http://smokey01.com/OscarTalks
Hope I got it right. I haven't seen an official Debian version anywhere, but maybe there is one and I just haven't spotted it. Folks may wish to try my one but not in other Puppies and take the usual precautions beforehand. One thing I have noticed is that some programs will warn in terminal that "No version information available" if they were compiled against the earlier version but they still seem to run perfectly well.
Oscar in England
Image

User avatar
oldyeller
Posts: 889
Joined: Tue 15 Nov 2011, 14:26
Location: Alaska

#50 Post by oldyeller »

Thanks, will give it a go

Cheers

User avatar
bigpup
Posts: 13886
Joined: Sun 11 Oct 2009, 18:15
Location: S.C. USA

#51 Post by bigpup »

OpenSSL Security Advisory [6 Aug 2014]
http://www.openssl.org/news/secadv_20140806.txt

The update is already listed in Slacko 5.7 Updates Manager.

openssl 1.0.1i
The things they do not tell you, are usually the clue to solving the problem.
When I was a kid I wanted to be older.... This is not what I expected :shock:
YaPI(any iso installer)

User avatar
greengeek
Posts: 5789
Joined: Tue 20 Jul 2010, 09:34
Location: Republic of Novo Zelande

#52 Post by greengeek »


User avatar
01micko
Posts: 8741
Joined: Sat 11 Oct 2008, 13:39
Location: qld
Contact:

#53 Post by 01micko »

bigpup wrote:i
j now, already in Updates Manager

:wink:
Puppy Linux Blog - contact me for access

User avatar
ASRI éducation
Posts: 3197
Joined: Sat 09 May 2009, 12:10
Location: France
Contact:

#54 Post by ASRI éducation »

Hello 01micko.
Can you specify the URL of the repository used by "Updates Manager"?
I do not use Slacko, but I think the package is compatible with Precise 5.7.1.
Thank you in advance.
Regars
Projet ASRI éducation => [url=http://asri-education.org/]Association[/url] | [url=http://forum.asri-education.org/]Forum[/url] | [url=http://dl01.asri-education.org/]Dépôt[/url] | [url=http://kids.asri-education.org/]Espace kids[/url]

watchdog
Posts: 2021
Joined: Fri 28 Sep 2012, 18:04
Location: Italy

#55 Post by watchdog »

In precise you should install:

http://packages.ubuntu.com/precise-updates/openssl

and:

http://packages.ubuntu.com/precise-updates/libssl1.0.0

Run:

Code: Select all

#openssl version -b
to verify after install.

User avatar
ASRI éducation
Posts: 3197
Joined: Sat 09 May 2009, 12:10
Location: France
Contact:

#56 Post by ASRI éducation »

watchdog wrote:In precise you should install:

http://packages.ubuntu.com/precise-updates/openssl

and:

http://packages.ubuntu.com/precise-updates/libssl1.0.0

Run:

Code: Select all

#openssl version -b
to verify after install.
Thank you watchdog.
I'll test.

Regards
Projet ASRI éducation => [url=http://asri-education.org/]Association[/url] | [url=http://forum.asri-education.org/]Forum[/url] | [url=http://dl01.asri-education.org/]Dépôt[/url] | [url=http://kids.asri-education.org/]Espace kids[/url]

User avatar
bigpup
Posts: 13886
Joined: Sun 11 Oct 2009, 18:15
Location: S.C. USA

#57 Post by bigpup »

The verification code that works for me is:

Code: Select all

openssl version
The things they do not tell you, are usually the clue to solving the problem.
When I was a kid I wanted to be older.... This is not what I expected :shock:
YaPI(any iso installer)

User avatar
ASRI éducation
Posts: 3197
Joined: Sat 09 May 2009, 12:10
Location: France
Contact:

#58 Post by ASRI éducation »

@ bigpup and watchdog

I installed:
libssl1.0.0_1.0.1-4ubuntu5.20_i386.deb
openssl_1.0.1-4ubuntu5.20_i386.deb

Regards
Attachments
openssl_updated_preciseCE571.png
(8.75 KiB) Downloaded 529 times
Projet ASRI éducation => [url=http://asri-education.org/]Association[/url] | [url=http://forum.asri-education.org/]Forum[/url] | [url=http://dl01.asri-education.org/]Dépôt[/url] | [url=http://kids.asri-education.org/]Espace kids[/url]

Post Reply