OpenSSL update

khaapala · 10-04-2002, 04:32 AM

Hi all ! I had worm in my server and now it has been reinstalled...
reason thet the worm came to my server was old OpenSSL version (openssl-0.9.6b-28) and now i would like to update it.
Question is that what do i need to update... how many packages?
any instructions ???

Thanks a lot !!

-- Krisse

stickman · 10-04-2002, 10:55 AM

You should just get the latest version that is available (0.9.6g) for your distro. If this is not available, then you can get the latest from the OpenSSL website. Remember that you will need to update anything that is statically linked against the OpenSSL libs. This might include OpenSSH and mod_ssl.

nxny · 10-04-2002, 01:42 PM

I have 0.9.7-beta3 installed from source. My openssh version is 3.4p1 installled from RPM. I would think it is statically linked, but how can I tell for sure?