new patch in linux includes the corrections of previous versions?

ysturdivant · 11-04-2003, 08:16 AM

Problem with Patch for OPENSSL :

I have a vulnerability of OPENSSL in my Linux server which is corrected with version OPENSSL 3.1p6, when installing the more recent version of OPENSSL for red hat 3.1p14 the vulnerability not yet has been corrected. It could be a false positive? As the updates in Linux work?

Thank's

Mara · 11-04-2003, 04:02 PM

Hello,
I've just moved your thread to Linux - Security. Member Intro is a good place to say 'hello', but questions have a better chance to get more replies when posted to the right forum.

unSpawn · 11-05-2003, 08:32 AM

AFAIK there is no OpenSSL 3.1p6. "p" refers to "portable" so you would mean OpenSSH 3.1p6. Latest OpenSSH portable version IIRC is 3.7.1p2.
Please tell us how you verified the vulnerability is still there.

ysturdivant · 11-05-2003, 03:24 PM

Thank's guys : unSpawn and Mara.