Gentoo Archives: gentoo-user

From: Stroller <stroller@××××××××××××××××××.uk>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Heartbleed - using openssl-0.9.8y and affected
Date: Mon, 28 Apr 2014 20:06:22
Message-Id: C5C08C42-6CA9-4E5D-81C3-642830EAC291@stellar.eclipse.co.uk
In Reply to: Re: [gentoo-user] Heartbleed - using openssl-0.9.8y and affected by Joseph
1 On Mon, 28 April 2014, at 8:09 pm, Joseph <syscon780@×××××.com> wrote:
2
3 > On 04/28/14 14:54, Mike Gilbert wrote:
4 >> On Mon, Apr 28, 2014 at 2:34 PM, Joseph <syscon780@×××××.com> wrote:
5 >>> No, I was wrong. I had both version istalled: 0.9.8y and 1.0.1f
6 >>> and the one that was in use was buggy one: 1.0.1f
7 >>> I recompile 1.0.1f without tls-heartbeat and the problem is solved.
8 >>>
9 >>
10 >> Why not run emerge --sync and upgrade to 1.0.1g?
11 >
12 > This is my running server so I try to upgrade backup first before upgrading main server.
13 > I recompiled 1.0.1f without "tls-heartbeat" and it solved the problem.
14
15 If you don't want to emerge --sync (and by implication "update everything"), you can download the ebuild for just this package and put it in /usr/local/portage
16
17 http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/dev-libs/openssl/openssl-1.0.1g.ebuild
18
19 Stroller.