Date: Wed, 09 Apr 2014 14:13:59 -0500 From: Tim Daneliuk <tundra@tundraware.com> To: Thomas Hoffmann <trh411@gmail.com>, FreeBSD Questions <freebsd-questions@freebsd.org> Cc: Jakub Lach <jakub_lach@mailplus.pl> Subject: Re: Does openssl Fix Bump The Version Number? Message-ID: <53459BF7.1050000@tundraware.com> In-Reply-To: <CAB7-od=hm0kddKJ1%2BNn5Oox-Dfz9-6wLmrwmUrq94sSxnccZFg@mail.gmail.com> References: <53454EFA.3040207@tundraware.com> <53454F42.8070003@tundraware.com> <CAB7-odn8ePOm=Ub9H9N8aaUMidf5OPByBAUrLwro6YSbeJmtpg@mail.gmail.com> <1397068357794-5902066.post@n5.nabble.com> <CANT0rcvpH=fi_N2vARzZYLQrcr2Mi9kbA052UvMtEp0sJyGX0A@mail.gmail.com> <1397068585974-5902068.post@n5.nabble.com> <CANT0rcsP-9=519BvUftK_d77T4j31%2BELZ-_nGd_qO7F9Cxj5CA@mail.gmail.com> <1397069093456-5902072.post@n5.nabble.com> <CAB7-od=hm0kddKJ1%2BNn5Oox-Dfz9-6wLmrwmUrq94sSxnccZFg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 04/09/2014 01:53 PM, Thomas Hoffmann wrote: > On Wed, Apr 9, 2014 at 2:44 PM, Jakub Lach <jakub_lach@mailplus.pl> wrote: > >> Check the date of the produced binary or test for vulnerability >> on your own hand if paranoid. I've linked relevant changes in >> source code. >> > > Have a look at this thread: > http://docs.freebsd.org/cgi/getmsg.cgi?fetch=9476970+0+current/svn-src-head > To steal from our Python colleagues: Explicit is better than implicit. A patched piece of infrastructure of this importance should be obviously so to anyone who cares. In the course of my work I deal with many hundreds of servers (well over 1000 at this point) and having to figure out what REALLY is going on across Cent, FBSD, RHEL, SLES, AIX, Solaris .... is very painful and time consuming. I appreciate the fact that the FreeBSD maintainers are volunteers and I'm not diminishing their hard work here, but we do position FreeBSD as an enterprise server class environment .... 'just sayin' ... -- ---------------------------------------------------------------------------- Tim Daneliuk tundra@tundraware.com PGP Key: http://www.tundraware.com/PGP/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?53459BF7.1050000>