[Gluster-infra] OpenSSL update for build.gluster.org

[Justin Clift]

On 09/04/2014, at 12:29 PM, Justin Clift wrote:
> Hi all,
> 
> I'd like to update at least OpenSSL on build.gluster.org today,
> to address the TLS heartbeat problem (CVE-2014-0160).
> 
> The version of OpenSSL currently in use has the problem:
> 
> * openssl-1.0.1e-4.el6.x86_64
> * openssl-devel-1.0.1e-4.el6.x86_64
> * openssl-libs-1.0.1e-4.el6.x86_64
> 
> After doing a yum update for OpenSSL on the server, the server
> will require a reboot for it to be effective.
> 
> Anyone have thoughts/suggestions/objections/etc?

Good news.  As pointed out by Kaleb and Niels on IRC, this
host doesn't use https, so isn't affected by this bug.

Kaleb has updated OpenSSL on download.gluster.org.  We'll
check which other hosts need updating, and get them done too.

+ Justin

--
Open Source and Standards @ Red Hat

twitter.com/realjustinclift