[Gluster-infra] OpenSSL update for build.gluster.org

Justin Clift justin at gluster.org
Wed Apr 9 14:11:04 UTC 2014

On 09/04/2014, at 12:29 PM, Justin Clift wrote:
> Hi all,
> I'd like to update at least OpenSSL on build.gluster.org today,
> to address the TLS heartbeat problem (CVE-2014-0160).
> The version of OpenSSL currently in use has the problem:
> * openssl-1.0.1e-4.el6.x86_64
> * openssl-devel-1.0.1e-4.el6.x86_64
> * openssl-libs-1.0.1e-4.el6.x86_64
> After doing a yum update for OpenSSL on the server, the server
> will require a reboot for it to be effective.
> Anyone have thoughts/suggestions/objections/etc?

Good news.  As pointed out by Kaleb and Niels on IRC, this
host doesn't use https, so isn't affected by this bug.

Kaleb has updated OpenSSL on download.gluster.org.  We'll
check which other hosts need updating, and get them done too.

+ Justin

Open Source and Standards @ Red Hat


More information about the Gluster-infra mailing list