There are two parts to my reply.

1. The rawhide packages aren't officially supported by RedHat and will
probably break your other packages. I've used them before but not where
there have been dependencies.
2. I'm not familiar with that package, but it probably doesn't fix the
recent Linux Slapper worm. Have a look at the package info with "rpm -qip
openssl-0.9.6c-2.i386". If the build date is before the Linux Slapper worm,
it won't.

There should be an update from RedHat soon. I suggest you subscribe to Red
Hat Network if you haven't already done so at http://rhn.redhat.com. A
single machine is free.

In the meantime, you can limit the damage this worm can do by either
removing any compilers from your servers (rpm -e gcc), or "chmod 700
/usr/bin/gcc" to make the gcc program only executable by root. In general it
isn't a good idea to leave compilers on public web servers, but there are
occasions where you might need to.

- 
John Airey, BSc (Jt Hons), CNA, RHCE
Internet systems support officer, ITCSD, Royal National Institute of the
Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] 

Reality TV - the ultimate oxymoron


> -----Original Message-----
> From: Info [mailto:[EMAIL PROTECTED]]
> Sent: 18 September 2002 20:07
> To: [EMAIL PROTECTED]
> Subject: upgrading 
> 
> 
> I am running a redhat 7.2 box with openssl version of 
> openssl-0.9.6b-28. I
> found a package openssl-0.9.6c-2.i386 , rawhide 1.0 for i386. 
> Can i download
> and and upgrade the present package with the rpm -Uvh 
> packagename command?
> Will it break the deps?
> 
> thanks
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
> 

- 

NOTICE: The information contained in this email and any attachments is 
confidential and may be legally privileged. If you are not the 
intended recipient you are hereby notified that you must not use, 
disclose, distribute, copy, print or rely on this email's content. If 
you are not the intended recipient, please notify the sender 
immediately and then delete the email and any attachments from your 
system.

RNIB has made strenuous efforts to ensure that emails and any 
attachments generated by its staff are free from viruses. However, it 
cannot accept any responsibility for any viruses which are 
transmitted. We therefore recommend you scan all attachments.

Please note that the statements and views expressed in this email 
and any attachments are those of the author and do not necessarily 
represent those of RNIB.

RNIB Registered Charity Number: 226227

Website: http://www.rnib.org.uk 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to