Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-18 Thread Vitezslav Cizek
Hi, On Tue, 17 Apr 2018 18:36:09 -0400 "Rob Marshall" wrote: > The OS is SLES 10 SP3 and there are currently close to 80 binaries > that appear to use libssl.so.0.9.8. They are from a bunch of different > packages, so I would imagine that updating to anything more recent > than 0.9.8 would be a

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Matěj Cepl
On 2018-04-17, 22:36 GMT, Rob Marshall wrote: > The OS is SLES 10 SP3 and there are currently close to 80 > binaries that appear to use libssl.so.0.9.8. Whoever decided this platform is a good idea, was in my opinion wrong. https://en.wikipedia.org/wiki/SUSE_Linux_Enterprise tells me that a) th

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Salz, Rich via openssl-users
>But I know someone is going to ask: Can you apply all of the newer security fixes to 0.9.8zh? So I'll ask...can I? The project stopped supporting 0.9.8 2+ years ago, and announced its plans 3+ years ago. Backporting fixes from 1.0.2 should be possible, but won't always be easy. It m

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Dennis Clarke
On 17/04/18 06:36 PM, Rob Marshall wrote: Hi, The OS is SLES 10 SP3 and there are currently close to 80 binaries that appear to use libssl.so.0.9.8. They are from a bunch of different packages, so I would imagine that updating to anything more recent than 0.9.8 would be a major hassle and possib

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Matt Caswell
On 17/04/18 23:36, Rob Marshall wrote: > Hi, > > The OS is SLES 10 SP3 and there are currently close to 80 binaries > that appear to use libssl.so.0.9.8. They are from a bunch of different > packages, so I would imagine that updating to anything more recent > than 0.9.8 would be a major hassle a

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Rob Marshall
Hi, The OS is SLES 10 SP3 and there are currently close to 80 binaries that appear to use libssl.so.0.9.8. They are from a bunch of different packages, so I would imagine that updating to anything more recent than 0.9.8 would be a major hassle and possibly not even possible. I did find openssl-0.

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Salz, Rich via openssl-users
>I have an application that runs on an old OS that currently has OpenSSL 0.9.8a So you should be able to compile and install the last 0.9.8 release, https://www.openssl.org/source/old/0.9.x/openssl-0.9.8zc.tar.gz Note that this is more than two years old. Many fixes have happened since

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Dennis Clarke
On 17/04/18 05:34 PM, Rob Marshall wrote: Hi, I have an application that runs on an old OS ... I hate to be "that guy" and ask the dumb question but what OS is this and are you able to re-compile and re-link the application? Dennis -- openssl-users mailing list To unsubscribe: https://mta.o

[openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Rob Marshall
Hi, I have an application that runs on an old OS that currently has OpenSSL 0.9.8a installed and many binaries dependent on libssl.so.0.9.8. Would it be possible to get the recent (it looks like 0.9.8a is pretty old) security patches and apply them to create an updated 0.9.8a? Thanks, Rob -- op