[packman] PMBS vulnerable to Heartbleed

Stefan Seyfried stefan.seyfried at googlemail.com
Tue Apr 15 08:26:54 CEST 2014


Am 14.04.2014 16:35, schrieb Carlos E. R.:
> On 2014-04-14 15:54, Stefan Botter wrote:
>> I am testing the update to 13.1 and OBS 2.5.1 right now on a
>> different machine, but so far no smooth update seams to be
>> possible.
>
> [...]
>
> A straight "zypper dup" is bound to fail.

I cannot second this. But of course it is helpful to know what you are
doing... :-)

Stefan: if it helps, we can also just rebuild openssl. There is no need
to patch it, just disabling the useless and dangerous extension is enough.
-- 
Stefan Seyfried

"For a successful technology, reality must take precedence over
 public relations, for nature cannot be fooled." -- Richard Feynman




More information about the Packman mailing list