Slashdot Mirror

← Back to Stories (view on slashdot.org)

OpenSSL Security Update

Posted by michael on from the whoa,-how'd-that-get-in-there dept.

Pseud0 writes "Just announced on the OpenSSL announce mailing list. The affected versions are "[...] OpenSSL 0.9.6d or earlier, or 0.9.7-beta2 or earlier or current development snapshots of 0.9.7 to provide SSL or TLS is vulnerable, whether client or server. 0.9.6d servers on 32-bit systems with SSL 2.0 disabled are not vulnerable." Get your updates here."

3 of 208 comments (clear)

  1. Security is a Fallacy by SystematicPsycho · · Score: 0, Flamebait

    It seems that by throwing secure at the end of something cons ppl into thinking its secure, ssh, ssl and who know how many encryption methods have been cracked. Face it, Security is a Fallacy.

    --
    Analytic & algebraic topology of locally Euclidean meterization of infinitely differentiable Riemmanian manifold
  2. Re:Mirrors list mirrored by Anonymous Coward · · Score: -1, Flamebait

    shut up you pudgy idiot. you aren't clever or witty or funny or whatever the fuck you think you are. besides a fat sloppy virgin. you are that.

  3. This is not news... by Anonymous Coward · · Score: -1, Flamebait

    All of us Windows users know that *nix is not secure.

    zealot: "OpenSSL is an application. It is not part of the OS. The OS is secure."

    OK, then. IIS is an application, too. So Windows is secure.

    zealot: "IIS comes with the OS. So Windows is not secure."

    So what? You do not have to install it with the OS.

    zealot: "Windows (l)users don't know any better. They always install everything."

    If those users switched to *nix, they would do the same.

    zealot: "Don't confuse design security flaws with misconfiguration security vulnerabilities."

    Same to you.

    zealot: "My head hurts. Don't make me look at things without prejudice."