Slashdot Mirror

← Back to Stories (view on slashdot.org)

OpenSSL Security Update

Posted by michael on from the whoa,-how'd-that-get-in-there dept.

Pseud0 writes "Just announced on the OpenSSL announce mailing list. The affected versions are "[...] OpenSSL 0.9.6d or earlier, or 0.9.7-beta2 or earlier or current development snapshots of 0.9.7 to provide SSL or TLS is vulnerable, whether client or server. 0.9.6d servers on 32-bit systems with SSL 2.0 disabled are not vulnerable." Get your updates here."

2 of 208 comments (clear)

  1. How about some common courtesy? by gosand · · Score: 5, Insightful

    For crying out loud, how about at least putting the text of the security alert in the story. Honestly, how hard would it have been to do that? Now all I know is that there is some security issue with OpenSSL, and I can't get to the site to even see what it is. I know /. can't control the fact that sites get slashdotted, but you could be a little more considerate and give us SOME information.

    --

    My beliefs do not require that you agree with them.

  2. The Slashdot effect - enough is enough by pieterh · · Score: 4, Insightful

    As a poster noted, it is quite ironic that /. effectively acts as a DoS against web sites. Yes, I'm trying to download the update to OpenSSL, an excellent product that we use in our applications. No, I can't reach their site, because millions of /.ers are trying to read the site.
    Isn't it time that /. did a Google? It cannot be so difficult to mirror a site and refer to that instead of the prime site?
    I like reading and posting here, but the /. effect is not just really annoying and traumatic to those sysadmins exposed to it, it's unpolite, and it's unnecessary. CmdrTaco, please consider doing something smarter to mirror targetted sites.

    --
    My blog