Patching OpenSSL

[Jza]

Hi I just heard of a vulnerability with OpenSSL, and I also found this note for my version however I dunno how to apply the patch. Any help on that.

 

Mandrake Linux 9.1:

42365cfe8a9214a747bd1fa6329baec8 9.1/RPMS/libopenssl0-0.9.6i-1.2.91mdk.i586.rpm

 

is it an urpmi update. For some reason on my rpm management no update is taken place. So I wonder what can I do to update it.

 

http://www.icetalk.com/linux/security/stor...0310011292.html

[kmack]

Maybe the mirror wasn't updated when you tried or you got timed out.

 

If you are having problems with urpmi or mandrake update not working because of timeouts, etc. then there are other choices.

 

1) try a few different mirrors but first check if they are updated by comparing with the mirror list at:http://www.mandrakesecure.net/en/ftp.php to find one that is current and available. Generally one near you works best, but not always. (most are updated by now) Then update with Mdk Update or urpmi using that update_source.

 

If that doesn't work:

 

2) I suggest you download all the rpms (5)

via ftp or http and put them by themselves in a directory.

 

Mandrake Linux 9.1

 

libopenssl0-0.9.6i-1.2.91mdk.i586.rpm

libopenssl0.9.7-0.9.7a-1.2.91mdk.i586.rpm

libopenssl0.9.7-devel-0.9.7a-1.2.91mdk.i586.rpm

libopenssl0.9.7-static-devel-0.9.7a-1.2.91mdk.i586.rpm

openssl-0.9.7a-1.2.91mdk.i586.rp

 

Then open a terminal like Konsole and cd to that directory.

then become su and enter your password and type: (don't type the '#' part though!)

# urpmi --test -v *.rpm

 

This will test whether you have everything needed or not and if it is possible to install. It should run fine. If it says "Install possible." then run this:

 # urpmi -v *.rpm

and it will install the updates.

 

Personally, I prefer using urpmi rather than the rpm -Fvh method that the mandrake secure site recomends. Hope this helps!