Search Members Help

» Welcome Guest
[ Log In :: Register ]

Mini-ITX Boards Sale, Fanless BareBones Mini-ITX, Bootable 1G DSL USBs, 533MHz Fanless PC <-- SALE $200 each!
Get The Official Damn Small Linux Book. DSL Market , Great VPS hosting provided by Tektonic
Pages: (2) </ 1 [2] >/

[ Track this topic :: Email this topic :: Print this topic ]

 reply to topic new topic new poll
Topic: compile-3.3.5 issues, ...when building dillo cvs< Next Oldest | Next Newest >
WDef Offline





Group: Members
Posts: 798
Joined: Sep. 2005
Posted: May 31 2008,18:33 QUOTE
Doing:

Code Sample

strings /usr/lib/libssl.so.0.9.7 | grep -i OpenSSL


gives:

Code Sample

OpenSSLDie
OPENSSL_cleanse
SSLv2 part of OpenSSL 0.9.7b 10 Apr 2003
SSLv3 part of OpenSSL 0.9.7b 10 Apr 2003
SSLv2/3 compatibility part of OpenSSL 0.9.7b 10 Apr 2003
TLSv1 part of OpenSSL 0.9.7b 10 Apr 2003
OpenSSL 0.9.7b 10 Apr


Suggests (but hardly definitive) that Jason might be correct about 0.9.7b.
Also: try this on a newer dsl - I'm running an older release on this box.
Back to top
Profile PM 
WDef Offline





Group: Members
Posts: 798
Joined: Sep. 2005
Posted: May 31 2008,18:56 QUOTE
Confirmed - from Lucky's useful post re ssh -V:

Quote
"OpenSSH_3.6.1p2 Debian 1:3.6.1p2-9, SSH protocols 1.5/2.0, OpenSSL 0x0090702f."


The OpenSSL version identifier string is explained here:

http://bs2000.fujitsu-siemens.com/downloa....ER.html

OpenSSL 0x0090702f translates as:

Code Sample
OpenSSL Version 0.9.7b release


So there's the exact release, assuming Robert did in fact compile ssh against dsl's OpenSSL that is.
Back to top
Profile PM 
lucky13 Offline





Group: Members
Posts: 1478
Joined: Feb. 2007
Posted: May 31 2008,21:24 QUOTE
Quote
So there's the exact release, assuming Robert did in fact compile ssh against dsl's OpenSSL that is.

Or Debian, whichever version and/or update, if it came from their repository (which is possible -- I didn't look at the DSL changelog to see if or when it's been upgraded). Thanks for doing more homework on that.

Since I mentioned it in this thread, I'll try to make a .dsl of my upgrades of zlib+ssl+ssh (all in one .dsl would probably be most sensible) when I get a chance tomorrow morning or this week. All three have major security updates between the version DSL has and current.

--------------
"It felt kind of like having a pitbull terrier on my rear end."
-- meo (copyright(c)2008, all rights reserved)
Back to top
Profile PM WEB 
curaga Offline





Group: Members
Posts: 2163
Joined: Feb. 2007
Posted: June 01 2008,08:21 QUOTE
They are important, but what about all other stuff that has had security updates (png, jpeg, FF, glibc, etc. etc.)? Just saying it might not be worth going for, as to be secure it would need a total overhaul.

--------------
There's no such thing as life. Those mean little jocks invented it ;)
-
Windows is not a virus. A virus does something!
Back to top
Profile PM 
8 replies since May 31 2008,06:39 < Next Oldest | Next Newest >

[ Track this topic :: Email this topic :: Print this topic ]

Pages: (2) </ 1 [2] >/ 		reply to topic new topic new poll
Quick Reply: compile-3.3.5 issues

Do you wish to enable your signature for this post?
Do you wish to enable emoticons for this post?
Track this topic
View All Emoticons
View iB Code