I just checked, and here Apache and OpenSSH both link to the shared OpenSSL libraries. If yours were also linked with the shared libraries, then a new patch release should just drop in. You'll need to exit and restart sshd and httpd before they'll start using the new libraries, though.
If you have other products which depend on OpenSSL you should check to see if they use the shared libraries. If your system uses Gnu binutils, you should have an 'ldd' command which lists the shared libraries used by an executable. If you don't have 'ldd', see your OS vendor's documentation. Anything which is statically linked with code from the library archives will need to be rebuilt before it can use the updated libraries. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] MS Windows *is* user-friendly, but only for certain values of "user". ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
