On 02/27/11 9:13 AM, Sander Temme wrote:
On Feb 27, 2011, at 2:02 AM, John R Pierce wrote:
but, my Sol10 systems appear to already have an openssl in
/usr/sfw/bin (and libraries in /usr/sfw/lib, etc) which is maintained
by Oracle
Last time I was on a Solaris box, that one seemed to be stuck at 0.9.7.
yes, but its back patched against significant exploits. The solaris 10
development box I happened to look at has not had Solaris patches in
about a year (it was taken off support when Oracle screwed with the
pricing and wanted to only offer 'premiere' grade support we didn't want
to pay for), it says...
$ /usr/sfw/bin/openssl version
OpenSSL 0.9.7d 17 Mar 2004 (+ security fixes for: CVE-2005-2969
CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339
CVE-2006-4343 CVE-2007-5135 CVE-2007-3108 CVE-2008-5077 CVE-2009-0590)
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
