[CentOS] HeartBleed in RHEL

Fred Smith fredex at fcshome.stoneham.ma.us
Mon Apr 14 12:51:08 UTC 2014


On Mon, Apr 14, 2014 at 11:12:54AM +1000, David Beveridge wrote:
> see https://access.redhat.com/security/cve/CVE-2014-0160
> This issue did not affect the versions of openssl as shipped with Red
> Hat Enterprise Linux 5, Red Hat Enterprise Linux 6.4 and earlier, Red
> Hat JBoss Enterprise Application Platform 5 and 6, and Red Hat JBoss
> Web Server 1 and 2. This issue does affect Red Hat Enterprise Linux
> 6.5, Red Hat Enterprise Virtualization Hypervisor 6.5, and Red Hat
> Storage 2.1, which provided openssl 1.0.1e. Errata have been released
> to correct this issue.

Thank you, Dave! That's exactly what I needed.

Fred
> 
> On Mon, Apr 14, 2014 at 10:59 AM, Fred Smith
> <fredex at fcshome.stoneham.ma.us> wrote:
> > I know I'm slightly OT here, asking about RHEL, but since Centos is now a
> > part of RH, I'm hoping I won't be summarily ejected.
> >
> > I've seen several articles that listed  Centos 6.x as vulnerable, but
> > DID NOT LIST RHEL 6.
> >
> > I'd think that if Centos 6.x is vulnerable, then so would RHEL 6.x,
> > since  Centos is made from RHEL sources.
> >
> > Does anyone know for sure either way?
> >
> > thanks!
> >
> > --
> > ---- Fred Smith -- fredex at fcshome.stoneham.ma.us -----------------------------

-- 
---- Fred Smith -- fredex at fcshome.stoneham.ma.us -----------------------------
  "And he will be called Wonderful Counselor, Mighty God, Everlasting Father,
  Prince of Peace. Of the increase of his government there will be no end. He 
 will reign on David's throne and over his kingdom, establishing and upholding
      it with justice and righteousness from that time on and forever."
------------------------------- Isaiah 9:7 (niv) ------------------------------



More information about the CentOS mailing list