[Freeswitch-users] OpenSSL security advisory

[Steven Ayre]

For anyone using Debian/Ubuntu I highly recommend installing the
debian-goodies package. It contains a tool 'checkrestart' that lists any
programs that are running with outdated libraries which require a restart
to pick up the new versions.

If you run this periodically / after every apt upgrade you'll know when you
need to restart programs to pick up security updates. This includes
FreeSWITCH but also applies to others such as apache, mysql, postgresql,
etc.

(It does not cover kernel updates when you need to reboot).


On 11 August 2014 18:47, Michael Jerris <mike at jerris.com> wrote:

> We don't link static to openssl.  As long as however you are upgrading
> openssl includes all the fixes and installs to the same place we were
> previously linking to, it should work fine.
>
> On Aug 7, 2014, at 7:50 AM, sangdrax8 <sangdrax8 at gmail.com> wrote:
>
> Is it enough to update the openssl package, or do I need to recompile and
> re-install freeswitch?  Since freeswitch checks for openssl on the machine
> it is complied on, I wasn't sure if it statically linked to anything or not.
>
> Hopefully it is just an update of the openssl package (and restart the
> running freeswitch).
>
>
> On Thu, Aug 7, 2014 at 5:53 AM, Daniel Ivanov <sertys at gmail.com> wrote:
>
>> I give up. Will migrate everything to plaintext...
>>
>>
>> On Thu, Aug 7, 2014 at 2:39 AM, Ken Rice <krice at freeswitch.org> wrote:
>>
>>> OpenSSL
>>>
>>> Sent from my iPhone
>>>
>>> > On Aug 6, 2014, at 6:58 PM, Jungle Boogie <jungleboogie0 at gmail.com>
>>> wrote:
>>> >
>>> > Dear Michael,
>>> > --------------------------------------------
>>> > From: Michael Jerris <mike at jerris.com>
>>> > Sent:  Wed, 6 Aug 2014 18:52:21 -0500
>>> > To: FreeSWITCH Users Help
>>> > Subject: [Freeswitch-users] OpenSSL security advisory
>>> >>
>>> >> Please note the release of a new OpenSSL earlier today.  We recommend
>>> >> you upgrade to the latest release immediately as a number of the
>>> >> addressed issues will effect freeswitch
>>> >>
>>> >> https://www.openssl.org/news/secadv_20140806.txt
>>> >
>>> > Upgrade to the latest release of what?
>>> >
>>> > --
>>> > inum: 883510009027723
>>> > sip: jungleboogie at sip2sip.info
>>> > xmpp: jungle-boogie at jit.si
>>> >
>>> >
>>> _________________________________________________________________________
>>> > Professional FreeSWITCH Consulting Services:
>>> > consulting at freeswitch.org
>>> > http://www.freeswitchsolutions.com
>>> >
>>> > 
>>> > 
>>> >
>>> > Official FreeSWITCH Sites
>>> > http://www.freeswitch.org
>>> > http://wiki.freeswitch.org
>>> > http://www.cluecon.com
>>> >
>>> > FreeSWITCH-users mailing list
>>> > FreeSWITCH-users at lists.freeswitch.org
>>> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> > UNSUBSCRIBE:
>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> > http://www.freeswitch.org
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> 
>>> 
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://wiki.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20140811/29661ab4/attachment-0001.html