For anyone using Debian/Ubuntu I highly recommend installing the debian-goodies package. It contains a tool 'checkrestart' that lists any programs that are running with outdated libraries which require a restart to pick up the new versions.

If you run this periodically / after every apt upgrade you'll know when you need to restart programs to pick up security updates. This includes FreeSWITCH but also applies to others such as apache, mysql, postgresql, etc.

(It does not cover kernel updates when you need to reboot).


On 11 August 2014 18:47, Michael Jerris <mike@jerris.com> wrote:
We don't link static to openssl.  As long as however you are upgrading openssl includes all the fixes and installs to the same place we were previously linking to, it should work fine.

On Aug 7, 2014, at 7:50 AM, sangdrax8 <sangdrax8@gmail.com> wrote:

Is it enough to update the openssl package, or do I need to recompile and re-install freeswitch?  Since freeswitch checks for openssl on the machine it is complied on, I wasn't sure if it statically linked to anything or not.

Hopefully it is just an update of the openssl package (and restart the running freeswitch).


On Thu, Aug 7, 2014 at 5:53 AM, Daniel Ivanov <sertys@gmail.com> wrote:
I give up. Will migrate everything to plaintext...


On Thu, Aug 7, 2014 at 2:39 AM, Ken Rice <krice@freeswitch.org> wrote:
OpenSSL

Sent from my iPhone

> On Aug 6, 2014, at 6:58 PM, Jungle Boogie <jungleboogie0@gmail.com> wrote:
>
> Dear Michael,
> --------------------------------------------
> From: Michael Jerris <mike@jerris.com>
> Sent:  Wed, 6 Aug 2014 18:52:21 -0500
> To: FreeSWITCH Users Help
> Subject: [Freeswitch-users] OpenSSL security advisory
>>
>> Please note the release of a new OpenSSL earlier today.  We recommend
>> you upgrade to the latest release immediately as a number of the
>> addressed issues will effect freeswitch
>>
>> https://www.openssl.org/news/secadv_20140806.txt
>
> Upgrade to the latest release of what?
>
> --
> inum: 883510009027723
> sip: jungleboogie@sip2sip.info
> xmpp: jungle-boogie@jit.si
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting@freeswitch.org
> http://www.freeswitchsolutions.com
>
> FreeSWITCH-powered IP PBX: The CudaTel Communication Server
> http://www.cudatel.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users@lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org