Please note the release of a new OpenSSL earlier today. We recommend you upgrade to the latest release immediately as a number of the addressed issues will effect freeswitch https://www.openssl.org/news/secadv_20140806.txt
Dear Michael, -------------------------------------------- From: Michael Jerris <mike@jerris.com> Sent: Wed, 6 Aug 2014 18:52:21 -0500 To: FreeSWITCH Users Help Subject: [Freeswitch-users] OpenSSL security advisory
Please note the release of a new OpenSSL earlier today. We recommend you upgrade to the latest release immediately as a number of the addressed issues will effect freeswitch
Upgrade to the latest release of what? -- inum: 883510009027723 sip: jungleboogie@sip2sip.info xmpp: jungle-boogie@jit.si
OpenSSL Sent from my iPhone
On Aug 6, 2014, at 6:58 PM, Jungle Boogie <jungleboogie0@gmail.com> wrote:
Dear Michael, -------------------------------------------- From: Michael Jerris <mike@jerris.com> Sent: Wed, 6 Aug 2014 18:52:21 -0500 To: FreeSWITCH Users Help Subject: [Freeswitch-users] OpenSSL security advisory
Please note the release of a new OpenSSL earlier today. We recommend you upgrade to the latest release immediately as a number of the addressed issues will effect freeswitch
Upgrade to the latest release of what?
-- inum: 883510009027723 sip: jungleboogie@sip2sip.info xmpp: jungle-boogie@jit.si
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I give up. Will migrate everything to plaintext... On Thu, Aug 7, 2014 at 2:39 AM, Ken Rice <krice@freeswitch.org> wrote:
OpenSSL
Sent from my iPhone
On Aug 6, 2014, at 6:58 PM, Jungle Boogie <jungleboogie0@gmail.com> wrote:
Dear Michael, -------------------------------------------- From: Michael Jerris <mike@jerris.com> Sent: Wed, 6 Aug 2014 18:52:21 -0500 To: FreeSWITCH Users Help Subject: [Freeswitch-users] OpenSSL security advisory
Please note the release of a new OpenSSL earlier today. We recommend you upgrade to the latest release immediately as a number of the addressed issues will effect freeswitch
Upgrade to the latest release of what?
-- inum: 883510009027723 sip: jungleboogie@sip2sip.info xmpp: jungle-boogie@jit.si
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Is it enough to update the openssl package, or do I need to recompile and re-install freeswitch? Since freeswitch checks for openssl on the machine it is complied on, I wasn't sure if it statically linked to anything or not. Hopefully it is just an update of the openssl package (and restart the running freeswitch). On Thu, Aug 7, 2014 at 5:53 AM, Daniel Ivanov <sertys@gmail.com> wrote:
I give up. Will migrate everything to plaintext...
On Thu, Aug 7, 2014 at 2:39 AM, Ken Rice <krice@freeswitch.org> wrote:
OpenSSL
Sent from my iPhone
On Aug 6, 2014, at 6:58 PM, Jungle Boogie <jungleboogie0@gmail.com> wrote:
Dear Michael, -------------------------------------------- From: Michael Jerris <mike@jerris.com> Sent: Wed, 6 Aug 2014 18:52:21 -0500 To: FreeSWITCH Users Help Subject: [Freeswitch-users] OpenSSL security advisory
Please note the release of a new OpenSSL earlier today. We recommend you upgrade to the latest release immediately as a number of the addressed issues will effect freeswitch
Upgrade to the latest release of what?
-- inum: 883510009027723 sip: jungleboogie@sip2sip.info xmpp: jungle-boogie@jit.si
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
We don't link static to openssl. As long as however you are upgrading openssl includes all the fixes and installs to the same place we were previously linking to, it should work fine. On Aug 7, 2014, at 7:50 AM, sangdrax8 <sangdrax8@gmail.com> wrote:
Is it enough to update the openssl package, or do I need to recompile and re-install freeswitch? Since freeswitch checks for openssl on the machine it is complied on, I wasn't sure if it statically linked to anything or not.
Hopefully it is just an update of the openssl package (and restart the running freeswitch).
On Thu, Aug 7, 2014 at 5:53 AM, Daniel Ivanov <sertys@gmail.com> wrote: I give up. Will migrate everything to plaintext...
On Thu, Aug 7, 2014 at 2:39 AM, Ken Rice <krice@freeswitch.org> wrote: OpenSSL
Sent from my iPhone
On Aug 6, 2014, at 6:58 PM, Jungle Boogie <jungleboogie0@gmail.com> wrote:
Dear Michael, -------------------------------------------- From: Michael Jerris <mike@jerris.com> Sent: Wed, 6 Aug 2014 18:52:21 -0500 To: FreeSWITCH Users Help Subject: [Freeswitch-users] OpenSSL security advisory
Please note the release of a new OpenSSL earlier today. We recommend you upgrade to the latest release immediately as a number of the addressed issues will effect freeswitch
Upgrade to the latest release of what?
-- inum: 883510009027723 sip: jungleboogie@sip2sip.info xmpp: jungle-boogie@jit.si
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
For anyone using Debian/Ubuntu I highly recommend installing the debian-goodies package. It contains a tool 'checkrestart' that lists any programs that are running with outdated libraries which require a restart to pick up the new versions. If you run this periodically / after every apt upgrade you'll know when you need to restart programs to pick up security updates. This includes FreeSWITCH but also applies to others such as apache, mysql, postgresql, etc. (It does not cover kernel updates when you need to reboot). On 11 August 2014 18:47, Michael Jerris <mike@jerris.com> wrote:
We don't link static to openssl. As long as however you are upgrading openssl includes all the fixes and installs to the same place we were previously linking to, it should work fine.
On Aug 7, 2014, at 7:50 AM, sangdrax8 <sangdrax8@gmail.com> wrote:
Is it enough to update the openssl package, or do I need to recompile and re-install freeswitch? Since freeswitch checks for openssl on the machine it is complied on, I wasn't sure if it statically linked to anything or not.
Hopefully it is just an update of the openssl package (and restart the running freeswitch).
On Thu, Aug 7, 2014 at 5:53 AM, Daniel Ivanov <sertys@gmail.com> wrote:
I give up. Will migrate everything to plaintext...
On Thu, Aug 7, 2014 at 2:39 AM, Ken Rice <krice@freeswitch.org> wrote:
OpenSSL
Sent from my iPhone
On Aug 6, 2014, at 6:58 PM, Jungle Boogie <jungleboogie0@gmail.com> wrote:
Dear Michael, -------------------------------------------- From: Michael Jerris <mike@jerris.com> Sent: Wed, 6 Aug 2014 18:52:21 -0500 To: FreeSWITCH Users Help Subject: [Freeswitch-users] OpenSSL security advisory
Please note the release of a new OpenSSL earlier today. We recommend you upgrade to the latest release immediately as a number of the addressed issues will effect freeswitch
Upgrade to the latest release of what?
-- inum: 883510009027723 sip: jungleboogie@sip2sip.info xmpp: jungle-boogie@jit.si
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I give up. Will migrate everything to plaintext... On Thu, Aug 7, 2014 at 2:39 AM, Ken Rice <krice@freeswitch.org> wrote:
OpenSSL
Sent from my iPhone
On Aug 6, 2014, at 6:58 PM, Jungle Boogie <jungleboogie0@gmail.com> wrote:
Dear Michael, -------------------------------------------- From: Michael Jerris <mike@jerris.com> Sent: Wed, 6 Aug 2014 18:52:21 -0500 To: FreeSWITCH Users Help Subject: [Freeswitch-users] OpenSSL security advisory
Please note the release of a new OpenSSL earlier today. We recommend you upgrade to the latest release immediately as a number of the addressed issues will effect freeswitch
Upgrade to the latest release of what?
-- inum: 883510009027723 sip: jungleboogie@sip2sip.info xmpp: jungle-boogie@jit.si
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (6)
-
Daniel Ivanov
-
Jungle Boogie
-
Ken Rice
-
Michael Jerris
-
sangdrax8
-
Steven Ayre