Bug #10066
closed
Scary message about OpenSSL on SLES when running rudder agent update
Added by Nicolas CHARLES almost 8 years ago.
Updated over 7 years ago.
Description
warning: This version of CFEngine was compiled against OpenSSL < 0.9.8m, using it with a later OpenSSL version is insecure. The current version uses compatibility workarounds that may allow CVE-2009-3555 exploitation.
warning: Please update your CFEngine package or compile it against your current OpenSSL version.
#zypper info openssl
Dépot: SLES_11_SP3_DVD1
Nom: openssl
Version: 0.9.8j-0.50.1
Arch: x86_64
- Subject changed from Scary message about OpenSSL on SLES when running the agent in verbose mode to Scary message about OpenSSL on SLES when running the agent
- Subject changed from Scary message about OpenSSL on SLES when running the agent to Scary message about OpenSSL on SLES when running rudder agent update
- Target version changed from 4.1.0~beta2 to 4.1.0~beta3
- Target version changed from 4.1.0~beta3 to 4.1.0~rc1
Perhaps all it needs is to update openssl version. Or create a new builder with a more recent SP of sles11.
- Status changed from New to In progress
- Status changed from In progress to Pending technical review
- Assignee changed from Benoît PECCATTE to Alexis Mousset
- Pull Request set to https://github.com/Normation/rudder-packages/pull/1272
- Status changed from Pending technical review to Pending release
- Status changed from Pending release to Released
This bug has been fixed in Rudder 4.1.0~rc1 which was released today.
Also available in: Atom
PDF
Updated by 
Updated by 
Updated by 
Updated by