Re: [cobalt-security] new openssl vulnerabilities

["Eugene Crosser" <crosser@xxxxxxxxxxx>]

> > > How can I tell - which applications are running openssl shared
libraries?
> >
> > If you don't know about them, the chances are that you don't have any.
> > If you did not install openssl from rpm or from the source, you
definitely
      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> > don't have any.
      ^^^^^^^^^^^^^^^
> >
> > If you, for example, compiled stunnel or SSL IMAPd, you might have
> > made then dynamically linked.
>
>
> Thanks for the reply.
> I installed OpenSSH from PkgMaster.com, but I can't recall
> which other apps I might have installed, from RPM or source.
> Is there any way to tell, if anything is using the shared libs?

See above.  If you are still not sure, look if you have openssl shared libs
at all.  If you don't, then there cannot be applications dynamically linked
against them 8-O  Run "locate libssl" and see if there is any output.

Eugene