Re: [cobalt-security] New SSL Patch -- did anything happen ?[RaQ3]

["K-IM" <k-imaiz@xxxxxxxxxxxxxxxxx>]

Hi,David.
Hi,All.

Before & after installing the patch 15787,  
My RaQ3 says that 

[root@www lib]# openssl
OpenSSL> version
OpenSSL 0.9.3a 29 May 1999

[root@www lib]# strings /usr/lib/libssl.so.0.9.3 | grep -i openssl
SSLv2 part of OpenSSL 0.9.3a 29 May 1999
SSLv3 part of OpenSSL 0.9.3a 29 May 1999
SSLv2/3 compatibility part of OpenSSL 0.9.3a 29 May 1999
TLSv1 part of OpenSSL 0.9.3a 29 May 1999
OpenSSL 0.9.3a 29 May 1999

Server: Apache/1.3.6 (Unix) mod_perl/1.21 mod_ssl/2.2.8 OpenSSL/0.9.2b

[root@www cobalt]# cat /var/cobalt/adm.log
<snip>
Oct 04 11:02:06 Installing apache-1.3.6-C13.i386.rpm
Oct 04 11:02:09 Installing apache-devel-1.3.6-C13.i386.rpm
Oct 04 11:02:10 Installing apache-openssl-1.3.6-C13.i386.rpm
Oct 04 11:02:12 Installing openssl-0.9.3a-4.i386.rpm
Oct 04 11:02:23 Installing openssl-devel-0.9.3a-4.i386.rpm
Oct 04 11:02:26 Install Success

Then I think that ;

something changes (mod_ssl) --- 
Oct 04 11:02:06 Installing apache-1.3.6-C13.i386.rpm
Oct 04 11:02:09 Installing apache-devel-1.3.6-C13.i386.rpm
Oct 04 11:02:10 Installing apache-openssl-1.3.6-C13.i386.rpm

something changes (OpenSSL)---
Oct 04 11:02:12 Installing openssl-0.9.3a-4.i386.rpm
Oct 04 11:02:23 Installing openssl-devel-0.9.3a-4.i386.rpm

###########

David >How do I get ride if this header message?
Me, too> How do I get ride if this header message?

Can my RaQ3 prevent slapper worm's ATACK? (SSL WORM)

Best Regards.