OpenSSL 1.0.1t

[james2041]

Hello,

I saw some recent news about the latest OpenSSL patching some critical vulnerabilities. I looked at the logs the last 2 days and haven't seen anything updated on that front yet. Are we just waiting for an updated RPM?

Thanks!

 

[KH-Jonathan]

https://access.redhat.com/security/cve/cve-2016-2108
https://bugzilla.redhat.com/show_bug.cgi?id=1331402

https://access.redhat.com/security/cve/cve-2016-2107
https://bugzilla.redhat.com/show_bug.cgi?id=1331426

Nothing has come down the pipeline yet but as soon as it does all VPSs will get updated with it (CentOS 5/6/7).