Openssl Vulnerability

[mydomain]

Hi,

Can anyone confirm if the version of OpenSSL installed on a cPanel server (rpm -q open ssl shows openssl-0.9.7a-33.10) has fixes back-ported into it by the cPanel staff or does openssl need to be upgraded to the latest version manually?

If it needs to be updated manually does anyone have any links on how to do this on a cPanel server as I believe the version of OpenSSL and Apache used in the buildapache process are closely related and will revert back to a previous openssl version?

 

[Myacen]

Apparently it's ok, but we compile our own anyway

 

[haze]

Cpanel isn't responsible for updating it, moreso, your OS distribution is, as long as it isn't EOL. Cpanel just uses those pre-existing tools to update most of the software. Check out your distributors changlog and that will tell you if it is patched.