maria-discuss team mailing list archive
-
maria-discuss team
-
Mailing list archive
-
Message #01507
Re: Heartbleed (OpenSSL) -bug and MariaDB
-
To:
maria-discuss@xxxxxxxxxxxxxxxxxxx
-
From:
Reindl Harald <h.reindl@xxxxxxxxxxxxx>
-
Date:
Wed, 09 Apr 2014 15:25:25 +0200
-
In-reply-to:
<CAFa9YRDzXQzOJSPpX9QcqRVabuWuTbeY+wh0AM2v0go=dcGTbw@mail.gmail.com>
-
Openpgp:
id=7F780279; url=http://arrakis.thelounge.net/gpg/h.reindl_thelounge.net.pub.txt
-
Organization:
the lounge interactive design
-
User-agent:
Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
Am 09.04.2014 15:21, schrieb Peter Laursen:
> A far as I understand MariaDB uses OpenSSL (unlike Oracle-MySQL that uses YaSSL).
>
> Now what about the heartbleed bug: http://heartbleed.com/
>
> Will all still suported MariaDB versions (5.1, 5.2, 5.3, 5.5 and 10.0 are all still suported I think?) need a
> release for this bug in OpenSSL?
why should they?
update openssl and restart all daemons which are linking the library
and consider replace your certificates / private keys if a service
using openssl was reachable from the internet
that's the idea behind shared libraries
Attachment:
signature.asc
Description: OpenPGP digital signature
Follow ups
References