perfSONAR User Q&A and Other Discussion

[Jason Zurawski <>]

Hi Paul;

The perfSONAR project ceased support of version 3.2.x of the toolkit 
(featuring CentOS5) in March of 2014.  If you haven't done so, please 
consider upgrading to the 3.3.x release series.  

The CentOS project would be responsible for maintaining the openssl packages, 
I see an alert from the same day in June with the following information:

> From: Karanbir Singh 
> <>
> Subject: [CentOS-announce] CESA-2014:0624 Important CentOS 5 openssl Update
> Date: June 5, 2014 10:05:41 PM EDT
> To: 
> 
> Reply-To: 
> 
> 
> 
> CentOS Errata and Security Advisory 2014:0624 Important
> 
> Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0624.html
> 
> The following updated files have been uploaded and are currently 
> syncing to the mirrors: ( sha256sum Filename ) 
> 
> i386:
> 85be8285cdf1da22ad41407244d65b14d3a0e6336bf6a0df93ca7db8586c438b  
> openssl-0.9.8e-27.el5_10.3.i386.rpm
> 0f45cc416a5a3d1d12b64354e8f7bd5bbaae405400f559044119f3da78d96734  
> openssl-0.9.8e-27.el5_10.3.i686.rpm
> 6173233de2e71b310a27f166f83115fc42f7e0258b45bf4eef673215e0ce1373  
> openssl-devel-0.9.8e-27.el5_10.3.i386.rpm
> c7ed5539399b45e5c88bfff2f2a30d19ef0b27575c6efdb1099036aa47dcf750  
> openssl-perl-0.9.8e-27.el5_10.3.i386.rpm
> 
> x86_64:
> 0f45cc416a5a3d1d12b64354e8f7bd5bbaae405400f559044119f3da78d96734  
> openssl-0.9.8e-27.el5_10.3.i686.rpm
> 17013b9940ecc58a8627922b70fbd77fd517dd80cc2bb2bb4e37705f7bf95353  
> openssl-0.9.8e-27.el5_10.3.x86_64.rpm
> 6173233de2e71b310a27f166f83115fc42f7e0258b45bf4eef673215e0ce1373  
> openssl-devel-0.9.8e-27.el5_10.3.i386.rpm
> 508d9a4bc5ea61c5b84ce2bfa5aaf3c9b1bec97f3a5caf8cb6e4a7d3cbf02883  
> openssl-devel-0.9.8e-27.el5_10.3.x86_64.rpm
> 5e77479be327088ad06922fd14366aef4eb4d763bb25e4f2fa20350e543eb701  
> openssl-perl-0.9.8e-27.el5_10.3.x86_64.rpm
> 
> Source:
> cc0b4c125d0fccfb0a18b8395ca554627e76f03d5c2dc8d20d4f0c40b4ddc31e  
> openssl-0.9.8e-27.el5_10.3.src.rpm
> 
> 
> 
> -- 
> Karanbir Singh
> CentOS Project { http://www.centos.org/ }
> irc: z00dax, 
> #
> 
> _______________________________________________
> CentOS-announce mailing list
> 
> http://lists.centos.org/mailman/listinfo/centos-announce


Thanks;

-jason

On Jun 25, 2014, at 5:12 PM, paw 
<>
 wrote:

> Hi Guys,
> Is there a patch for CentOs 5.x ?
> I did a yum install and it patched openssl to 0.9.8.something.
> My local Nessus scanner doesn't like that revision.
> 
> Thanks for all your help,  --Paul Wisniewski , Univ of Wisconsin-Madison
> 
> 
> On 6/5/14 11:37 AM, Jason Zurawski wrote:
>> Greetings;
>> 
>> Please see below for an announcement from the CentOS project on updated 
>> openssl packages.  Additional information (including a FAQ section that 
>> outlines the risks and impacts) from RedHat can be found at this link:
>> 
>>  https://access.redhat.com/site/articles/904433
>> 
>> We would encourage all netinstall users to run 'yum update' to retrieve 
>> these latest packages.  The development team will be re-building the 
>> LiveCD/LiveUSB packages soon, and will announce when they are available 
>> for download.  
>> 
>> Thanks for your patience;
>> 
>> -jason
>> 
>> Begin forwarded message:
>> 
>>> From: Karanbir Singh 
>>> <>
>>> Subject: [CentOS-announce] CESA-2014:0625 Important CentOS 6 openssl 
>>> Update
>>> Date: June 5, 2014 9:06:47 AM EDT
>>> To: 
>>> 
>>> Reply-To: 
>>> 
>>> 
>>> 
>>> CentOS Errata and Security Advisory 2014:0625 Important
>>> 
>>> Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0625.html
>>> 
>>> The following updated files have been uploaded and are currently 
>>> syncing to the mirrors: ( sha256sum Filename ) 
>>> 
>>> i386:
>>> 3ad06a284d64b200cc39d15152cb4bca571040d500b2384859298c9b56326877  
>>> openssl-1.0.1e-16.el6_5.14.i686.rpm
>>> 022af3211b1eac37da65a1fba3987394c3772bf88b3fbc02a5b5d654040cbd5a  
>>> openssl-devel-1.0.1e-16.el6_5.14.i686.rpm
>>> f47ec60ca5246b494e9b3c442045c51b583efd0270aa43c773916f92d4abefeb  
>>> openssl-perl-1.0.1e-16.el6_5.14.i686.rpm
>>> 41bfb05683299268a7f2f58cd60c1e22d300dd034109feb598045b7fd2f08db9  
>>> openssl-static-1.0.1e-16.el6_5.14.i686.rpm
>>> 
>>> x86_64:
>>> 3ad06a284d64b200cc39d15152cb4bca571040d500b2384859298c9b56326877  
>>> openssl-1.0.1e-16.el6_5.14.i686.rpm
>>> 414c27d70eeaac128eb7367472913cd5c4a6e62866e2226b18cab36a7fec3247  
>>> openssl-1.0.1e-16.el6_5.14.x86_64.rpm
>>> 022af3211b1eac37da65a1fba3987394c3772bf88b3fbc02a5b5d654040cbd5a  
>>> openssl-devel-1.0.1e-16.el6_5.14.i686.rpm
>>> 060234549bfdc54830b055f51fb732c7210e33e70ea5aa1075c0d9e7504af54a  
>>> openssl-devel-1.0.1e-16.el6_5.14.x86_64.rpm
>>> 5481b3acd593f2704943b39d8738ea98f8fcdc1e5d479ce3fa28175c9d4020c6  
>>> openssl-perl-1.0.1e-16.el6_5.14.x86_64.rpm
>>> 1f56277882bcf56df3c17f8c4bfc017c677fafe142100aca3385d2d6b9d48815  
>>> openssl-static-1.0.1e-16.el6_5.14.x86_64.rpm
>>> 
>>> Source:
>>> 5e60e75d09db8bde7a5db4f8d3abfa00574a2c739ac4b29d6c8b9c1129b6a11b  
>>> openssl-1.0.1e-16.el6_5.14.src.rpm
>>> 
>>> 
>>> 
>>> -- 
>>> Karanbir Singh
>>> CentOS Project { http://www.centos.org/ }
>>> irc: z00dax, 
>>> #
>>> 
>>> _______________________________________________
>>> CentOS-announce mailing list
>>> 
>>> http://lists.centos.org/mailman/listinfo/centos-announce