[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Installing libSSL 0.9.8 in debian jessie



On Thu, Mar 03, 2016 at 06:47:56PM +0530, venkat wrote:
> I have existing library which is built on 0.9.8 and i will be able to
> use it directly without any issues

Are you aware that 0.9.8 has the following security problems:

https://www.cvedetails.com/vulnerability-list/vendor_id-217/product_id-383/version_id-26306/Openssl-Openssl-0.9.8.html

including remote code execution?

It would be much better if you recompile your application
against a modern version, and make sure you keep it up to date.

-dsr-


Reply to: