[chef] Re: Re: Re: Re: Re: Chef server & heartbleed


Chronological Thread 
  • From: Stephen Delano < >
  • To: " " < >
  • Subject: [chef] Re: Re: Re: Re: Re: Chef server & heartbleed
  • Date: Wed, 9 Apr 2014 13:56:55 -0700

Builds of the Open Source Chef Server are ready to download now. They should be available via http://getchef.com/chef/install. I'll be posting a blog post for all the server releases in a just a few minutes. Cheers!


On Wed, Apr 9, 2014 at 1:21 PM, Michael Glenney < " target="_blank"> > wrote:
Let me clarify. RHEL 6 only. 6.4 or .5 and above. RHEL5 is fine

Sent from my iPhone
That's not the case. RHEL OpenSSL was certainly affected. We received errata and had to patch.

Sent from my iPhone

At our scrum this morning, our security person said that no RHEL official version of OpenSSL contains the vulnerability. So unless someone compiled it from source code, it should be good.

The bad news is that the latest Fedora installations do have it.



JOHN HASTY
Software as a Service - DevOps
Software Group


Phone: 1-512-804-9968
E-mail:
  " target="_blank">
<32787972.gif>

2407 S Congress Ave Ste E-350
Austin, TX 78704
United States


<graycol.gif>Tucker ---04/09/2014 11:29:30 AM---Any update on this?  The blog has chef client updates but I've yet to see anything on server.

From: Tucker < " target="_blank"> >
To: " " target="_blank"> " < " target="_blank"> >,
Date: 04/09/2014 11:29 AM
Subject: [chef] Re: Re: Chef server & heartbleed




Any update on this?  The blog has chef client updates but I've yet to see anything on server.


On Tue, Apr 8, 2014 at 8:15 AM, Adam Jacob < " target="_blank"> > wrote:


--

--tucker




--
Stephen Delano
Software Development Engineer
Opscode, Inc.
1008 Western Avenue
Suite 601
Seattle, WA 98104


Archive powered by MHonArc 2.6.16.

§