Page 1 of 1

OpenSSL [Exploit] OK To Substitute 1.0.1g Version?

Posted: 09 Apr 2014, 16:16
by therube
OpenSSL [Heartblead Exploit] is it OK To Substitute to the patched 1.0.1g Version, simply replacing existing with the updated dll's?

Re: OpenSSL [Exploit] OK To Substitute 1.0.1g Version?

Posted: 09 Apr 2014, 17:51
by Jan Rysavy
It can work, I didn't test it. Default Altap Salamander OpenSSL is linked with salrtl* RTL. Let us know...

We are preparing AS 3.01 with OpenSSL 1.0.1g.

Edit: -removed-

Re: OpenSSL [Exploit] OK To Substitute 1.0.1g Version?

Posted: 29 Apr 2014, 17:01
by therube
Updated dll's are now included in 3.0.1 release :-).

Re: OpenSSL [Exploit] OK To Substitute 1.0.1i Version?

Posted: 01 Sep 2014, 15:06
by therube
OpenSSL 1.0.1i - Security Update
Before, it was "just there" & you never need to pay attention.
Now, well, there are security fixes to deal with ;-).
(And not included in 3.0.3.)

Re: OpenSSL [Exploit] OK To Substitute 1.0.1g Version?

Posted: 04 Sep 2014, 09:15
by Jan Rysavy
Thank you. We will include OpenSSL version checking to our pre-release checklist.
Here is OpenSSL 1.0.1i compiled with Altap Salamander options: http://www.altap.cz/upload/openssl_1_0_1i.7z

Re: OpenSSL [Exploit] OK To Substitute 1.0.1g Version?

Posted: 26 Sep 2014, 16:37
by Sio_x
Can you update the News with the correct download plz.