Upgrading OpenSSL in FreeBSD 7.1

Status
Not open for further replies.
V

Vetri

Hello Experts,

I am completely new to FreeBSD OS and I am running FreeBSD 7.1 with pre-installed OpenSSL 0.9.8e version.

To address CVE-2014-0224 and CVE-2009-3555 I need to upgrade the OpenSSL version to 0.9.8za.

What's the best option to do it?

From surfing the net it looks like the following commands will help. Is it true? If so then what's the OpenSSL version it will upgrade?

Code: 
# freebsd-update fetch
# freebsd-update install
Any help on this will be really helpful.
 
For supported versions of FreeBSD, those would be the exact commands to use. However, FreeBSD 7 is not a supported version. You would have to upgrade to FreeBSD 8.4 or newer.
 
Thanks for the immediate responses.

I will check with management regarding the FreeBSD OS upgrade to 8.4

Is there any other way to upgrade openssl to 0.9.8za in FreeBSD 7.1
 
Vetri said:
Is there any other way to upgrade openssl to 0.9.8za in FreeBSD 7.1
Click to expand...
There is no official or supported way of doing what you want. In terms of looking for another (albeit terrible) option to present to your management, since FreeBSD is an open source project, you could build your own version, taking the 7.1 source code and attempting to integrate the most recent version ("back port") of OpenSSL before recompiling. You would be unlikely to receive help on the forums in such an endeavour; see "Topics about unsupported FreeBSD versions" in the forum guidelines - Thread 40469. Even if you were successful, you would be left with an unsupported, bespoke version of FreeBSD with other known security vulnerabilities. Upgrading is definitely the way to go.
 
With the same effort that you use to upgrade to 8.4 you could just as well upgrade to 9.3. Version 8.4 of FreeBSD is supported until June 30, 2015 *) and there won't be a version 8.5. Version 9.3 was just released and will be supported until December 31, 2016 and it's very likely that there will be version 9.4 released next year.

*) https://www.freebsd.org/security/index.html#sup
 
Locking this. Staying on FreeBSD 7 should not be advised or even condoned by anyone taking security seriously. Upgrade to a supported version.
 
Status
Not open for further replies.
Back
Top