Timeline for This server is vulnerable to the OpenSSL Padding Oracle vulnerability (CVE-2016-2107) and insecure. Grade set to F
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 9, 2016 at 2:49 | comment | added | Ankita Kashyap | i updated to OpenSSL 1.0.2h. Still getting same issue | |
| Nov 8, 2016 at 16:30 | comment | added | mat | What you are saying is not correct. Ubuntu 14.04 is an LTS release and is getting security updates for 5 years (that is until 2019). The openssl in that Ubuntu version has that bug fixed, so there is no need to do a release upgrade just for the sake of it. | |
| Nov 8, 2016 at 10:33 | history | edited | CBHacking | CC BY-SA 3.0 |
added 629 characters in body
|
| Nov 8, 2016 at 10:29 | comment | added | CBHacking | Yes, you do. You could backport and install a newer build of OpenSSL manually - like I said, I don't understand why you grabbed 1.0.2g when there are newer versions available - but you'd just keep having that problem. You are on an unsupported OS version that no longer reliably gets security updates. I'll add instructions on upgrading. | |
| Nov 8, 2016 at 8:37 | comment | added | Ankita Kashyap | Do i need to update ubuntu ? | |
| Nov 8, 2016 at 8:02 | history | answered | CBHacking | CC BY-SA 3.0 |