# OpenSSL security updates for SLES 11.3

**URL:** <https://forums.suse.com/t/openssl-security-updates-for-sles-11-3/28221>\
**Category:** SLES Configure-Administer\
**Created:** [May 30, 2016, 7:29pm UTC](https://forums.suse.com/t/openssl-security-updates-for-sles-11-3/28221 "2016-05-30T19:29:58Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![chandanmedhi](https://avatars.discourse-cdn.com/v4/letter/c/46a35a/32.png) [@chandanmedhi](https://forums.suse.com/u/chandanmedhi)\
**Post date:** [May 30, 2016, 7:29pm UTC](https://forums.suse.com/t/openssl-security-updates-for-sles-11-3/28221/1 "2016-05-30T19:29:58Z")

</div>

Hello Folks,

Could you please guide me, what should be my OpenSSl security updates and how to download this ? Because I am facing issue in my SLES 11 SP 3 with openssl Version running

Version : 0.9.8j Vendor: SUSE LINUX Products GmbH, Nuernberg, Germany  
Release : 0.50.1 Build Date: Mon Mar 25 11:10:09 2013

Do I need to upgrade my openssl version here and patch ?

Or else I can patch on my current existing openssl version.

One more problem is that, I have no registered zypper repo installed.

What should be my approach here ?

Advice please.

Regards

Chandan.M

---

<div class="post-metadata">

**Author:** ![malcolmlewis](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/malcolmlewis/32/11375_2.png) [@malcolmlewis](https://forums.suse.com/u/malcolmlewis)\
**Post date:** [May 30, 2016, 7:49pm UTC](https://forums.suse.com/t/openssl-security-updates-for-sles-11-3/28221/2 "2016-05-30T19:49:32Z")

</div>

Hi  
So you don’t have a current license to receive updates?

Have a look here for ones that are public?  
[https://download.suse.com/patch/finder/#bu=suse&familyId=7261&productId=42045&dateRange=&startDate=&endDate=&priority=&architecture=&keywords=ssl&xf=7261&xp=7261\_42045](https://download.suse.com/patch/finder/#bu=suse&familyId=7261&productId=42045&dateRange=&startDate=&endDate=&priority=&architecture=&keywords=ssl&xf=7261&xp=7261_42045)

Upgrade the system to SLES 11 SP4, grab an evaluation code, but why not register the system proper and receive updates and support?

---

<div class="post-metadata">

**Author:** ![chandanmedhi](https://avatars.discourse-cdn.com/v4/letter/c/46a35a/32.png) [@chandanmedhi](https://forums.suse.com/u/chandanmedhi)\
**Post date:** [May 30, 2016, 8:15pm UTC](https://forums.suse.com/t/openssl-security-updates-for-sles-11-3/28221/3 "2016-05-30T20:15:10Z")

</div>

Thanks for the reply. Much appreciated.

These are some of our legacy systems which need to be upgraded to higher version. Does it required to upgrade to SP4 to patch that ?

Also I am trying to download, but patch is restricted. Is this because of the registration or access not permitted ?

Restriction status: Restricted

Regards

Chandan.M

---

<div class="post-metadata">

**Author:** ![malcolmlewis](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/malcolmlewis/32/11375_2.png) [@malcolmlewis](https://forums.suse.com/u/malcolmlewis)\
**Post date:** [May 30, 2016, 9:28pm UTC](https://forums.suse.com/t/openssl-security-updates-for-sles-11-3/28221/4 "2016-05-30T21:28:15Z")

</div>

[QUOTE=chandanmedhi;32745]Thanks for the reply. Much appreciated.

These are some of our legacy systems which need to be upgraded to higher version. Does it required to upgrade to SP4 to patch that ?

Also I am trying to download, but patch is restricted. Is this because of the registration or access not permitted ?

Restriction status: Restricted

Regards

Chandan.M[/QUOTE]  
Hi  
Yes, you need an active subscription to download the updates etc, some are public, but suggest upgrade to SP4 for the latest updates, if you grab the SLES 11 SP4 DVD1, there should be an option for an evaluation code which should be good for a few months for access to updates.

[https://download.suse.com/Download?buildid=tqRrEpjl5SY~](https://download.suse.com/Download?buildid=tqRrEpjl5SY~)

---

<div class="post-metadata">

**Author:** ![smflood](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/smflood/32/10576_2.png) [@smflood](https://forums.suse.com/u/smflood)\
**Post date:** [June 3, 2016, 12:30am UTC](https://forums.suse.com/t/openssl-security-updates-for-sles-11-3/28221/5 "2016-06-03T00:30:42Z")

</div>

chandanmedhi Wrote in message:  
[color=blue]

> Could you please guide me, what should be my OpenSSl security updates  
> and how to download this ? Because I am facing issue in my SLES 11 SP 3  
> with openssl Version running
> 
> Version : 0.9.8j Vendor: SUSE LINUX Products  
> GmbH, Nuernberg, Germany  
> Release : 0.50.1 Build Date: Mon Mar 25  
> 11:10:09 2013
> 
> Do I need to upgrade my openssl version here and patch ?
> 
> Or else I can patch on my current existing openssl version.
> 
> One more problem is that, I have no registered zypper repo installed.
> 
> What should be my approach here ?
> 
> Advice please.[/color]

Firstly if you are concerned about security then you should  
upgrade your server to SLES11 SP4 and keep it updated - your  
replies to Malcolm suggest you don’t currently have access to  
patches through a subscription.

There is the possibility of installing OpenSSL 1.0.1 on SLES11 SP3  
and SP4 (included out of the box with SLES12) via an additional  
security module if you have a subscription - please see  
[https://www.suse.com/communities/blog/introduci](https://www.suse.com/communities/blog/introduci)  
ng-the-suse-linux-enterprise-11-security-module/ (URL may not  
wrap).

## HTH.

Simon Flood  
SUSE Knowledge Partner

----Android NewsGroup Reader----  
[http://usenet.sinaapp.com/](http://usenet.sinaapp.com/)
