Do we have a definitive of services that use openssl? Itıs installed pretty much everywhere but for instance dCache uses the native java SSL implementation and so I donıt believe it is affected. The same could well be true of Argus which is mostly java but I donıt know. Yours, Chris. >I plan to start doing just that for the affected Oxford systems[1] >shortly, >unless anyone thinks of a reason why I shouldn't. > >Ewan > > >[1] Thankfully, we have rather fewer that we might have done, since the >thirty-odd DPM servers are all still SL5. -- Scanned by iCritical.