Re: HeartBleed, Zimbra 8.0.6 (and other versions likely) vulnerable.

[Nathan <lagern@lafayette.edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In my dev environment, this fixes postfix as well.


On 04/08/2014 11:16 AM, Nathan wrote:
> Update.
> 
> on RHEL6 previous to 6.5, you need to apply the RedHat 
> openssl-1.0.1e-16.el6_5.7.x86_64 update from today.
> 
> Then do the work-around mentioned previously.
> 
> This also appears to affect postfix, its worth patching there too,
> but i have not yet tested.
> 
> 
> 
> On 04/08/2014 11:03 AM, Nathan wrote:
>> This is a very big deal.
> 
>> http://heartbleed.com 
>> https://bugzilla.zimbra.com/show_bug.cgi?id=88688
> 
> 
>> The work-around in comment 19 works on rhel6.5.  I'm still
>> working on a 6.4 fix, as thats what my zimbra servers are
>> running.
> 
>> This, as far as I know, only applies to the proxy servers.  I am
>>  testing against a stand-alone box now.
> 
>> Test your systems with:
>> https://gist.github.com/takeshixx/10107280
> 
> 
> 
> 
> 

- -- 
- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Nathan Lager, RHCSA, RHCE, RHCVA (#110-011-426)
System Administrator
11 Pardee Hall
Lafayette College, Easton, PA 18042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlNEFKUACgkQsZqG4IN3sukNSQCfdqg6/RwDA1v9mu6oUHK23BOo
w7IAn2TFJGuo1bIjJiBTmuFMTPvNn1z0
=IHgD
-----END PGP SIGNATURE-----