1 Topic by dmitridb (edited by dmitridb 2014-04-10 01:47:27)

  • dmitridb
  • Member
  • Offline
  • Registered: 2014-02-06
  • Posts: 5

Topic: Best advice for heartbleed SSL vulnerability patching on OpenBSD?

Hello;

I'm writing to ask about what the best course of action would be for reinstalling apache and postfix in order for them to link against the patched openssl libraries, which were fixed against the famous major SSL vulnerability here:

http://heartbleed.com/

Realizing that the way that iRedMail has its own idea of how things are to be installed (Not finding apache in pkg_info, for eg), and that I should probably take that into consideration before breaking everything.

Although I don't know if this is entirely relevant, in the interest of fulfilling the required information, I've got MySQL as a backend and am running OpenBSD 5.4 with iRedMail 0.8.6 .

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: Best advice for heartbleed SSL vulnerability patching on OpenBSD?

iRedMail installs required packages from OpenBSD official repository, you can wait for official update or rebuild packages yourself (if it's  necessary to fix this issue) with ports tree.