Heartbleed Bug & SpamFilter |
Post Reply |
Author | |
LogSat
Admin Group Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Posted: 10 April 2014 at 10:46pm |
SpamFilter's SSL and TLS implementations use OpenSSL v1.0.1c libraries which are susceptible to the Heartbleed Bug (www.heartbleed.com).
In our tests we were able to confirm that SMTP connections which use TLS to encrypt the email traffic can expose sensitive data as described in the various advisories for the Heartbleed Bug. Connections made over SSL (if an SSL port has been configured in SpamFilter) are instead safe. To resolve the issue admins should simply update the two OpenSSL v1.0.1c DLLs that are vulnerable. They are located in the SpamFilter's installation directory: libeay32.dll ssleay32.dll You may download the patched OpenSSL files v1.0.1g from our website at: To install them, simply stop SpamFilter, replace the two existing DLLs with the ones in the zip file, and restart SpamFilter. Note - the new OpenSSL libraries require the Microsoft Visual C++ 2008 Redistributable to be installed on the server. If the VC++ libraries are not present, you can install them from Microsoft's website: Please contact us at support at logsat dot com if you need any additional information or assistance int he deployment.
Edited by LogSat - 15 July 2014 at 6:59pm |
|
LogSat
Admin Group Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
|
The latest OpenSSL libraries available are 1.0.2a, and can be downloaded from: Unlike the OpenSSL 1.0.1g above, these libraries should not need the MS Visual C++ 2008 redistributable installed on the server.
|
|
Post Reply | |
Tweet
|
Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.108 seconds.