Results 1 to 2 of 2

Thread: Informational - Update your virtualization packages or apps to avoid Heartbleed

  1. #1
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    13,295
    Blog Entries
    2

    Lightbulb Informational - Update your virtualization packages or apps to avoid Heartbleed

    Just a reminder and also because only now (this past week) I'm seeing new releases from VMware and Virtualbox which undoubtedly include patches for heartbleed (I haven't checked but it's a good assumption). This can be required because some of these apps include their own versions of openSSL when the base code is multi-platform (or a bare metal install).

    I assume that other 3rd party or independent projects should also be releasing new versions about now.

    I've been looking at KVM but can't find any special update, possibly because it's so embedded in mainstream Linux and part of the Linux kernel that any normal distribution of distro patches automatically update KVM as well.

    TSU

  2. #2

    Default Re: Informational - Update your virtualization packages or apps to avoid Heartbleed

    Quote Originally Posted by tsu2 View Post
    Just a reminder and also because only now (this past week) I'm seeing new releases from VMware and Virtualbox which undoubtedly include patches for heartbleed (I haven't checked but it's a good assumption). This can be required because some of these apps include their own versions of openSSL when the base code is multi-platform (or a bare metal install).
    At least openSUSE's virtualbox package uses the system's libopenssl1_0_0, so no need for an update there.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •