IBM Notes & Domino are not vulnerable to OpenSSL "Heartbleed" bug (CVE-2014-0160)
Daniel Nashed – 9 April 2014 19:41:51
In case you are wondering. IBM Domino is not affected by the OpenSSL "Heartbleed" issues. Also Traveler (leveraging the Domino HTTP stack) nor the IBM HTTP Stack in Domino 9 on Windows does not use OpenSSL and is not affected.
You still have to update your machines to a current OpenSSL package if you are running a 1.0.1 OpenSSL package.
Here is the technote from IBM --> http://www.ibm.com/support/docview.wss?uid=swg21669782
And here is some additonal information I got from my ISP --> http://faq.hosteurope.de/index.php?cpid=19463
You have to install a current version. on RHEL/CentOS for example 1.0.1e-16 is not affected any more.
After updating the package you have to restart applications using it.
-- Daniel
- Comments [5]