Zimbra Forums

I have run the manual update in test environment like below. Installed the OpenSSL 1.0.1h on root , and checked the openssl version - from root it is showing like below OpenSSL 1.0.1h 5 Jun 2014 As zimbra user , it was showing OpenSSL 1.0.1d 5 Feb 2013. As a root  , unlinked openssl with OpenSSL 1.0...

I was able to download 1.0.1d version but I want to upgrade to 1.0.1h version , due to openssl vulnerability i am planning to upgrade to 1.0.1h version.

Please help on the same.



If it is possible to with manually please let me know the steps

[kryptos@zim01 ~]$ ls -la /opt/zimbra/ | grep openssl

lrwxrwxrwx 1 root root 14 Oct 28 01:33 openssl -> openssl-1.0.1d

drwxr-xr-x 6 root root 4096 Sep 4 2013 openssl-1.0.1d

Getting below error



+ SSL_VERSION=1.0.1h

+ '[' '!' -d /opt/zimbra/openssl-1.0.1h ']'

+ echo 'Error: Unable to patch this release'

Error: Unable to patch this release

+ exit 1

This works fine , but It has downloaded openssl-1.0.1d instead of openssl-1.0.1h. I need to upgrade to openssl-1.0.1h , server is already with openssl-1.0.1d. Below are the script result [root@zim01 tmp]# ./zmopenssl-updater.sh ++ whoami + '[' xroot '!=' xroot ']' + SSL[0]=1.0.1d + SSL[1]=1.0.1e + S...

Hi, zmcontrol -v Release 8.0.3_GA_5664.RHEL6_64_20130305090204 CentOS6_64 FOSS edition. Is there any way manually upgrade openssl , since script is not working for me. Below steps are any helpful without effecting zimbra services. update system to latest openssl with yum update openssl cd /opt/zimbr...

Hi Sebas, I have done as you said , redownloaded the script and added -x , I got below out put [root@zim01 tmp]# ./zmopenssl-updater.sh ++ whoami + '[' xroot '!=' xroot ']' + SSL[0]=1.0.1d + SSL[1]=1.0.1e + SSL[2]=1.0.1e + SSL[3]=1.0.1e + SSL[4]=1.0.1f ++ su - zimbra -c 'zmcontrol -v' + VERSION='Rel...

Hi, My zimbra server is running in one server , I have downloaded the script from same place and given the read and execute permission and I have executes as root , while running the script I have received below error [root@test tmp]# ./zmopenssl-updater.sh Downloading patched openssl Error: Unable ...

Hi, My server is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224) and exploitable , so I am planning upgrade to latest ssl version. The version is currently running [zimbra@zim01 ~]$ openssl version OpenSSL 1.0.1d 5 Feb 2013 And zimbra version is below [zimbra@zim01 ~]$ zmcontrol -v Relea...

Hi Amit Maheshwari, Thank you for your reply. I have tried as you said , but it is not working . When ever I stop the amavis it was effecting mail flow and getting disconnected from 127.0.0.1 More over antispam or antivirus are not showing in services enabled and I have start the amavis service manu...