Len, It's an OS issue rather than a CloudStack issue. If you have recently deployed a Management Server based on CentOS 6.5 then you may have the affected version of openssl installed.
You can check by running # openssl version If you have versions 1.0.1 through to 1.0.1f (inclusive) you are affected If you have 1.0.1g you are OK 1.0.0 branch and 0.9.8 branch are also OK Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com -----Original Message----- From: Len Bellemore [mailto:len.bellem...@controlcircle.com] Sent: 09 April 2014 11:03 To: users@cloudstack.apache.org Subject: OpenSSL Flaw Hi Guys, Does anyone know which version of ACS are affected by the Hearbleed OpenSSL flaw? - http://heartbleed.com/ Thanks Len ________________________________ IMPORTANT NOTICE. This electronic message contains information from Control Circle Ltd, which may be privileged or confidential. The information is intended for use only by the individual(s) or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is strictly prohibited. If you have received this electronic message in error, please notify me by telephone or email (to the number or email address above) immediately. Activity and use of the ControlCircle e-mail system is monitored to secure its effective operation and for other lawful business purposes. Communications using this system will also be monitored and may be recorded to secure effective operation and for other lawful business purposes Need Enterprise Grade Support for Apache CloudStack? Our CloudStack Infrastructure Support<http://shapeblue.com/cloudstack-infrastructure-support/> offers the best 24/7 SLA for CloudStack Environments. Apache CloudStack Bootcamp training courses **NEW!** CloudStack 4.2.1 training<http://shapeblue.com/cloudstack-training/> 28th-29th May 2014, Bangalore. Classromm<http://shapeblue.com/cloudstack-training/> 16th-20th June 2014, Region A. Instructor led, On-line<http://shapeblue.com/cloudstack-training/> 23rd-27th June 2014, Region B. Instructor led, On-line<http://shapeblue.com/cloudstack-training/> 15th-20th September 2014, Region A. Instructor led, On-line<http://shapeblue.com/cloudstack-training/> 22nd-27th September 2014, Region B. Instructor led, On-line<http://shapeblue.com/cloudstack-training/> 1st-6th December 2014, Region A. Instructor led, On-line<http://shapeblue.com/cloudstack-training/> 8th-12th December 2014, Region B. Instructor led, On-line<http://shapeblue.com/cloudstack-training/> This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
