Heartbleed: OpenSSL Vulnerability

[galuh82]

yang pake virtualizor juga jangan lupa ya

Recently a serious vulnerability was found in the OpenSSL cryptographic software library. The Fix was released on 7th April, 2014 and the OpenSSL version which fixes the bug is 1.0.1g.

Currently the servers running Virtualizor VPS Panel are vulnerable to Heartbleed bug, because we maintain our own EMPS stack. We have updated the EMPS Stack which overcomes this vulnerability and we highly recommend to update your Virtualizor EMPS Stack. We will also be releasing the new Virtualizor version which will automatically fix the issue.

Until the new Virtualizor version is launched, you can manually update the Virtualizor EMPS stack using the following command :

root> /usr/local/emps/bin/php /usr/local/virtualizor/scripts/emps.php update

If you need any assistance updating the EMPS, please contact the Virtualizor support team.

 

[galuh82]

--double post-- (koneksi nggak aman)

 

[FlazzNetworks]

yang pake virtualizor juga jangan lupa ya

saya pake virtualizor.. tp malah error

~]# /usr/local/emps/bin/php /usr/local/virtualizor/scripts/emps.php update
[Fri Apr 11 1554 2014] Current Version : 1.0
[Fri Apr 11 1554 2014] Using Arch : x86_64
[Fri Apr 11 1555 2014] Info Received :
[Fri Apr 11 1555 2014] Array :
array (
'latest_version' => '1.6',
'version' => '1.6',
'size' => 90881936,
'arch' => 'x86_64',
)


kenapa ya?

 

[Zaki]

saya pake virtualizor.. tp malah error

~]# /usr/local/emps/bin/php /usr/local/virtualizor/scripts/emps.php update
[Fri Apr 11 1554 2014] Current Version : 1.0
[Fri Apr 11 1554 2014] Using Arch : x86_64
[Fri Apr 11 1555 2014] Info Received :
[Fri Apr 11 1555 2014] Array :
array (
'latest_version' => '1.6',
'version' => '1.6',
'size' => 90881936,
'arch' => 'x86_64',
)


kenapa ya?

diane jadi =

[root@xxxxxxxxxxxxxxxxx~]# /usr/local/emps/bin/php /usr/local/virtualizor/scripts/emps.php update
[root@xxxxxxxxxxxxxxxxx~]#

Cek nya kalo dah berhasil gimana ya hehehe

 

[galuh82]

log awal itu kayaknya belum selesai .. ditempat saya semua server sampai ke notifikasi bahwa update selesai.

 

[deRegen]

bener om galuh tim virtualizor sudah mengingatkan untuk segera update, cuma kadang2 kalo update si virtualizor ini ngeri2 sedap.

 

[junior riau]

update openssl nya saja, kan bisa tanpa perlu virtualizor nya

 

[IIXPLANET]

klo solusvm apakah terkena dampak juga masalah ini ?

 

[galuh82]

update openssl nya saja, kan bisa tanpa perlu virtualizor nya

logikanya bisa saja, tapi apa iya 100% sudah yakin
kita ngikut rekomendasi virtualizor saja supaya lebih yakin kali aja emang virtualizornya juga mesti dipatch. CMIIW

 

[junior riau]

bisa juga sih,, tapi kan abis patch bisa di pentest lagi