Resolved: New SSL Certificates for UCS (Bleedingheart bug)
This morning, April 9 at 6:00 a.m., the University Collaboration Suite (UCS) was updated with a patch, provided by Zimbra, to address OpenSSL’s (https://www.openssl.org) implementation of the TLS Heartbeat Extension, also known as the “Heartbleed” Bug. Additionally, the new SSL certificate for UCS was updated this morning. The UCS SSL certificate was scheduled to be updated on April 22, but due to the Heartbleed Bug this process was expedited.
Additional information about the Heartbleed Bug:
Penn State SOS Statement about Heartbleed: http://sos.its.psu.edu/2014/04/the-heartbleed-bug.html
Software Engineering Institute at Carnegie Mellon: http://www.kb.cert.org/vuls/id/720951
Website dedicated to this bug: http://heartbleed.com