<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
All,<br>
<br>
I'm sure you have all heard about the <a
href="http://heartbleed.com/">Heartbleed</a> bug by now. If not,
you definitely need to read up on it and take appropriate action. <br>
<br>
A Cyrus admin (not at CMU) has recently run the <a
href="https://github.com/noxxi/p5-scripts/blob/master/check-ssl-heartbleed.pl">check-ssl-heartbleed</a>
script against his server which was using one of the effected
versions of OpenSSL and was easily able to capture usernames and
passwords, including the admin password.<br>
<br>
Again, please check the versions of OpenSSL on your servers and
patch or upgrade them ASAP.<br>
<br>
Regards,<br>
Ken<br>
<pre class="moz-signature" cols="72">--
Kenneth Murchison
Principal Systems Software Engineer
Carnegie Mellon University
</pre>
</body>
</html>