Zimbra not affected by critical OpenSSL issue

The OpenSSL project is releasing a critical fix for OpenSSL version 3.x.

Zimbra is using OpenSSL version 1.1.1q which is an older still supported version of OpenSSL. The version in Zimbra is not affected by the fix, which means no patches are needed for Zimbra. You should install operating system security updates and other 3rd party software updates that apply this OpenSSL fix ASAP.

To check the current version of OpenSSL in Zimbra you can run the following commands:

[root@zimbra ~]# /opt/zimbra/common/bin/openssl
OpenSSL> version
OpenSSL 1.1.1q FIPS 5 Jul 2022