OpenSSL critical vulnerability updates

1

Hey

Just wanted to have some certainty on that the Fly team have eyes on this thing: OpenSSL Release Patches Critical Vulnerability - GlobalSign

I’ll be going through our app and see if we have any exposure but would love to know the timeline and if there is any action requires wrt Fly.

The specifics are unreleased but if it is another Heartbleed I’d like to know that we are covered :slight_smile:

2 Likes
2

Oh, we definitely are keeping track of this. The top-line answer: our TLS termination is Rustls, not OpenSSL.

3 Likes