March 2015 OpenSSL updates

docker

(Michael Downey) #1

Continuing the discussion from Patching the heartbleed vuln in a docker image?:

Today OpenSSL announced a big list of vulnerabilities and updated releases for those vulnerabilities:

https://www.openssl.org/news/vulnerabilities.html

What is the suggested plan for upgrading? Will there be a new Docker image? Should admins plan to go in and update OpenSSL manually somehow?


(Sam Saffron) #2

There will be a new docker image, just need to confirm the updates don’t break us.