March 2015 OpenSSL updates

[downey (Michael Downey)]

Continuing the discussion from Patching the heartbleed vuln in a docker image?:

Today OpenSSL announced a big list of vulnerabilities and updated releases for those vulnerabilities:

https://www.openssl.org/news/vulnerabilities.html

What is the suggested plan for upgrading? Will there be a new Docker image? Should admins plan to go in and update OpenSSL manually somehow?

[sam (Sam Saffron)]

There will be a new docker image, just need to confirm the updates don’t break us.