Heartbeat Open SSL Vulnerability - what is Alfresco doing in response

[dmertz123]

Assuming the servers which are hosting alfresco are Linux based, have the servers been checked to see if they are vulnerable to the OpenSSL heartbeat vulnerability? 

When were the servers updated?

What else is being done to pre-emptively address possibly exposed certificates, passwords, encryption keys, etc.?

[petep]

Thanks for the enquiry. I can confirm that all servers at Alfresco have been patched and all necessary authentication tokens rotated. Please see our statement on the matter at https://portalalfresco.secure.force.com/articles/en_US/Security_Bulletin/OpenSSL-vulnerability-Heart...

[mrogers]

Patches have been applied.

I'm not in a position to give further details and wouldn't post specific security details anyway.

[jpotts]

For folks who cannot log in to the support portal, Pete has added a post in the Announcements forum here:
http://forums.alfresco.com/forum/general/announcements/heartbleed-ssl-vulnerability-cve-2014-0160-04...

Jeff