If so, wondering about whether there will be a hotfix to address https://mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html that lands today (similar to heartbleed vuln)

You might want to do a quick search of slack, this was discussed the other day briefly.

Are you thinking of this one? https://cfml.slack.com/archives/C06T9CQ0N/p1666880516977439 That's the only one I could spot right off

Yep!

Ok, gotcha. It looks like it was inconclusive. Kind of ends with "maybe via Java 🤷". @Mark Takata (Adobe) do you think you could track down a definitive answer on whether we need to be concerned?

checking...

https://cfml.slack.com/archives/C06T9CQ0N/p1667317966675689?thread_ts=1666880516.977439&cid=C06T9CQ0N And if the answer is "not directly, but depends on what web server is running under the hood" I'm fine with that as well

I seem to recall the last time there was an openssl issue, getting any response at all out of Adobe was like pulling a mouth full of teeth.

Hi All, Just want to update everyone that CF is not impacted by OpenSSL vulnerability.

Thank you for confirming this Priyank ❤️

@priyank_adobe can you confirm that AWS AMI installs through Adobe partners are also not affected?

Hey Mith, just a heads up, Priyank has just gone on his sabbatical. He will be unavailable for a few weeks. Adobe folks get a multiple week sabbatical every five years.

@thanks @Mark Takata (Adobe). @mithlond Yes those are also not affected.

woot - thank you! and sorry to bother you on your vacation. enjoy! 🏝️