Home | Blog | Update OpenSSL 1.0.1g

Update OpenSSL 1.0.1g

heartbleed logo 1

By Clément Nivolle

Features

Yesterday, a security patch of OpenSSL 1.0.1g was issued, fixing a pretty critical vulnerability (refered to as CVE-2014-0160).

Once issued, the Clever Cloud support team immediately updated our service with it.

Who's affected?

If you have SSL enabled on Clever Cloud, you have to read the following.

What to do?

Clever Cloud is not vulnerable to this security breach anymore, but we urge you to regenerate SSL keys and re-issue your certificate. Certificate regeneration is not a sufficient solution to protect you completely, you also have to regenerate a new SSL key. If you have any questions related to this security update for your apps hosted on Clever Cloud, feel free to send us an e-mail, our team will keep you informed of future developments.

Which versions of OpenSSL are vulnerable?

  • OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable
  • OpenSSL 1.0.1g is NOT vulnerable
  • OpenSSL 1.0.0 branch is NOT vulnerable
  • OpenSSL 0.9.8 branch is NOT vulnerable

Tags

Blog

À lire également

What Is the SAML 2.0 Authentication Protocol Used For?
SAML 2.0 (Security Assertion Markup Language) is an open standard based on XML (eXtensible Markup Language) that enables Single Sign-On (SSO) across multiple domains. It delegates authentication to a central identity provider, which sends each application a signed “assertion” proving the user’s identity, without requiring the user to re-enter or share their password with each application.
Engineering Features

UP Programme: meet the 4 startups joining Clever Cloud’s sixth cohort
Kernel, Nijal AI, Qiplim and Arkan are joining the sixth cohort of Clever Cloud’s UP Programme.
Company

French Managed Kubernetes: What Are the Alternatives to Hyperscalers in 2026?
French managed Kubernetes services provide organisations with European alternatives to AWS EKS, Google GKE and Azure AKS. OVHcloud, Scaleway and Clever Cloud now offer such services on infrastructure located in France or elsewhere in Europe. However, choosing a French managed Kubernetes service involves more than server location: the infrastructure model, the division of operational responsibilities and integration with other cloud services are equally important.
This article compares the three offerings and outlines the key criteria for making a decision.
Engineering Features