OpenSSL Heartbleed

[Jan Blok]

As you may know there is a vulnerability found in OpenSSL.
We received the question from several customers:

Do we have any exposure to the OpenSSL Heartbleed vulnerability with our Servoy deployments?

The answer is no.
Java and JVM are not using OpenSSL and therefor are not affected.
If you are are using postgress with ssl db connections, you might want to read this.

[Yeroc]

I suppose this ought to be obvious but if you're using Apache or another web server in a reverse-proxy configuration in front of Servoy with that web server handling SSL termination then you could still be vulnerable...

Corey