---
title: "OpenSSL"
description: "1 posts about OpenSSL, summarised, each linking to the original."
---

# OpenSSL
> 1 posts about OpenSSL, summarised, each linking to the original.

## Articles

### [Preparing Our Response to the OpenSSL Security Flaw](https://yomu.fyi/post/preparing-our-response-to-the-openssl-security-flaw.md)
- Company: [Heroku](https://yomu.fyi/company/heroku.md)
- Author: Kevin Thompson
- Published: Jul 30, 2015
- Type: Incident / postmortem

Heroku prepared for an announced high-severity OpenSSL vulnerability whose details were embargoed until patch release. The team began by mapping exposure and system criticality, considering SSL clients, possible man-in-the-middle attacks, encrypted database connections, and worst-case remote code execution, then created stack-image update actions and priorities. Engineers were assigned responsibilities under the existing incident-response process, with communication rules, escalation criteria, paging, and availability planned in advance. When the OpenSSL update and vulnerability details arrived on July 9 at about 8am Central, triage showed it was neither an RCE nor server-side issue, and Ubuntu reported that neither LTS version was affected; because Heroku production used LTS, no remediation or all-hands response was needed. The preparation still exercised exposure review and response coordination for future incidents.