Upcoming critical security update for OpenSSL about bob HOT 4 CLOSED

When Ubuntu release their new images we can update to use them and trigger builds for them.

from bob.

Note that only Erlang/OTP 25.1 or later support OpenSSL 3.0, so I wouldn't expect earlier versions to be affected.

from bob.

Interesting :)

The details of how it works at that level are beyond me. The container contains an openssl that reports 3.0.2 and it is an Erlang 24 container. Is there a separate OpenSSL packed in there for Erlang then or how does that work?

Either way I think a bunch of people with container-scanning tools and such will be told they have a critical vulnerability in their containers very soon.

Me, I'd rather just make sure I'm up to date and I'd rather not take on an Elixir + Erlang update to get there :)

from bob.

Great!

from bob.