Planned Outage - Nov 1

[Matt K]

I will have an outage sometime on November 1st to potentially address the recently discovered Critical Vulnerability in OpenSSL. I'm unsure of time, OpenSSL has not indicated when they will drop the patch on Nov 1 yet.

I need to do an OS upgrade, so this is an opportune time to do that as well. It's likely the site actually isn't vulnerable, which is why I stick to an LTS distro that just backports security patches for quite some time

[bymiller]

Very prudent - definitely also a fan of using LTS on production sites for just this kind of fun. Thank you for all of the work you do to keep this excellent site running!

[craign]

Yeah, my understanding is it only impacts quite new versions of OpenSSL (approx. last year), so if running LTS I doubt you are impacted.

[Matt K]

Indeed, looks like we have no vulnerability based on the version we're running, so I'm going to cancel the planned outage. If you are managing systems that have OpenSSL >1... good luck today.