OpenSSL Heartbleed

As reported by the OpenSSL Project, OpenSSL is vulnerable to TLS heartbeat read overrun (CVE-2014-0160). OpenSSL versions 1.0.1 through 1.0.1f contain a flaw in its implementation of the TLS/DTLS (transport layer security protocols) heartbeat functionality.

The 3.2 Build 606 - 3.3 Build 608 versions of Advanced Task Scheduler did include the OpenSSL library that contained the OpenSSL Heartbleed vulnerability found in the OpenSSL 1.0.1 library.

Updated version (3.3 Build 609) of Advanced Task Scheduler was released on September 15, 2014. This version (and later versions) contain a permanent fix for the Heartbleed vulnerability.

Categories: Task scheduler