Buildkite incident

OpenSSL Upgrade

Notice Resolved View vendor source →

Buildkite experienced a notice incident on March 18, 2015, lasting 1d. The incident has been resolved; the full update timeline is below.

Started
Mar 18, 2015, 04:36 PM UTC
Resolved
Mar 19, 2015, 05:10 PM UTC
Duration
1d
Detected by Pingoru
Mar 18, 2015, 04:36 PM UTC

Update timeline

  1. scheduled Mar 18, 2015, 04:36 PM UTC

    The OpenSSL project team are releasing a new version of OpenSSL that will fix some "high" severity security issues. You can read more about the update here: https://mta.openssl.org/pipermail/openssl-announce/2015-March/000020.html The new version is scheduled to be released sometime between 1100-1500 GMT, 19th March. We will be reviewing the upgrade at this time, and there may be some downtime during this maintenance. We will communicate our plans once the release is available. We also suggest you review the release during this time as well and ensure your CI servers are up to date.

  2. scheduled Mar 19, 2015, 01:48 PM UTC

    We're waiting for the update to be released.

  3. in progress Mar 19, 2015, 01:48 PM UTC

    Scheduled maintenance is currently in progress. We will provide updates as necessary.

  4. completed Mar 19, 2015, 05:10 PM UTC

    We have reviewed the vulnerabilities, and have concluded that no action needs to be taken at this time. Our hosting provider has issued this statement: http://aws.amazon.com/security/security-bulletins/openssl-security-advisory---march-2015/