Heartbleed Bug & CAIRS products

Hello,

You may have already heard about the Heartbleed Bug, the recent vulnerability uncovered in a component named OpenSSL has affected an enormous number of vendors and companies that rely on this near-ubiquitous open source security protocol. In basic terms, the vulnerability exposes any data exchange that uses specific versions of the protocol to an attack.  Versions 1.0.1 through version 1.0.1f are affected.

Some of the CAIRS products use OpenSSL BUT ARE NOT IMPACTED.  CAIRS utilizes a version of the software (version 0.9.8e) which is specifically designated as NOT vulnerable.

The following is a list of CAIRS products which utilize the software but are NOT IMPACTED by this vulnerability:

·         MyAdoptionPortal

·         ChildConnect

·         AIRS

·         FAC Ecommerce Site

·         Birth Mother Baskets Ecommerce Site

As with any wide reaching story and in an effort of being a good partner, we understand that our customers may have concerns. We're here to answer your questions if you should have any.

Sincerely,

-The CAIRS Team

For more information on the Heartbleed Bug vulnerability visit:
http://heartbleed.com/