Is RTMPS affected by the Heartbleed bug?

[borno13]

Or any component for using RTMPS? For example: Adobe Media Server, Flash Player (on Windows, Mac, etc.)?

Please let me know.

Thanks.

[namitagrawal]

OpenSSL version used by AMS for RTMPS is not affected by HeartBleed vulnerability.

[borno13]

Thanks for your reply. That was helpful. I also want to ask if there is any specific version of AMS that is vulnerable to the Heartbleed bug and if it should be upgraded?

[namitagrawal]

This holds true for all shipping versions of AMS

[borno13]

Hi Namita,

I just found this thread : OpenSSL vulnerability 6 Aug 2014 from August and it says AMS 5.0.6 has the fix for the bug. So other versions 5.0.1 through 5.0.5 are affected by the bug?

Could you please clarify?

Thanks a bunch.

[hparmar · Accepted solution]

Yes

[borno13]

Thanks a lot for confirming hparmar. Is there a reason Adobe delayed the release of the patch?

[hparmar]

if openssl releases a patch we try our best to incorporate it in next possible release of AMS.

Even otherwise, openssl can be compiled separately and dropped into AMS installation...Adone encourages its customers to do so and we have documented the steps required to compile openssl for AMS and made them available on internet docs.Just google for "Adobe media server openssl compile".

[ashish_gupta_]

Sharing the link.