Hey all,
In response to recently published openssl vulnerabilities and USN-2537-1 [1], BOSH team has released updated Ubuntu Trusty stemcells v2889 [2] that include updated libssl package 1.0.1f-1ubuntu2.11. We recommend to update to the new stemcell.
We will be updating CentOS 6.5 stemcells when updated openssl package is released.
Related note will be posted to vcap-dev list regarding updates to rootfs in cf-release.