RE: the eMudhra certificate compromise--understanding response

Posit Professional & Hosted Products
1

Folks have likely seen the news about the eMudhra intermediate certificate compromise.

Was wondering:

  • Will posit patch the images that shinyapps.io sites run on to update relevant certificate packages and non-R dependencies?
  • what do app owners need to do: restart the container, or more?
  • any other status page or official word i should look for in the future?

For context, we have a apps that make calls through httr/curl (email, census, etc.), and as far as i can tell, they're simply using whatever certificate bundles that come with the deployment

2

Hi

Thanks for bringing this up. We have patched the images used by shinyapps.io. Your applications will be vulnerable until you redeploy them. The deploy process will use the new patched image.

thanks!
sam