Our software we develop uses the Indy internet component suite in Delphi. Indy has capabilities for OpenSSL. Since the Heartbleed incident, we're wondering if we need to take action.
We distribute 2 DLL's with our software which are for OpenSSL (which Indy uses):
Question: Do we need to get and distribute updated/fixed versions of these DLL's? Or will this be patched with Windows Updates?
This is using Indy version 10, and the DLL's don't have any version information, just shows 22.214.171.124 and a date of 9/20/2010.
Essentially, is the problem on the software level or the operating system level?