On the 8th of this month Centova released an update along with the following statement about the Heartbleed bug in openSSL. All users are strongly advised to upgrade as soon as possible. Anyway well done Centova for being so quick off the mark with a fix! However it’s not clear yet whether new keys where included something which I’ve prompted them about…

—
A new build of Centova Cast’s web server is now available, which fixes a critical security issue in OpenSSL. All users are strongly urged to update.

This update addresses a critical security issue (CVE-2014-0160) in OpenSSL. While this issue is not specific to Centova Cast (in fact, it affects a majority of the HTTPS/SSL web servers on the Internet), Centova Cast does use OpenSSL for its SSL functionality and thus is affected by this vulnerability. Accordingly, we have immediately issued a new build of Centova Cast’s web server using a fixed version of OpenSSL (1.0.1g).

For more information:

http://www.openssl.org/news/secadv_20140407.txt
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160