Stackato is vulnerable to the Heartbleed bug. You can patch your system by running "kato patch install heartbleed-fix". This patch will install updated OpenSSL libraries on both the host VM and inside the container templates. Most apps won't need to be redeployed, but some may depending on the app and how SSL is used. We advise you test your app (see tools below) after applying the patch to determine if redeploying the app is necessary.

A patch is also available for Stackato 2.10.4 here:
https://get.stackato.com/patch/2.10/stackato-2.10.4-heartbleed.sh

If you have any questions please contact ActiveState support.

More info:

http://heartbleed.com/
http://filippo.io/Heartbleed/
https://gist.github.com/sh1n0b1/10100394
https://github.com/titanous/heartbleeder