OpenSSL flaw should be patched today

Stefan Mileschin · 2nd November 2022, 07:40

Highest severity issue, could be the next heartbleed

A critical vulnerability in the OpenSSL open source cryptography library, is set to be patched this afternoon (Tuesday 1 November).

The OpenSSL project underlies the majority of encryption across the internet kept quiet about the flaw and just said in October that version 3.0.7 should be installed as soon as it becomes available.

The last such release took place in 2016 and appears to be to do with the critical vulnerability found in the component since the project starting tracking such things in the wake of Heartbleed.

For those who came in late, Heartbleed is a coding flaw that could allow an attacker to repeatedly get at unecrypted data from the memory of systems using vulnerable versions of OpenSSL, and it shook the industry to its foundations when it was made public in April 2014.

https://fudzilla.com/news/55751-open...-patched-today

2nd November 2022, 07:40	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,514	OpenSSL flaw should be patched today Highest severity issue, could be the next heartbleed A critical vulnerability in the OpenSSL open source cryptography library, is set to be patched this afternoon (Tuesday 1 November). The OpenSSL project underlies the majority of encryption across the internet kept quiet about the flaw and just said in October that version 3.0.7 should be installed as soon as it becomes available. The last such release took place in 2016 and appears to be to do with the critical vulnerability found in the component since the project starting tracking such things in the wake of Heartbleed. For those who came in late, Heartbleed is a coding flaw that could allow an attacker to repeatedly get at unecrypted data from the memory of systems using vulnerable versions of OpenSSL, and it shook the industry to its foundations when it was made public in April 2014. https://fudzilla.com/news/55751-open...-patched-today

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Philips patched a longstanding Hue bulb security flaw	Stefan Mileschin	WebNews	0	6th February 2020 11:10
LastPass patched a bug that could have exposed your passwords	Stefan Mileschin	WebNews	0	18th September 2019 08:47
Equifax blames breach on a server flaw it should've patched	Stefan Mileschin	WebNews	0	16th September 2017 08:48
Recently patched iOS security flaw also affects OS X	Stefan Mileschin	WebNews	0	3rd September 2016 19:50
SAP “patched” bug still has holes	Stefan Mileschin	WebNews	0	13th May 2016 09:20
Recently patched security flaw managed to beat OS X's new defenses	Stefan Mileschin	WebNews	0	27th March 2016 10:16
Critical Flaw Affecting Every Version Of Windows Patched	Stefan Mileschin	WebNews	0	11th March 2016 08:35
New Microsoft IE zero-day won't be patched on XP	Stefan Mileschin	WebNews	0	29th April 2014 08:04
Crysis 3 Patched Again	Stefan Mileschin	WebNews	0	11th March 2013 07:49
Windows 7 SD Card Corruption Flaw Patched	jmke	WebNews	0	26th November 2009 10:33