OpenSSL flaw should be patched today

Stefan Mileschin · 2nd November 2022, 06:40

Highest severity issue, could be the next heartbleed

A critical vulnerability in the OpenSSL open source cryptography library, is set to be patched this afternoon (Tuesday 1 November).

The OpenSSL project underlies the majority of encryption across the internet kept quiet about the flaw and just said in October that version 3.0.7 should be installed as soon as it becomes available.

The last such release took place in 2016 and appears to be to do with the critical vulnerability found in the component since the project starting tracking such things in the wake of Heartbleed.

For those who came in late, Heartbleed is a coding flaw that could allow an attacker to repeatedly get at unecrypted data from the memory of systems using vulnerable versions of OpenSSL, and it shook the industry to its foundations when it was made public in April 2014.

https://fudzilla.com/news/55751-open...-patched-today

2nd November 2022, 06:40	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,964	OpenSSL flaw should be patched today Highest severity issue, could be the next heartbleed A critical vulnerability in the OpenSSL open source cryptography library, is set to be patched this afternoon (Tuesday 1 November). The OpenSSL project underlies the majority of encryption across the internet kept quiet about the flaw and just said in October that version 3.0.7 should be installed as soon as it becomes available. The last such release took place in 2016 and appears to be to do with the critical vulnerability found in the component since the project starting tracking such things in the wake of Heartbleed. For those who came in late, Heartbleed is a coding flaw that could allow an attacker to repeatedly get at unecrypted data from the memory of systems using vulnerable versions of OpenSSL, and it shook the industry to its foundations when it was made public in April 2014. https://fudzilla.com/news/55751-open...-patched-today

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Philips patched a longstanding Hue bulb security flaw	Stefan Mileschin	WebNews	0	6th February 2020 10:10
LastPass patched a bug that could have exposed your passwords	Stefan Mileschin	WebNews	0	18th September 2019 07:47
Equifax blames breach on a server flaw it should've patched	Stefan Mileschin	WebNews	0	16th September 2017 07:48
Recently patched iOS security flaw also affects OS X	Stefan Mileschin	WebNews	0	3rd September 2016 18:50
SAP “patched” bug still has holes	Stefan Mileschin	WebNews	0	13th May 2016 08:20
Recently patched security flaw managed to beat OS X's new defenses	Stefan Mileschin	WebNews	0	27th March 2016 09:16
Critical Flaw Affecting Every Version Of Windows Patched	Stefan Mileschin	WebNews	0	11th March 2016 07:35
New Microsoft IE zero-day won't be patched on XP	Stefan Mileschin	WebNews	0	29th April 2014 07:04
Crysis 3 Patched Again	Stefan Mileschin	WebNews	0	11th March 2013 06:49
Windows 7 SD Card Corruption Flaw Patched	jmke	WebNews	0	26th November 2009 09:33