4 ms·
Still does not inspire confidence. This is the second CVE this year, after they pushed out a vulnerable TLS 1.3 version.
by CameronNemo 5y ago
Still does not inspire confidence. This is the second CVE this year, after they pushed out a vulnerable TLS 1.3 version.
- hannob 5y agoIt's actually the 8th: https://www.openssl.org/news/vulnerabilities.html https://www.openssl.org/news/vulnerabilities.html But this really isn't that unusual for a library of that complexity and size. All of these vulns are pretty boring, none is likely to cause any bigger harm.
- CameronNemo 5y agoHmm also the TLS 1.3 bug was in April 2020... Uh oh I am on covid time.