3 ms·
OpenSSL 3.0.7 update to fix Critical CVE out next Tuesday 1300-1700UTC
- Shank 4y agoContext: @SwiftOnSecurity says: "If you find you have publicly exposed OpenSSL 3.x services be prepared with a plan to end external network access based on threat development." and "The OpenSSL 3.x flaw will be significant, I have been told by someone in a position to know. Take your preparation seriously and prepare to act quickly – either patch or isolate. It is sensitive enough they would not discuss specifics, out of respect for the embargo." Via: https://twitter.com/SwiftOnSecurity/status/1585808131816390658 https://twitter.com/SwiftOnSecurity/status/15858081318163906..., https://twitter.com/SwiftOnSecurity/status/1585820615658938368 https://twitter.com/SwiftOnSecurity/status/15858206156589383...
- Trouble_007 4y agoFYI : https://mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html https://mta.openssl.org/pipermail/openssl-announce/2022-Octo...