Forthcoming OpenSSL Releases – Critical Issue in OpenSSL 3

by TimWollaon 10/25/2022, 2:17:00 PM with 3 comments
  • by yuvadamon 10/25/2022, 6:41:25 PM

    This seems to affect only OpenSSL 3.x.x

    Most distros have never bothered to upgrade to major version 3 - possibly because it broke ABI backwards compatibility - so despite the critical severity the impact might not be as widespread as it could have been?

  • by SLWWon 10/25/2022, 4:39:05 PM

    RCE and unprivileged access to memory? (to dump keys and the like)

    seems fun

  • by midislackon 10/25/2022, 9:15:12 PM

    No cute name / logo for this one?