Re:OpenSSL Security Advisory (14 December 2021)
by CameronNemo on Tuesday December 14, 2021 @01:52PM
(#29555668)
Still does not inspire confidence. This is the second CVE this year, after they pushed out a vulnerable TLS 1.3 version.
[ Parent
| on HN ]
Re:OpenSSL Security Advisory (14 December 2021)
by hannob on Tuesday December 14, 2021 @02:39PM
(#29556383)
It's actually the 8th:
https://www.openssl.org/news/vulnerabilities.html
But this really isn't that unusual for a library of that complexity and size. All of these vulns are pretty boring, none is likely to cause any bigger harm.
Re:OpenSSL Security Advisory (14 December 2021)
by CameronNemo on Tuesday December 14, 2021 @04:21PM
(#29557986)
Hmm also the TLS 1.3 bug was in April 2020... Uh oh I am on covid time.