[HN Gopher] Forthcoming OpenSSL Releases - Critical Issue in Ope...
       ___________________________________________________________________
        
       Forthcoming OpenSSL Releases - Critical Issue in OpenSSL 3
        
       Author : TimWolla
       Score  : 29 points
       Date   : 2022-10-25 14:17 UTC (8 hours ago)
        
 (HTM) web link (mta.openssl.org)
 (TXT) w3m dump (mta.openssl.org)
        
       | yuvadam wrote:
       | This seems to affect only OpenSSL 3.x.x
       | 
       | Most distros have never bothered to upgrade to major version 3 -
       | possibly because it broke ABI backwards compatibility - so
       | despite the critical severity the impact might not be as
       | widespread as it could have been?
        
         | TimWolla wrote:
         | OpenSSL 3 is in Ubuntu 22.04 LTS [1]. I expect that alone to be
         | bad enough.
         | 
         | [1] https://discourse.ubuntu.com/t/jammy-jellyfish-release-
         | notes...
        
       | midislack wrote:
       | No cute name / logo for this one?
        
       | SLWW wrote:
       | RCE and unprivileged access to memory? (to dump keys and the
       | like)
       | 
       | seems fun
        
       ___________________________________________________________________
       (page generated 2022-10-25 23:02 UTC)