Keep Server Online
  
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
  
or
  
 
  
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
  
Thank You! Steffen
  
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
 |    |   
 | 
     Topic: OpenSSL 3.0.7 and 1.1.1s released | 
 |   
| Author | 
  | 
 
Jan-E
 
 
  Joined: 09 Mar 2012 Posts: 1283 Location: Amsterdam, NL, EU
  | 
 Posted: Tue 01 Nov '22 18:07    Post subject: OpenSSL 3.0.7 and 1.1.1s released | 
     | 
 
  | 
 
1.1.1s is a bugfix release, but OpenSSL 3.0.7 has some real security updates. There seems to be a critical issue, but details haven’t been published about that one yet:
 
https://www.openssl.org/news/vulnerabilities.html
 
 
Edit:  	  | Quote: | 	 		  | Pre-announcements of CVE-2022-3602 described this issue as CRITICAL. Further analysis based on some of the mitigating factors described above have led this to be downgraded to HIGH. | 	 
  | 
 
  | 
 
| Back to top | 
 | 
 
Steffen Moderator
 
  Joined: 15 Oct 2005 Posts: 3131 Location: Hilversum, NL, EU
  | 
 Posted: Tue 01 Nov '22 18:35    Post subject:  | 
     | 
 
  | 
 
| This week we update to 1.1.1s. | 
 
  | 
 
| Back to top | 
 | 
 
 
 
 
 | 
 
 
 |  
 
 |  
  |   
 |