| Author |
|
carman
Joined: 09 May 2023
Posts: 3
Location: HK
|
 Posted: Thu 02 Apr '26 10:18 Post subject: Apache with OpenSSL 3.6.1 < 3.6.2 Multiple Vulnerabilitie |
 |
|
| I would like to know is there any plan to release a new build of Apache/2.4.66 (Win64) with OpenSSL > 3.6.1 version as this finding shows after performed SRAA. Checked that OpenSSL has released 3.6.1. |
|
| Back to top |
|
admin
Site Admin
Joined: 15 Oct 2005
Posts: 743
|
| Posted: Thu 02 Apr '26 13:02 Post subject: |
|
|
Current Apache contains 3.6.1. Version 3.6.2 is announced, not available yet.
The highest severity issue fixed in this release is Moderate, not high or critical. We release with the next Apache (67). |
|
| Back to top |
|
kostya
Joined: 07 Dec 2023
Posts: 7
Location: Israel
|
| Posted: Thu 16 Apr '26 15:44 Post subject: Apache/2.4.66 (Win32) with OpenSSL > 3.6.1 |
|
|
| What about Win32? It contains openssl 3.6.0 |
|
| Back to top |
|
admin
Site Admin
Joined: 15 Oct 2005
Posts: 743
|
| Posted: Thu 16 Apr '26 19:07 Post subject: |
|
|
| Coming week we planned to update all with latest dependencies. |
|
| Back to top |
|
kostya
Joined: 07 Dec 2023
Posts: 7
Location: Israel
|
| Posted: Wed 29 Apr '26 15:25 Post subject: |
|
|
| any updates? |
|
| Back to top |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3185
Location: Hilversum, NL, EU
|
|
| Back to top |
|
