Difference between revisions of "Security Advisories"
From OpenSSLWiki
Jump to navigationJump to search (Page of references to additional information related to a security advisory) |
m |
||
| Line 1: | Line 1: | ||
| − | |||
| − | |||
When serious security problems in OpenSSL are discovered and corrected, the OpenSSL project issues a security advisory, describing the problem and containing a pointer to the fix. | When serious security problems in OpenSSL are discovered and corrected, the OpenSSL project issues a security advisory, describing the problem and containing a pointer to the fix. | ||
Revision as of 10:13, 30 April 2014
When serious security problems in OpenSSL are discovered and corrected, the OpenSSL project issues a security advisory, describing the problem and containing a pointer to the fix.
These are announced to the openssl-announce mailing list and generally also copied to the openssl-users and openssl-dev mailing lists and noted in the official OpenSSL Vulnerabilities List.
If you think your have discovered a problem that has security implications then send details to openssl-security@openssl.org
The list below contains references where there is additional information on an issue which may assist OpenSSL users in understanding or responding to an issue.
| Date | Advisory | Description | CVE | Affected Versions | Fixed In Versions | Additional Information |
|---|---|---|---|---|---|---|
| 07-Apr-2014 | SECADV_20140477 | TLS heartbeat read overrun | CVE-2014-1060 | OpenSSL-1.0.1a to OpenSSL-1.0.1f
OpenSSL-1.0.2 betas |
OpenSSL-1.0.1g
OpenSSL-1.0.2-beta2 |
SECADV_2014047 |
