Message-ID:

I use technology in order to hate it more properly. -- Nam June Paik

computers / comp.sys.tandem / ITUGLIB Update: OpenSSL 3.0.7 and 1.1.1s Avalable

ITUGLIB Update: OpenSSL 3.0.7 and 1.1.1s Avalable

<bd0cba65-245e-4918-a9ec-9f006c77ac7an@googlegroups.com>

https://www.novabbs.com/computers/article-flat.php?id=578&group=comp.sys.tandem#578

X-Received: by 2002:a05:620a:1511:b0:6fa:2605:4582 with SMTP id i17-20020a05620a151100b006fa26054582mr19652841qkk.697.1667515440774;
Thu, 03 Nov 2022 15:44:00 -0700 (PDT)
X-Received: by 2002:a81:6d4a:0:b0:36c:ce1b:faf9 with SMTP id
i71-20020a816d4a000000b0036cce1bfaf9mr29556597ywc.4.1667515440526; Thu, 03
Nov 2022 15:44:00 -0700 (PDT)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!feed1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.tandem
Date: Thu, 3 Nov 2022 15:44:00 -0700 (PDT)
Injection-Info: google-groups.googlegroups.com; posting-host=35.183.203.74; posting-account=6VebZwoAAAAgrpUtsowyjrKRLNlqxnXo
NNTP-Posting-Host: 35.183.203.74
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <bd0cba65-245e-4918-a9ec-9f006c77ac7an@googlegroups.com>
Subject: ITUGLIB Update: OpenSSL 3.0.7 and 1.1.1s Avalable
From: rsbec...@nexbridge.com (Randall)
Injection-Date: Thu, 03 Nov 2022 22:44:00 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 2292

by: Randall - Thu, 3 Nov 2022 22:44 UTC

Hi Everyone,

OpenSSL 3.0.7 and 1.1.1s are now available on the ITUGLIB website.

Please be aware of two key pieces of information:

* 3.0.7 contains fixes to multiple medium and high Critical Vulnerability Exposures (CVEs) and must be installed to replace 3.0.0 through 3.0.6 in order to be protected - 3.0.6 was retracted so you should not have that anyway.. Please upgrade to 3.0.7 at your earliest opportunity.

* 1.1.1s contains numerous bug fixes that include what was in the retracted 1.1.1r release. This is (in theory) the last fix release other than security patches for the 1.1.1 series of OpenSSL. The 1.1.1 series has moved to a limited support state. If you need fixes to 1.1.1, please contact me directly. My company is authorized to provide extended support if you have an extended support contract with OpenSSL or we can arrange one for you. Be aware that this is not a trivial cost - not our doing, extended support from OpenSSL is not cheap.

Please refer to the blog at OpenSSL for more details on the 3.0.7 release: https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/

Kind Regards,
Randall Becker
On Behalf of the ITUGLIB Technical Committee and Nexbridge Inc.

Subject	Author
ITUGLIB Update: OpenSSL 3.0.7 and 1.1.1s Avalable	Randall