A few more CVEs and we're at OpenSSL 1.1.1z, followed by v1.1.1.za, and it is go... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

stabbles on Feb 7, 2023 | parent | context | favorite | on: OpenSSL Security Advisory [7th February 2023]

A few more CVEs and we're at OpenSSL 1.1.1z, followed by v1.1.1.za, and it is going to break some package manager that in a certain locale orders versions as 1.1.1.za > 1.1.1z, and its users will be stuck on a vulnerable version.

Flocular on Feb 7, 2023 | [–]

openSSL 1.1.1 is EOL 2023-09-11 which is likely to be the bigger problem for random-distro-XYZ

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact