Hi Everyone,
OpenSSL 3.0.7 and 1.1.1s are now available on the ITUGLIB website.
Please be aware of two key pieces of information:
* 3.0.7 contains fixes to multiple medium and high Critical Vulnerability Exposures (CVEs) and must be installed to replace 3.0.0 through 3.0.6 in order to be protected - 3.0.6 was retracted so you should not have that anyway. Please upgrade to 3.0.7 at
your earliest opportunity.
* 1.1.1s contains numerous bug fixes that include what was in the retracted 1.1.1r release. This is (in theory) the last fix release other than security patches for the 1.1.1 series of OpenSSL. The 1.1.1 series has moved to a limited support state. If
you need fixes to 1.1.1, please contact me directly. My company is authorized to provide extended support if you have an extended support contract with OpenSSL or we can arrange one for you. Be aware that this is not a trivial cost - not our doing,
extended support from OpenSSL is not cheap.
Please refer to the blog at OpenSSL for more details on the 3.0.7 release:
https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/
Kind Regards,
Randall Becker
On Behalf of the ITUGLIB Technical Committee and Nexbridge Inc.
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)