Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[New openssl version] OpenSSL 3.4.0 #5226

Open
github-actions bot opened this issue Oct 22, 2024 · 5 comments
Open

[New openssl version] OpenSSL 3.4.0 #5226

github-actions bot opened this issue Oct 22, 2024 · 5 comments

Comments

@github-actions
Copy link

https://github.com/openssl/openssl/releases/tag/openssl-3.4.0

@dscho
Copy link
Member

dscho commented Oct 22, 2024

Lets' wait a while before integrating this. As with all .0 releases, there is a higher-than-average chance of problems.

@omonnig
Copy link

omonnig commented Oct 23, 2024

Installed 2.47.0.2 yesterday, thanks for the update.

Wiz vulnerability scanner is flagging openssl.exe OpenSSL 3.2.3 3 Sep 2024 (Library: OpenSSL 3.2.3 3 Sep 2024), please don't wait too long! Vim.exe too

OS is Windows DataCenter 2019 on AWS.

@rimrul
Copy link
Member

rimrul commented Oct 23, 2024

Wiz vulnerability scanner is flagging openssl.exe

What's it complaining about? CVE-2024-9143? The fix dor that will be part of openssl 3.2.4, but that isn't released yet.

@dscho
Copy link
Member

dscho commented Oct 24, 2024

please don't wait too long!

@omonnig please try harder to be part of the solution than of the alternative.

@omonnig
Copy link

omonnig commented Oct 25, 2024

CVE-2024-9413 confirmed. my bad. thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants