"OpenSSL Project" news, interviews, and features

News about OpenSSL Project

• OpenSSL patches a severe but not widespread problem

  In some instances, OpenSSL will reuse prime numbers

• OpenSSL fixes serious flaw that could enable man-in-the-middle attacks

  The vulnerability allows attackers to generate rogue certificates that pass OpenSSL's validation

• OpenSSL tells users to prepare for a high severity flaw

  Patches will be released on July 9 for OpenSSL 1.0.1 and 1.0.2

• OpenSSL fixes serious denial-of-service bug, 11 other flaws

  The scare of a second Heartbleed was unjustified

• OpenSSL warns vendors against using vulnerability info for marketing

  Vulnerability information will be closely held until patches are ready, the OpenSSL Project said

• OpenSSL Project publishes roadmap to counter criticism

  The project plans to implement code reviews, fix poor coding and have better documentation