the 2nd wave of OpenSSL vulnerability is out

littlepants9394

the 2nd wave of OpenSSL vulnerability is out. this time have 5 weakness: man in the middle attack, DDoS attack and a remote code execution. luckily this time major browsers are not affected but better to check your SSL client for example VPN client, email gateway and so on.

http://www.openssl.org/news/vulnerabilities.html

馬後砲

上次未PATCH 得晒 ?

littlepants9394

回復 馬後砲 #2 的帖子

actually the last patch only fix the found problem that triggered a lot of people relook into the previous codes and then dig out any 5-6 new problems but all announced with the patches available, so technically no zero day attack this time.