Patch/Configuration Management, Vulnerability Management

OpenSSL Project’s March 1 updates will address high-severity flaws

Share

The OpenSSL Project today announced that the latest releases to its open-source software library will debut March 1, 2016 and will fix several security flaws, at least one of which is of “high severity.”

There were no further details about the vulnerabilities or the patches addressing them. OpenSSL versions 1.0.2g and 1.0.1s will be made available between 1 and 5 p.m. Coordinated Universal Time (UTC) on March 1.

The OpenSSL Project's announcement also contained a reminder that support for 1.0.1 will end on Dec. 31, 2016.

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.

Related

Attacks exploiting WhatsUp Gold flaws underway

After executing several PowerShell scripts using WhatsUp Gold's Active Monitor PowerShell Script functionality, threat actors proceeded with exploiting the 'msiexec.exe' Windows utility to install the Atera Agent, SimpleHelp Remote Access, Splashtop Remote, and Radmin remote access tools for persistence and further payload deployment.

Maximum severity Ivanti EPM flaw patched

No active exploitation of the vulnerability, which stemmed from the agent portal's untrusted data serialization issue, has been observed so far, according to Ivanti, which also patched nearly two dozen other critical and high-severity bugs in EPM, Cloud Service Appliance, and Workspace Control.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.