Ubuntu
openssl package

OpenSSL 3.0.7 Availability

Asked by Christopher J Rapier

Just wondering when you hope to role out OpenSSL 3.0.7 in light of the recent CVE. My project uses OpenSSL3 and I'd like to know when I should try having the package rebuilt.

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu openssl Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Colin Watson (cjwatson) said : 		#1

The recent CVEs have been patched as updates to the existing versions of OpenSSL in Ubuntu rather than by bumping all the way to the new upstream release, as is standard practice for most packages in Ubuntu. See:

  https://ubuntu.com/security/notices/USN-5710-1

Can you help with this problem?

Provide an answer of your own, or ask Christopher J Rapier for more information if necessary.

To post a message you must log in.