#openssl
-
OpenSSL 4.1 Arrives With DTLS 1.3, GREASE and More AVX-512 Tuning
OpenSSL 4.1 stable is out, bringing DTLS 1.3 and GREASE support, fresh AVX-512 optimizations, and the final retirement of Windows on Itanium and Windows CE.
-
OpenSSL Patches High-Severity DTLS Bug That Can Leak Heap Memory in the Clear
On September 29 OpenSSL shipped fixes for a High-severity DTLS flaw that can send heap memory to the other side of a connection unencrypted, or crash the program.
-
OpenSSL 4.1 Alpha 1: DTLS 1.3, GREASE and New AVX-512 Optimizations
The first alpha release of OpenSSL 4.1 is out. Among the new features are support for DTLS 1.3, the GREASE mechanism and additional AVX-512 speedups, along with initial support for the Russian «Elbrus» architecture.
-
HollowByte Vulnerability in OpenSSL Allows a Denial of Service with an 11-Byte Packet
Researchers have discovered the HollowByte vulnerability, which allows unauthenticated attackers to cause a denial of service on OpenSSL-based servers using an extremely small malicious packet.
-
Widespread OpenSSL Error-Handling Bugs: A Developer Points to a Systemic Problem
The author of a blog post describes a common practice of improper error handling when working with OpenSSL that shows up across a great many projects. The problem is systemic rather than isolated.