OpenSSL has released 3.0.7 to fix two high-severity vulnerabilities: CVE-2022-3786 and CVE-2022-3602. It is officially recommended that OpenSSL 3.0.x users should upgrade to OpenSSL 3.0.7, as these two vulnerabilities affect OpenSSL 3.0.0 to 3.0.6 versions, not OpenSSL 1.1.1 and 1.0.2. According to the OpenSSL team, there have been no known cases of exploiting the above-mentioned vulnerabilities. Also, since OpenSSL doesn’t track project usage, so…
#OpenSSL #Releases #Fix #HighSeverity #Vulnerabilities