Forthcoming OpenSSL Bug Fix Release

[Ing. Martin Koci, MBA]

Hello,

In addition to the already announced 3.0.7 release, the OpenSSL project 
team would like to announce the forthcoming release of OpenSSL version 
1.1.1s that is a bug fix release.


This bug fix release will be made available on Tuesday 1st November 2022 
between 1300-1700 UTC too.


Yours
The OpenSSL Project Team

Forthcoming OpenSSL Releases

[Ing. Martin Koci, MBA]

Hello,

The OpenSSL project team would like to announce the forthcoming release 
of OpenSSL version 3.0.7.


This release will be made available on Tuesday 1st November 2022 between 
1300-1700 UTC.


OpenSSL 3.0.7 is a security-fix release. The highest severity issue 
fixed in this release is CRITICAL:


https://www.openssl.org/policies/general/security-policy.html

Yours
The OpenSSL Project Team



OpenPGP_0x6D0A36D2E30590A6.asc
Description: OpenPGP public key


OpenPGP_signature
Description: OpenPGP digital signature

Forthcoming OpenSSL Releases

[Ing. Martin Koci, MBA]

Hello,

The OpenSSL project team would like to announce the forthcoming
release of OpenSSL versions 3.0.5 and 1.1.1q.

These releases will be made available on Tuesday 5th July 2022
between 1300-1700 UTC.

These are a security-fix releases. The highest severity issue
fixed in 3.0.5 release is High, in 1.1.1q release Moderate:

https://www.openssl.org/policies/secpolicy.html

One of the issues fixed in the 3.0.5 release is the CVE-2022-2274 (Bug
in RSA implementation for AVX512IFMA capable CPUs) which is already
public:

https://www.cve.org/CVERecord?id=CVE-2022-2274

A workaround for the issue is to set the environment variable
OPENSSL_ia32cap to disable the AVX512IFMA based implementation:

export OPENSSL_ia32cap=:~0x20

Yours
The OpenSSL Project Team

Forthcoming OpenSSL Releases

[Ing. Martin Koci, MBA]

Hello,

The OpenSSL project team would like to announce the forthcoming
release of OpenSSL versions 3.0.4, 1.1.1p.

These releases will be made available on Tuesday 21st June 2022
between 1300-1700 UTC.

These are security-fix releases. The highest severity issue
fixed in these releases is MODERATE:

https://www.openssl.org/policies/secpolicy.html#moderate

Yours

The OpenSSL Project Team