Security Update:OpenSSL Releases Security Advisory
Date and Time
Open SSL Users
OpenSSL announced the release of updates to address 2 vulnerabilities, one rated HIGH.
Advanced Users: For a complete description of the vulnerabilities and affected versions visit OpenSSL Security Advisory [28th Jan 2016] at https://mta.openssl.org/pipermail/openssl-announce/2016-January/000061.html.
- OpenSSL version 1.0.1
- OpenSSL version 1.0.2
WHAT'S THE PROBLEM?
Exploitation of one of these vulnerabilities could allow an attacker to obtain sensitive information.
WHAT DO I NEED TO DO?
Upgrade your software
- If IT Field Services or you have other IT support, no action on your part is required.
- If you do not have IT support, updates may be obtained through OpenSSL Security Advisory [28th Jan 2016] at https://mta.openssl.org/pipermail/openssl-announce/2016-January/000061.html.
- OpenSSL Patches Serious Flaws in Library - https://threatpost.com/openssl-patches-serious-flaw-that-puts-popular-ap...
- IT Security & Policy at http://it.ucsf.edu/security