Archived Content
In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.OpenSSL Releases Security Update
Last Revised
OpenSSL has released a security update to address a vulnerability affecting all versions of 1.0.2 and 1.1.1 released before version 1.1.1i. An attacker could exploit this vulnerability to cause a denial-of-service condition.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the OpenSSL Security Advisory and apply the necessary update.
This product is provided subject to this Notification and this Privacy & Use policy.