Re: [mosquitto-dev] Security audit for Eclipse Mosquitto

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

Re: [mosquitto-dev] Security audit for Eclipse Mosquitto

From: Roger Light <roger@xxxxxxxxxx>
Date: Thu, 22 Sep 2022 21:34:40 +0100
Delivered-to: mosquitto-dev@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/mosquitto-dev/>
List-help: <mailto:mosquitto-dev-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/mosquitto-dev>, <mailto:mosquitto-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/mosquitto-dev>, <mailto:mosquitto-dev-request@eclipse.org?subject=unsubscribe>

> > they would like to know what to do when a new OpenSSL CVE is reported
> > publicly:

OpenSSL is linked dynamically, so installing an updated version is
sufficient. That means going from e.g. 1.1.1x to 1.1.1y, not from
1.1.1x to 3.0.0.

Regards,

Roger

References:
- Re: [mosquitto-dev] Security audit for Eclipse Mosquitto
  - From: terryatsnort
- Re: [mosquitto-dev] Security audit for Eclipse Mosquitto
  - From: Greg Troxel

Prev by Date: Re: [mosquitto-dev] Security audit for Eclipse Mosquitto
Next by Date: Re: [mosquitto-dev] Version 2.0.15 released
Previous by thread: Re: [mosquitto-dev] Security audit for Eclipse Mosquitto
Next by thread: [mosquitto-dev] tcp-wrappers support
Index(es):
- Date
- Thread

Breadcrumbs