Posté par: igor51 le août 27, 2021, 04:00:53
The buggy code's in there, alright. Fortunately, it's hard to get OpenSSL to use it even if you want to, which mitigates the risk.
Source: Big bad decryption bug in OpenSSL – but no cause for alarm (http://feedproxy.google.com/~r/nakedsecurity/~3/ot0QOuA8OIw/)