Looks like there is a new OpenSSL vulnerability th...
# water-coolerp
Patrick S
10/27/2022, 2:21 PMLooks like there is a new OpenSSL vulnerability that needs to be patched ASAP: https://isc.sans.edu/diary/Upcoming+Critical+OpenSSL+Vulnerability%3A+What+will+be+Affected
d
Dave Merrill
10/27/2022, 3:03 PMAm I reading it right that this only applies to linux systems and apache? Or do ACF and/or Lucee include it? I don't see it listed in the cf admin info page.
p
Patrick S
10/27/2022, 3:17 PMI don't believe ACF or Lucee uses it, but many open source applications depend on it so it is worth double checking if and which version might be installed. (That's why I posted it in here, and not cfml-general.) I found that I had the older 1.1.1 release installed via brew, which is not affected.
z
zackster
10/28/2022, 1:31 PMreckon both engines use the ssl engines from java
m
mithlond
11/01/2022, 2:57 PMso could be a Java issue rather than a CF issue directly?
z
zackster
11/01/2022, 3:52 PMno openssl would be used in apache etc
👍 1
3 Views