Menu

Effectively Preparing for the OpenSSL 3.x Vulnerability
📰
0

Effectively Preparing for the OpenSSL 3.x Vulnerability

Reading 0:00
15s threshold

Update (November 1, 2022): Akamai content delivery over HTTP and HTTPS is not impacted by this vulnerability as the servers are using a nonimpacted version of OpenSSL. In addition, Akamai systems utilize industry-standard stack protection mechanisms that would mitigate the described attack vector. Akamai is patching any potentially affected internal systems but we do not anticipate that these efforts will lead to downtime for our customers. \r\n On October 25, the OpenSSL project team announced a security fix for a critical vulnerability in OpenSSL version 3.x. The patch is scheduled to be released on November 1, 2022, between 13:00–17:00 UTC. \r\n This announcement has made a lot of noise because of the extensive use of OpenSSL. With this article, we are hoping to cut through the noise and provide background and tips for how to detect and mitigate the threat without speculation.  The first part of the post will outline OpenSSL and the scope of the vulnerability.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Read More