On Thursday, OpenSSL maintainers released a fix for two high severity vulnerabilities, let us discuss the impact.

• OpenSSL two major vulnerabilities 0:00
• why OpenSSL 1:00
• Bug 1 - Renegotiating TLS 1.2 (CVE-2021-3449) 3:50
• Bug 2 - Cert verification bypass (CVE-2021-3450) 8:42
• Update to OpenSSL 1.1.1k 12:30

Resources

https://www.openssl.org/news/vulnerabilities.html

https://arstechnica.com/gadgets/2021/03/openssl-fixes-high-severity-flaw-that-allows-hackers-to-crash-servers/

---

Support this podcast: https://anchor.fm/hnasr/support