search

git-for-windows / git

A fork of Git containing Windows-specific patches.
http://gitforwindows.org/
Other
8.4k stars 2.56k forks source link

[New openssl version] OpenSSL 3.4.0 #5226

Open github-actions[bot] opened 1 month ago

github-actions[bot] commented 1 month ago

https://github.com/openssl/openssl/releases/tag/openssl-3.4.0

dscho commented 1 month ago

Lets' wait a while before integrating this. As with all .0 releases, there is a higher-than-average chance of problems.

omonnig commented 1 month ago

Installed 2.47.0.2 yesterday, thanks for the update.

Wiz vulnerability scanner is flagging openssl.exe OpenSSL 3.2.3 3 Sep 2024 (Library: OpenSSL 3.2.3 3 Sep 2024), please don't wait too long! Vim.exe too

OS is Windows DataCenter 2019 on AWS.

rimrul commented 1 month ago

Wiz vulnerability scanner is flagging openssl.exe

What's it complaining about? CVE-2024-9143? The fix dor that will be part of openssl 3.2.4, but that isn't released yet.

dscho commented 1 month ago

please don't wait too long!

@omonnig please try harder to be part of the solution than of the alternative.

omonnig commented 1 month ago

CVE-2024-9413 confirmed. my bad. thank you!