
The OpenSSL Project on Tuesday announced the availability of OpenSSL 1.1.1l, which patches a high-severity vulnerability that could allow an attacker to change an application’s behavior or cause the app to crash. The flaw, tracked as CVE-2021-3711, has been described as a buffer overflow related to SM2 decryption. “A malicious attacker […]