OpenSSL swats a dozen bugs, one notable nasty

A dozen flaws have been patched in OpenSSL, including one high severity hole that allows denial of service attacks. The OpenSSL Project pushed patches in versions 1.1.0a, 1.0.2i and 1.0.1u, with most of the flaws flagged as low severity risks. The nastiest vulnerability (CVE-2016-6304) results when attackers issue a massive …

[Tomato42]

openssl-0.9.8zh is also vulnerable but patches won't be made for it

[Benchops]

CVE-2016-6304 ?

It's not snappy and there's no logo. No-one's going to want to exploit that.

[Arthur the cat]

It's a real shame we can't just take OpenSSL outside and shoot it. Sometimes legacies are not good to have.

[m4r35n357]

What makes you think we can't? http://www.libressl.org/