New Bugs Discovered in OpenSSL Encryption

Advertisement
By Reuters | Updated: 20 March 2015 10:20 IST
New Bugs Discovered in OpenSSL Encryption
New bugs in the widely used encryption software known as OpenSSL were disclosed on Thursday, though experts say do not pose a serious threat like the "Heartbleed" vulnerability in the same technology that surfaced a year ago.

"Heartbleed" triggered panic throughout the computer industry when it was reported in April 2014. That bug forced dozens of computers, software and networking equipment makers to issue patches for hundreds of products, and their customers had to scour data centers to identify vulnerable equipment.

Cyber-security watchers had feared the new round of bugs would be as serious as "Heartbleed," according to experts who help companies identify vulnerabilities in their networks. The concerns surfaced after the OpenSSL Project, which distributes OpenSSL software, warned several days ago that it planned to release a batch of security patches.

"You need to take all vulnerabilities seriously, but I'm kind of disappointed. There's been a week building up to this," said Cris Thomas, a strategist with cyber-security firm Tenable Network Security Inc.

The OpenSSL project released updates for four versions of the software, covering 12 security fixes for vulnerabilities reported to them in recent months by several cyber-security researchers. The threats include one that makes affected systems vulnerable to so-called denial-of-service attacks that disrupt Web traffic, though none threaten the "crypto" technology used to encrypt data, Ristic said.

Advertisement

Ivan Ristic, director of application security with Qualys Inc, said he was not too concerned about the new bugs because most involved programming errors in a new version of OpenSSL, which is not widely used.

"It doesn't seem a big story," Ristic said. "I think people feared it would be bad, which is where all the hype came from."

Advertisement

© Thomson Reuters 2015

 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Advertisement

Related Stories

Popular Mobile Brands
  1. Devika and Danny, A New Telugu Drama, Is Now Streaming on Jio Hotstar
  1. Astronomers Discover Most Powerful Cosmic Explosions Since the Big Bang
  2. NASA’s IMAP Spacecraft Gears Up for Mission to Explore Solar System’s Edge
  3. Rocket Lab Launches Private Earth-Observing Satellite Toward Orbit for BlackSky
  4. NASA’s RASSOR Robot Digs Deep into Moon Mining Future with Successful Test
  5. Europa Could Briefly Sustain Life When the Sun Becomes a Red Giant Star, Scientists Say
  6. Seismic Mystery Solved: NASA’s SWOT Satellite Detects Greenland Mega-Tsunamis
  7. MAVEN Reveals How Mars Lost Its Atmosphere and Became a Barren World
  8. Rana Naidu Season 2 OTT Release Date: When and Where to Watch it Online?
  9. Devika and Danny, A New Telugu Drama, Is Now Streaming on Jio Hotstar
  10. Google Chrome Gets 'Highest Ever' Speedometer Score; Company Reveals Optimisations Behind Improved Performance
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.