Entware-for-kernel-3x / Entware-ng-3x

Ultimate repo for embedded devices

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

OpenSSL security

zd59 opened this issue · comments

commented

Package: libOpenSSL

Current version is 1.0.2n and insecure.

Will you upgrade libOpenSSL library to a current version (1.1.0) to cover up a security threat?
OpenSSL is one of the most essential part of routers, so it must be secure.
As of that fact consider that as high priority.

Thank you.

openssl volnerabilites can be found in 1.1.0 and 1.0.2 branches - https://www.openssl.org/news/vulnerabilities.html
We will switch to another branch after openwrt upgrades openssl.