[openssl-users] CVE-2016-2180

Matt Caswell matt at openssl.org
Thu Sep 15 20:54:09 UTC 2016



On 15/09/16 11:44, sivagopiraju wrote:
> I can't upgrade at this stage for my product, So can you give me the fix if
> you have.

The fix for the 1.0.1 version is here:

https://github.com/openssl/openssl/commit/6adf409c7432b90c06d9890787fe56c48f2a16e7

As Rich said 1.0.0 is not supported so the fix has not been backported
to that version.

Matt



More information about the openssl-users mailing list