OpenSSL vulnerability now rated 'high' but should be taken seriously
The vulnerability in OpenSSL that forced the project's leaders to issue a security patch on Tuesday isn't as bad as initially feared, with the hole's severity shifted from "critical" to "high." Still, experts say infosec leaders need to take it seriously. OpenSSL 3.07 fixes a buffer overrun vulnerability in version 3.0 that can be triggered