#openssl

Researchers uncovered 12 previously unknown OpenSSL vulnerabilities, some buried in decades-old code, all fixed in a coordinated January release.

Source: AISLE

DOM="your-www-domain-name-here" PORT="443" echo | openssl s_client -servername "$DOM" -connect "$DOM:$PORT" | openssl x509 -noout -dates

Debian 9:

echo “deb http://deb.debian.org/debian unstable main“ >> /etc/apt/sources.list

apt update

apt-get install openssl libssl-dev -t unstable -y

git clone https://github.com/gost-engine/engine

cd engine/

cmake . -DOPENSSL_ENGINES_DIR=`openssl version -e | awk '{print $2}' | sed 's/\"//g'`

make && make install

El proyecto OpenSSL corrigió de manera discreta una vulnerabilidad de denegación de servicio (DoS) denominada “HollowByte”, la cual permite a atacantes remotos agotar la memoria RAM de los servidores enviando cargas útiles de apenas 11 bytes durante el inicio de la conexión TLS. Descubierta y reportada por el Red Team de Okta, la falla radica en cómo las versiones anteriores de la biblioteca…

https://blog.takeho.com/6nngoygijsmtalqzonbspu0u3humfl47/

PHPのTLS脆弱性でサイト停止の恐れ　CVE-2026-12184の影響と今すぐ確認すべき対策

After what notcurses has put me through, I actually look forward to working with something written and maintained somewhat competently, with real documentation.