OpenSSL again at risk?

[diversity]

I am posting this purely to be thorough. I am already trusting the OpenWrt devs are well aware of this resent OpenSll issue.

OpenSll seemingly has some vulnerabilities and I will offer 1000$ to anyone that can actually understand what is going on here and fix it.

[hnyman]

Do you mean this?

"critical" security vulnerability in OpenSSL

I wanted to update OpenWRT today but should I wait a until this has been addressed? Details of this "critical" security vulnerability in OpenSSL aren't yet public but should see its embargo lifted next Tuesday. We'll see how nasty this latest OpenSSL vulnerability is on Tuesday but it's ranked critical and the Red Hat Product Security team advised in delaying Fedora 37. source:

which has apparently been reduced from "critical" to "high" by OpenSSL team.

Ps. We don't even use the new 3.0 series of OpenSSL

[diversity]

Thank you Hrynam for your response.
Now if not using version 3.0 of OpenSSl means not being exposed to said vulnerability I am game.

I still love this software, t's community and even Luci. without her I would not have fallen in love with OpenWrt.