Security Log

A sum-up of Dyonic’s latest security findings and updates.

November 10, 2022

Notice on OpenSSL Vulnerabilities

Background

On November 1st, 2022 the OpenSSL Project patched two buffer overflow vulnerabilities (CVE-2022-3786; CVE-2022-3602). Under certain circumstances, an exploit could have resulted into an application crash (denial of service) or potential remote code execution.

Remediation

We have updated all our container images to include the latest OpenSSL version today.