Office of the Chief Information Security Officer

On September 27, 2016, updates were released for OpenSSL that prevent memory leaks, remote execution of arbitrary code, and the crashing of unpatched implementations through specially-crafted requests.  More information about these vulnerabilities and the corresponding patch can be found on Red Hat’s OpenSSL security update page.