Return
-
Title
Is Syslog-ng Premium Edition affected by the OpenSSL CVE being fixed on Nov 1st 2022 in version 3.0.7? -
Description
Is Syslog-ng Premium Edition affected by the OpenSSL CVE being fixed on Nov 1st 2022 in version 3.0.7?
Does this issue affect Syslog-ng Premium Edition or any of its components?
Details of the OpenSSL 3.0.7 release are available here:
https://mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html -
Resolution
Only OpenSSL 3.0 and higher is affected by this issue.
Syslog-ng Premium Edition is not bundling any affected versions and therefore is not affected.