Nichol Goldstein (Progress) asked a question.
What You Need to Know: OpenSSL Vulnerability
On November 1, 2022, the OpenSSL Project released OpenSSL version 3.0.7. This release is a security-fix and addresses two "High" severity vulnerabilities, https://www.openssl.org/news/vulnerabilities.html.
Progress has already conducted a thorough review of our products and determined that none of our products are using the impacted version of OpenSSL as shipped and/or deployed.
To stay current with the latest information on this topic, please visit https://www.progress.com/security or, for the following products, you can also visit your respective blogs:
- WhatsUp Gold - https://www.whatsupgold.com/blog
- MOVEit / WS_FTP Pro / WS_FTP Server - https://www.ipswitch.com/blog
The OpenSSL Project's release of version 3.0.7 addresses two high-severity vulnerabilities. Users should update to this version if affected. Progress has confirmed its products are not using the impacted version.