On: OpenSSL CVE-2010-5298 / CVE-2014-0198

[_qxtl]

This doesn't seem all that important. There are numerous bugs around most software out there which can cause it to crash. It's not good, but it's also not the worst one out there.

If it was that bad, it would have been fixed earlier. It was reported first in 2010: https://rt.openssl.org/Ticket/Display.html?id=2167&user=gues...

It was also fixed a few weeks ago.

Edit: Just noticed that the openssl bug tracker passes the username and password in the URL. Oh dear...

[jacquesm → _qxtl]

At least no google results for anything other than guest show up.

[ASneakyFox → _qxtl]

For a security project I find their lack of security shocking.