Multiple Vulnerabilities in OpenSSL

gfilion writes "Updated versions of OpenSSL are now available which correct two security issues: A null-pointer assignment during SSL handshake and an out-of-bounds read that affects Kerberos ciphersuites. Full advisory available on OpenSSL site and US-CERT."

Comments

Re:Non-Exploitable Security DOS Exploit

[Anime_Fan]

So you honestly believe that Microsoft forwards flaws detected in software to its vendor?
Without charging huge ammounts of cash for forwarding said information. My bet is that nvidia pays huge ammounts to see its flaws in GFX drivers.