On Wed, Nov 02, 2022 at 11:17:31PM +0000, Steven_M.irc via openssl-users wrote:
> I'm really worried about the vulnerabilities recently found in OpenSSL
> versions 3.0.0 - 3.0.6.
Just upgrade any affected systems and you'll be fine.
> If I understand things correctly (and please do correct me if I'm
> wrong), it doesn't matter which version of OpenSSL clients are
> running, only which version of OpenSSL *servers* are running.
Your information source is either wrong or misleading. The only
software version that matters is the one your system is running,
whether client or server.
--
Viktor.
