About chrisg_splunk

chrisg_splunk · ‎10-04-2016

OpenSSL updates will be available in a maintenance release of Splunk Enterprise in line with past advisories listed on https://www.splunk.com/page/securityportal/. The most effective way to get status information is to open a support case to track your support request. If you don't have a support contract, escalate via the security portal.

ddavenpo · ‎11-04-2015

Thanks for the answer and pointing me to the right place!

chrisg_splunk · ‎08-14-2014

Great question! These OpenSSL updates will be part of our next maintenance release. Based on known usages of OpenSSL within Splunk, OpenSSL TLS protocol downgrade attack (CVE-2014-3511) is the main risk. We are working on the next maintenance releases and will issue updated security advisories. In the meantime, keep an eye on Splunk Product Security Portal for additional updates and announcements.

Posts	4
Solutions	2
Karma Given	0
Karma Received	5
Member Since	‎08-14-2014

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

Re: Splunk Enterprise 6.5.0 is affected by multipl...

Re: XSS Vulnerability in 6.2.5 build 272645?

Re: Is there a patch planned for OpenSSL Security ...