On 2023-09-11 version 1.1.1 of OpenSSL will no longer get any fixes. To quote from their recent posting (https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/):

"[OpenSSL 1.1.1] will no longer be receiving publicly available security fixes after that date."

Debian bullseye does not reach its EOL until mid-2024. Between September 2024 and bullseye's EOL, if a security issue comes up with OpenSSL 1.1.1, what can we expect from Debian's openssl package maintainers?





Reply via email to