We try to stay on top of security fixes for WebCrossing servers. This new release includes an update to the OpenSSL library we use.
The fixed security issues dealt with: (1) Certificates with explicit curve parameters; (2) ‘MinProtocol’ and ‘MaxProtocol’ configuration commands; (3) SSL_CTX instances that are created for a fixed protocol version; and (4) Handshakes with Extended Master Secret extension drops.
We recommend you keep your site secure and if you are using locked and secure servers to update to this latest build.
The latest release version is now WebCrossing 6.4-6b97ca0 2020-10-29.
All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.
If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.