We always try to keep our security features up-to-date. This version incorporates the latest upgrades to OpenSSL with some important fixes. Some geeky details: (1) Fixed the X509_issuer_and_serial_hash() function. (2) Fixed the RSA_padding_check_SSLv23() function and the RSA_SSLV23_PADDING padding mode to correctly check for rollback attacks. (3) Fixed the EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate
functions. (4) Fixed SRP_Calc_client_key so that it runs in constant time.
The latest release version is now WebCrossing-f3629f2 2021-03-12
All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.
If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.