OpenSSL 3.0.7 security fix: Should Opera users be worried?
Hi everyone!
The OpenSSL 3.0.7 security-fix release fixes high-priority vulnerabilities in the OpenSSL open-source cryptography library, specifically CVE-2022-3602 and CVE-2022-3786.
The vulnerabilities were previously thought to be critical, potentially enabling remote code execution (RCE) – the most severe kind of threat out there. In the end, it turned out that they were actually bugs that could only enable denial-of-service (DoS) attacks.
Fortunately for Opera users, BoringSSL, as used in Chromium, is not affected by this vulnerability and neither are Opera browsers. Of course, while it’s not urgent to update your browser immediately, it’s generally a good idea to keep your software up to date with the latest versions available.
You can download the latest versions of our browsers here.