OpenSSL not as secure as Netscape thought

Researchers have discovered a vulnerability in OpenSSL, an implementation of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols.

the full article is here, with links to Cisco's list of affected products

Vulnerability discovered in OpenSSL

Cisco's advisory seems to be comprehensive enough. I guess this shows that everything had loopholes.

Jezuz - just when they think they've got it right. How many websites use SSL to process transactions?!?!

I've always been wary of apparently "secure" sites, but now I'll be thinking three times instead of twice when going to make one! This is one they better hope gets fixed sooner rather than later!