OpenSSL

The OpenSSL project has released version 4.0.3, another security patch release addressing vulnerabilities in the widely used encryption library. The news is spreading through the free and open source software community, where users are being urged to update their systems promptly. As OpenSSL underpins encrypted connections across much of the internet, admins of Linux servers and other deployments are expected to apply the patch quickly.

A system administrator ran a TLS check against apod.nasa.gov and found the site's certificate chain shows a validity window starting in late 2026, issued via Let's Encrypt. The odd future-dated dates have drawn amused attention from tech observers, who note that such entries usually point to certificate misconfiguration or overlapping issuer logs rather than anything nefarious. NASA has not commented on the quirk.