Actions
Bug #3894
closedInstallers for Windows includes outdated OpenSSL version
Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Start date:
03/15/2015
Due date:
% Done:
0%
Estimated time:
Description
The 3.3.4 RC1 released last October is shipped with OpenSSL 1.0.1g on Windows. As can be seen on this page, there are ~20 CVEs closed after 1.0.1.g.
It seems that Wt 3.3.4 will be released soon. I hope it won't be shipped with an outdated and insecure OpenSSL version.
Updated by Wim Dumon about 9 years ago
- Status changed from New to Resolved
I've started a compile with an updated openssl right now, so yes normally we ship with new openssl.
BR,
Wim.
Updated by Koen Deforche about 9 years ago
- Status changed from Resolved to Closed
Actions