search

Snipaste / feedback

Feedback & wiki for Snipaste https://snipaste.com
2.94k stars 193 forks source link

OpenSSL libs included in latest MS Store package reportedly vulnerable, deprecated v1.1.1 #2946

Open MfMpEng opened 1 month ago

MfMpEng commented 1 month ago

Contact Details

No response

What happened?

libcrypto-1_1-x64.dll libssl-1_1-x64.dll

are deprecated by openSSL authors in lieu of version 3.3.3. Trusted updated precompiled ported c binaries are available via the openssl official site wiki. If these are an inclusion from the QT framework and not included directly by snipaste project, please disregard I'll take this issue upstream.

Platform

Microsoft Store

Version

Name="45479liulios.17062D84F7C46" ProcessorArchitecture="x64" Publisher="CN=B80E3F07-3BEE-46F7-9B4C-A2E23B97D30E" Version="2.9.1.0"

liulex commented 1 month ago

Thanks for reminding. I will upgrade to OpenSSL 3.3.0 in the next release.

MfMpEng commented 1 month ago

Thanks, Le! Great software :)