search

forcedotcom / SalesforceMobileSDK-iOS-Dependencies

Hosts the binary dependencies of the Mobile SDK for iOS
BSD 3-Clause "New" or "Revised" License
5 stars 10 forks source link

openSSL out of date #26

Open shawn-butler-tavant opened 10 years ago

shawn-butler-tavant commented 10 years ago

POODLE: https://www.us-cert.gov/ncas/alerts/TA14-290A recommends OpenSSL 1.0.1 users should upgrade to 1.0.1j.

Current version included in SDK appears to be 1.0.1g

khawkins commented 10 years ago

We'll be updating OpenSSL for our next release. All of the security fixes for the past several OpenSSL releases have focused around secure network transport bugs. We use OpenSSL exclusively for its encryption facilities for secure storage. Thanks for reporting, though. We'll post here when we've updated to the latest.