search

yartat / MP-MediaInfo

Mediaportal MediaInfoLib wrapper
Other
45 stars 21 forks source link

CVE-2022-3602 OpenSSL security notice and MediaInfo.Core.Native dotnet c# package #45

Open Dunge opened 2 years ago

Dunge commented 2 years ago

There's a security advisory of an important OpenSSL vulnerability between version 3.0 and fixed in 3.7.

MediaInfo.Core.Native nuget end up including libssl-3-x64.dll version 3.1 in my application publish directory, so the file is flagged as affected by the security notice.

Any chance an updated nuget package can be published with the fixed OpenSSL release 3.7?