Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Old, EoL OpenSSL library (1.1.1s) used in latest MeshAgent #235

Open
mwllgr opened this issue Mar 28, 2024 · 0 comments
Open

Old, EoL OpenSSL library (1.1.1s) used in latest MeshAgent #235

mwllgr opened this issue Mar 28, 2024 · 0 comments

Comments

@mwllgr
Copy link

mwllgr commented Mar 28, 2024

Hello,

the bundled OpenSSL library hasn't been updated in a while (two years!), last update was in commit 9d38b7e.
The currently used version seems to be 1.1.1s which is EoL since one year now: https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/index.html

OpenSSL 1.1.1 was released on 11th September 2018, and so it will be considered EOL on 11th September 2023. It will no longer be receiving publicly available security fixes after that date.

I don't think that it's too hard to update the libraries stored in the openssl/ subfolder, but I am in no means experienced in C, but I think it's really important that we update libraries like these as I already mentioned at #214. Just thought that it'd be better to open a separate issue for the OpenSSL library.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant