Security Issue in Openssl files

Open zeiseiwogn opened this issue 10 months ago • 2 comments

Hello, the used files from Openssl in PacketSender Version v8.8.9 have an security issue. c:\program files\packetsender\libssl-3-x64.dll - Version: 3.0.15.0 c:\program files\packetsender\libcrypto-3-x64.dll - Version: 3.0.15.0 Updates from Openssl are aviable. So please update the files in your next Version of PacketSender.

Best Regards Christian

May 02 '25 12:05 zeiseiwogn

I typically just use the OpenSSL library provided to me by the GUI engine. It seems they have not updated it in a few years. If there is still no update by the time I am ready to make a new release, I will investigate compiling OpenSSL from source.

Thanks for bringing this to my attention.

May 04 '25 23:05 dannagle

Just an FYI... you can delete those DLLs and Packet Sender will fallback to using the SSL libraries provided by Windows (called "Secure Channel").

May 18 '25 19:05 dannagle