PrestoSoft Community

Hello

The OpenSSL-Libraries, included with actual and up-to-date ExamDiff (Pro) (PlugIns), are very old versions and maybe vulnerable.


- 1th case ...

In the (default) path:

"c:\Program Files\ExamDiff Pro\Plug-Ins\cURL\"

is the v0.9.7.7 (32-bit), wich means v0.9.7g.

c:\Program Files\ExamDiff Pro\Plug-Ins\wget\wget-1.10.2b\


- 2nd case ...

In the (default) path:

"c:\Program Files\ExamDiff Pro\Plug-Ins\wget\wget-1.10.2b\"

is the v0.9.7.7 (32-bit), wich means v0.9.7g.


The actual version of the 0.9.x branch is 0.9.8ze.


For more information see URL: https://www.openssl.org/


Greetings,
Alpengreis

Looking at http://curl.haxx.se/docs/vulnerabilities.html, it's a moving target. But point taken: we will upgrade curl and Wget to the latest versions with the next build of ExamDiff Pro.

psguru wrote:Looking at http://curl.haxx.se/docs/vulnerabilities.html, it's a moving target.

Ohh, I see ...

psguru wrote:But point taken: we will upgrade curl and Wget to the latest versions with the next build of ExamDiff Pro.

Okay, and thank you for fast reaction!

Have a nice weekend!