Upgrade OpenSSL to 1.1.1l from 1.1.1k

Description
It looks like OpenSSL is used in the Zoom SDK.
Scanning the framework, I found a reference to 1.1.1k in the MobileRTC (Zoom SDK)

zoom-sdk/5.7.1.643/lib/MobileRTC.xcframework/ios-arm64_armv7/MobileRTC.framework/MobileRTC: OpenSSL 1.1.1k  25 Mar 2021

As per the latest updates/issue fix by Open SSL :
OpenSSL Security Advisory [24 August 2021] - SM2 Decryption Buffer Overflow (CVE https://www.openssl.org/news/secadv/20210824.txt).

Please let us know does the OpenSSL 1.1.1I is already upgraded in the latest iOS Zoom SDK
OR any plans to do this upgrade in the upcoming release.

Thanks
Rituraj S.

Hey @rituraj_zoom,

Thanks for using the dev forum! It is nice to see you again.

We are checking what version we are on now.

Thanks!
Michael

Hello @Michael_Condon,

Any update for us on the current version used?

Well, if not using the upgraded version 1.1.1I in any of the mobile iOS zoom SDK.
Can you add this item to future SDK updates?

Thanks
Rituraj

Hey @rituraj_zoom,

We are currently on 1.1.1k and are planning to update but do not yet have a timeline.

Thanks!
Michael

Hello @Michael_Condon,

Thanks for confirming the version currently in use.
We hope the upgrade to 1.1.1I will be in upcoming releases.

Thanks
Rituraj S.

Hey @rituraj_zoom,

Sounds good, will let the team know.

Thanks!
Michael

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.