[osgeo4w-dev] [osgeo4w] #852: Vulnerable OpenSSL v3.0.14 DLLs exist in OSGEO4W install

[OSGeo4W]

#852: Vulnerable OpenSSL v3.0.14 DLLs exist in OSGEO4W install
----------------------+----------------------------
Reporter:  ascottwwf  |       Owner:  osgeo4w-dev@…
    Type:  defect     |      Status:  closed
Priority:  normal     |   Component:  Package
 Version:             |  Resolution:  invalid
Keywords:             |
----------------------+----------------------------
Changes (by jef):

 * resolution:   => invalid
 * status:  new => closed

Comment:

 Not reproducable.

 Fresh install of python3-core and openssl:
 {{{
 PS C:\Users\WDAGUtilityAccount> $files =
 'libcrypto*.dll','libssl*.dll',’*openssl.exe’
 >> cd 'C:\OSGeo4W\'
 >> Get-ChildItem $($files) -Recurse -Force -ErrorAction SilentlyContinue |
 Select-Object * -ExpandProperty VersionInfo | Sort-Object
 ProductVersion,FileVersionRaw,Filename | Select-Object
 ProductVersion,FileVersionRaw,Filename,FileDescription,CompanyName,LegalCopyright
 | ft -auto

 ProductVersion FileVersionRaw FileName
 FileDescription CompanyName
 -------------- -------------- --------
 --------------- -----------
 3.0.15         3.0.15.0
 C:\OSGeo4W\apps\Python312\DLLs\libcrypto-3-x64.dll OpenSSL library The
 OpenSSL Project...
 3.0.15         3.0.15.0
 C:\OSGeo4W\apps\Python312\DLLs\libssl-3-x64.dll    OpenSSL library The
 OpenSSL Project...
 3.0.15         3.0.15.0       C:\OSGeo4W\bin\libcrypto-3-x64.dll
 OpenSSL library The OpenSSL Project...
 3.0.15         3.0.15.0       C:\OSGeo4W\bin\libssl-3-x64.dll
 OpenSSL library The OpenSSL Project...
 PS C:\OSGeo4W>
 }}}
-- 
Ticket URL: <https://trac.osgeo.org/osgeo4w/ticket/852#comment:1>
OSGeo4W <http://trac.osgeo.org/osgeo4w>
OSGeo4W is the Windows installer and package environment for the OSGeo stack.